In the Three-Legged OAuth2 Process, After the Authorization Server Presents

Multiple Choice

In the three-legged OAuth2 process, after the authorization server presents a form to the resource owner to grant access, what is the next step?

A) The resource owner authenticates and optionally authorizes with the authorization server.
B) The user who owns the resource initiates a request to the OAuth client.
C) If the resource owner allows access, the authorization server sends the OAuth client a redirection.
D) A form to allow or restrict access is submitted by the owner of the resource.