Next steps

On This Page

When your application passes a request with an access_token, the resource server needs to validate it. See Validate access tokens.


The following web application examples show you the Authorization Code flow, as it would be implemented by a web app that needs to authenticate the end user and then create a local session for that user. These projects use popular web frameworks to handle the heavy lifting. Each project can be cloned and ran locally.

Framework Example Repository
ASP.NET Core (opens new window)
Express.js (opens new window)
Spring (opens new window)