OAuth Flow

oauth-flow.wsd

@startuml


[Web Browser] --> [Service Provider] : Get /my-data
[Service Provider] --> [Web Browser]: Permit to authenticate with identity.com/oauth?
[Web Browser] --> [Identity Provider]: Can you authenticate me, use clientid, scope and give me Auth code
[Identity Provider] --> [Web Browser]: You are authenticated, authcode `code`
[Web Browser] -->[Service Provider]: Please use the code and fetch details
[Service Provider] -->[Identity Provider]: Use auth code,  clientid, client secret  and return access token
[Identity Provider]-->[Service Provider]: Take the access token
[Service Provider]-->[Identity Provider]: Take clientid, client secret, access token and return user details
[Identity Provider]-->[Service Provider]: Here is user profile
[Service Provider]--> [Web Browser]: here is the data you asked

@enduml