[frizlab]

I have implemented OAuth both as a client and a server. The most complicated part is the scattered documentation, and little gotchas from different providers. In itself, the whole thing is not complex.

[user3939382]

> The whole thing is not complex

Meanwhile https://www.couchbase.com/blog/wp-content/uploads/2021/05/oa...

[magicalhippo]

That's just a very confusing diagram of the process, which has multiple separate boxes for the same entities.

The diagram on Microsoft's page[1] for that exact same scenario/flow is much clearer IMHO.

[1]: https://learn.microsoft.com/en-us/entra/identity-platform/v2...

[everybodyknows]

The diagram shows five boxes, apparently each representing a server, but I am not at all clear on which (of exactly two?) legal business entities controls certain of those servers.