The Resource Owner Password Credentials (ROPC) Grant Type

It is a temporary solution - designed for legacy apps in 2012 > is fully deprecated

Client app is impersonating the user negating all the benefits given by OAuth