The client could then exchange the user's Facebook access token for an access token for the authorization server. Does it mean you have 2 Authorization ...
Lee mas