What do you mean by hash token?? Are you referring to PKCE (which is an extension to OAuth)?