Roles OAuth defines four roles: Resource owner (the user) Resource server (the API) Authorization server (can be the same server as the API) Client (the| OAuth 2.0 Simplified