Who validates the access token OAuth?
I have followed this article
https://www.c-sharpcorner.com/article/web-ap/
Everything is working as expected, however
I am not getting one thing that after getting access token when i am sending get request with the token, how is it validated?
Is there something hidden?