Facebook docs: Facebook Platform supports two different OAuth 2.0 flows for user login: server-side (known as the authentication code flow in the specification) and client-side (known as the implicit flow).
https://stackoverflow.com/questions/9067947/facebook-access-token-server-side-vs-client-side-flows