A user wants profile data from an app.
- User makes a request to a client (website, mobile app, etc).
- Client (may) redirect the user to auth server login form.
- User logs into the auth server.
- Auth server validates previous credentials and returns an access token to the client.