* In the response of the /api/get-captcha endpoint, add the parameters "owner" and "name" because these two parameters will be used when calling the /api/verify-captcha endpoint.
* The /login/oauth/access_token api supports the token and id_token grant types.