At my company we have implemented the OAuth auth flow which does not use the deprecated password-based API authentication. However we use Ringcentral's Web Phone JavaScript SDK which, as far as I can tell, still implements the password-based flow?

I've opened a GitHub Issue on the SDK's repo; whether here or there, I would really appreciate it if someone at RC could confirm or clarify if I am misunderstanding. Thank you.