User
7. show user resources
3. Username+Password+client id+client secret
8. return access token and refresh token
Resource Owner Password Credentials Grant
5. Redirect to redirectURL+authorization code
1. User visit client
4. Redirect to redirectURL+token
Implicit grant
2. return access token
User Agent
How to use token
2. Redirect to the authorization page+client id+redirectURL
Authorization code grant
5. finish
7. Authorization code+client id+client secret
3. UserName+Password+client id+redirectURL
Client Server
4. return access token and refresh token
Login
6. use code get token
8. View and read
1. client id+client secret
Client Credentials grant
3. return access token
2.Username+Password
6. return user resources
Resource Server
10. finish
4. verify access token
OAuth Server
Shiro Login
2. request to visit userresources
5. verify result
9. return tokens
4. Return authorization code
3. visit user resources request+ access token
