Oauth + 2FA with Electron

You are correct in that implicit grant flow does not need the client secret. I seem to remember someone else having the redirect issue on these forums close to a year ago, but I can’t find the thread or remember the solution.