Since most types expect a client secret and I can’t store one in the client (and because the token needs to be able to act on belhalf of the user), I’ve set my Oauth client type to “Public” and the grant type to “resource owner password based”, it should work like that.
Thanks for the support, everyone! I’ll look at an emoji/rune board drawing option for the adventurous, I don’t see why not.