No. This is wrong. Implicit is deprecated in favor of authorization_code + PKCE