Before moving further, it is important that you understand certain terminologies used in OAuth. This will provide a profound understanding of its underlying concepts. They are referred to as OAuth roles, as follows:
- Resource owner: A person or entity that can grant access to protected resources. The OAuth protocol is not limited to a person. An application to application interaction can happen with OAuth. If the resource owner is a person (or user), it is called an end user.
- Authorization server: As its name suggests, it is an entity that provides authorization, in the form of a token. After the resource owner is authenticated successfully, the authorization server will issue an access token to a client.
- Resource server: This ...