OAuth 2.0 (RFC 6749)

1. Roles and protocol flow

   Resource owner, client, authorization server and resource server and the abstract flow.

2. Authorization grants

   Authorization code, implicit, resource owner password and client credentials grants.

3. Client types and registration

   Confidential vs public clients, client identifiers and redirection URIs.

4. Authorization endpoint

   Authorization request parameters, response_type, redirect_uri and state.

5. Token endpoint

   Token requests, client authentication and grant_type.

6. Access token scope

   Requesting and granting scope values.

7. Authorization code grant

   Authorization request, code response and exchange for tokens.

8. Client credentials grant

   Machine-to-machine token acquisition.

9. Issuing and refreshing access tokens

   Access token responses, error responses and refresh token usage.

10. Security considerations

    Client impersonation, CSRF on redirect, open redirectors and token leakage.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.