Authorization server

Definition
An authorization server "validates the credentials and redirects user back to the client with an authorization code. The client talks with the authorization server, confirms its identify and exchanges the authorization code for an access token and optionally a refresh token."