For example, to enact a GET request on a REST web service, given an access token AAA...ZZZ, the client makes the following HTTP request: 


GET https://api.company.com/user HTTP/1.1
Authorization: Bearer AAA...ZZZ

This will provide the access token to the resource server, which can then validate the token, verify the scope or the request, the identity of the resource owner and the client and perform the appropriate action if authorized.