When your application sends a request with an access_token, the resource server will need to validate it. For more on this, see Validate Access Tokens.