The following steps show a ;high-level flow of a typical OAuth authentication:
- The application requests that the user authorizes access to API resources.
- When the ;user provides access, the application receives an authorization grant.
- The application provides user authorization grant and its own client credentials to the authorization server.
- If the authentication is successful, the authorization server responds with an access token.
- The application calls the API (the resource server) that provides the access token for authentication.
- If the access token is valid, the resource server returns the details of the resource.