Use these pages as reference documentation when implementing the implicit grant flow in your application. Adapted from The OAuth 2.0 Authorization Framework specification [RFC 6749].
A: The client application initiates the flow by sending the user's user-agent to the appropriate authorization endpoint.
B: The authentication server of the service provider authenticates the resource owner and attempts to gain consent by presenting the user consent form.
C: Assuming the user grants consent, the authorization server redirects the user back to the client application via the redirection endpoint provided in the authorization request. The redirection endpoint will include the access token in the URI fragment.
D: The user-agent proceeds with the redirection, stripping the fragment and retaining the properties locally.
E: The client serves a web page that is capable of parsing the fragment and extracting...