title: How do OAuth access tokens work for API requests?
body: <p>I've created a custom OAuth provider using <a href="https://github.com/pelle/oauth-plugin" rel="nofollow">oauth-plugin</a>. I'd like to create a provider API that gives access to user data, but I'm not sure how to properly construct the API query.</p>
  
  <p>I've noticed that several Omniauth strategies, including <a href="https://github.com/arunagw/omniauth-twitter/blob/master/lib/omniauth/strategies/twitter.rb#L32" rel="nofollow">Twitter</a>, <a href="https://github.com/skorks/omniauth-linkedin/blob/master/lib/omniauth/strategies/linkedin.rb#L38" rel="nofollow">Linkedin</a>, and <a href="https://github.com/lomography/omniauth-vimeo/blob/master/lib/omniauth/strategies/vimeo.rb#L35" rel="nofollow">Vimeo</a>, access user data from their respective APIs via <code>access_token.get</code>, but these calls to the API seem to be generic, rather than specific to a particular user.</p>
  
  <p>Does something within the <code>access_token.get</code>call identify the user to the API? If not, how is the user discerned?</p>