About
A web-server-based application is a confidential client running on a web server.
resource owner (ie end user) access the client via an HTML user interface rendered in a user-agent on the device used by the resource owner.
The client credentials as well as any access token issued to the client are stored on the web server and are not exposed to or accessible by the resource owner.