About This Architecture
OAuth2 Authorization Code flow with OIDC: user authenticates with Authorization Server, grants consent, receives an auth code redirected to the client app, which exchanges it for access and refresh tokens to call the Resource Server API and UserInfo endpoint.