The first sample flow that we discussed in the OAuth 2.0 example flow for signing in with Twitter depicts an authorization code grant. We'll add a few more steps for the complete flow. As you know, after the eighth step, the end user logs in to the Quora application. Let's assume the user is logging in to Quora for the first time and requests their Quora profile page:
- After logging in, the Quora user clicks on their Quora profile page.
- The OAuth client Quora requests the Quora user's (resource owner) resources (for example, Twitter profile photo, and so on) from the Twitter resource server and sends the access token received in the previous step.
- The Twitter resource server verifies the access token using the Twitter ...
