# Simplified OAuth 2 workflow for dummies (me!)

### User case
A user wants profile data from an app.

### Workflow
1. User makes a request to a client (website, mobile app, etc).
2. Client (may) redirect the user to auth server login form.
4. User logs into the auth server.
5. Auth server validates previous credentials and returns an access token to the client.
6. Client sends the access token to the app.
7. App asks to the auth server if the token is valid.
8. Auth server validates the token and returns info to the app (TODO complete which kind of information returns, exp date ...)
9. App provides data to the client.