Is there any way to get a token with the permissions of messages VKontakte now?

Question

In contact with

Is it possible to get a token with messages rights, while setting up a redirect to my site, adding it to the trusted one, of course? In the off documentation it is written that this is not possible from the server side, but with the Implicit flow, moderation is required.

Maybe there are some loopholes?