OAuth tokens authorize a user's access to resources. In other words, they do not authenticate users, but are used by the service provider to authorize access on behalf of the user to other resources. An OAuth transaction occurs when a user requests permission from another resource using their service provider identity. The resource will request permission from the service provider, which is given in the form of a request token and a secret. Next, the resource redirects the user to their service provider to authenticate the request. At this point, the resource exchanges the request token for an access token and a secret. If the two tokens share the same secret, the OAuth process is complete, and the user has successfully delegated access for the resource to the service provider.