Editing OAuth (section)

== Authentication Flow ==
A typical authentication flow works as follows:

# The application resolves the user's identity to find their PDS
# The application creates a cryptographic key pair for the session
# The application sends an authorization request to the PDS
# The user is redirected to their PDS to approve the request
# The PDS returns an authorization code to the application
# The application exchanges the code for access and refresh tokens
# The application uses the access token for API requests