How to validate/confirm that embedded widget app is using the Auth code flow type authorization.

How to validate/confirm that embedded widget app is using the Auth code flow type authorization.

We have updated the secret key in the Iframe script to change to Auth code type instead of Implict. But wanted to validate in browser or so to confirm it is using the Auth code type authorization flow.