https://connect2id.com/learn/oauth-2#:~:text=The%20access%20token,-The%20OAuth%202.0&text=A%20resource%20server%20validates%20such,is%20cryptographically%20protected%20against%20tampering. Four roles
