tokens: ['in', 'a', 'third', 'party', 'domain', '', 'WWSF', 'obtains', 'authorization', 'token', '', 'General', 'The', 'WWSF', 'requests', 'an', 'authorization', 'token', 'from', 'the', 'WAF', 'The', 'WWSF', 'or', 'the', 'WAF', 'authenticates', 'the', 'user', 'via', 'web', 'credentials', 'ie', 'credentials', 'as', 'commonly', 'used', 'for', 'access', 'to', 'web', 'based', 'services', 'for', 'example', 'a', 'username', 'and', 'password', 'The', 'WWSF', 'can', 'choose', 'not', 'to', 'authenticate', 'the', 'user', 'if', 'the', 'user', 'is', 'to', 'remain', 'anonymous', 'Example', 'of', 'OAuth', '', 'When', 'using', 'the', 'example', 'of', 'OAuth', '', 'then', 'the', 'following', 'authorization', 'flows', 'defined', 'by', 'OAuth', '', 'is', 'used', '', 'Client', 'Credentials', 'flow', 'The', 'WAF', 'authenticates', 'only', 'the', 'WWSF', 'and', 'the', 'authorization', 'is', 'performed', 'without', 'user', 'involvement', 'As', 'part', 'of', 'the', 'authorization', 'the', 'WAF', 'verifies', 'that', 'the', 'WWSF', 'has', 'the', 'necessary', 'permissions', 'to', 'access', 'the', 'IMS', 'account', 'indicated', 'in', 'the', 'request', 'It', 'is', 'assumed', 'that', 'the', 'WWSF', 'has', 'authenticated', 'the', 'user', 'prior', 'to', 'sending', 'the', 'token', 'request', 'unless', 'it', 'is', 'a', 'case', 'of', 'anonymous', 'access', 'granted', 'by', 'the', 'WWSF', 'In', 'the', 'example', 'of', 'OAuth', '', 'the', 'authorization', 'token', 'is', 'an', 'access']