Search:

I'm not sure if this is correct. I googled it a bit more, and it sounds like request token is used by the client to identify itself to the server. Is that right?

I don’t understand why do we need both access token and request token. Wouldn’t having only access token be sufficient enough?

For example, in the Oauth workflow I read from...