The OAuth Mental Model

Four roles (memorize these) OAuth names four actors. Everything else hangs off them. flowchart TB RO["Resource Owner<br/>(the user)"] AS["Authorization Server<br/>(Keycloak, Okta, Google, Auth