I am trying implement OAuth2 authentication with JWT tokens. If I understand, I need send credentials to authorization server, this verify my credentials, and return back si
I will try to answer with an example: suppose you want to write a great and cool web application that can manage GMAIL accounts as well as Google-calendar data together, somehow. Apparently, your users will have to sign in with their google's credentials, so your app can get their data and manage it. Your application manages the data of the users, without getting the users' credentials.
So far so good.
In this example, the Authorization-Server is Google Accounts. The Resource Server is Google-Main and Google-Calendar (both of them) and the Client is your application.
Hope that makes sense.