All API requests must include a valid access token. This token encodes information about the scopes the user has authorized and determines which API operations your application is allowed to perform on the user’s behalf.
Here’s a summary of the steps involved in the OAuth authorization flow using expiring access tokens:
Prerequisites
REST API OAuth authorization code flow
Here’s a summary of the steps involved in the authorization flow for access tokens: