OAuth 2.0 Authorization Provider — Internal Platform
TokenSmith is the internal OAuth 2.0 provider for the platform. It handles authorization flows and issues access tokens to registered client applications.
Clients initiate the implicit grant flow via the authorization endpoint:
GET /oauth/authorize ?client_id=<client_id> &redirect_uri=<redirect_uri> &response_type=token &state=<state>
The server issues a token and redirects to redirect_uri with ?token=<token>.