I have simple REST API, based on Asp.Net Core technology.
Now, I want to add OpenID for this API.
API would be used from mobile applications, single page applications and possibly other API services (not necessary).
It seems that I need Authorization flow, or Implicit, or even Hybrid, but as far as I understand, that when you use them, user needs explicitly set agreement with flows rights requirements. That's not what I want, flow must be invisible for user.
So, what flow should I choose?