The user would logged in to the app where they provide their credentials.
First step is, authenticate this user by passing their credentials into this authentication service.
The authentication service would return an AuthData containing the access token, refresh toke, authorization type, and time of expiry.
Upon having those data, user can now access any APIs just by setting the Authorization headers!