I'd like to ship a working example of using the explicit authentication flow in Stack.PHP. I have no trouble embedding the API key and app ID in the example. The problem lies in embedding the client secret - which is not supposed to be divulged at all.
I initially thought that using the implicit authentication flow might be the best way to ship an example - but alas, the implicit flow returns the access token in the URL's hash. PHP (being exclusively a server-side language) has no means of accessing the hash of a URL. Therefore the example cannot use the implicit flow.
What are the options available for my example?