APIs that give third-party applications access to user data, need to have a way to verify that the user has truly authorised the client to access the information. There comes