This should help you a bit more, especially the video linked there, it explains the general logic of oauth: