...
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
Client Application: This is the application that sends a request to a protected resource Resource Server: This hosts the protected resource (e.g. The Service provider) Resource Owner: The user who authorises an application to access their account and grants access Authorisation Server: The server that authenticates the user and issues access tokens (e.g. DualShield Authentication Server) |
The Client Application requests access to a resource. A Resource Owner gives permission in the form of an authorisation grant which is sent back to the client.
The client then sends the grant to the Authorisation Server. In return, the server sends an Access Token to the Client. The token can then be used on the Resource Server to access the protected resourse.