title: oauth2 server user registration
body: <p>I am by no means an oauth2 expert and am open to suggestions.Ok, I have setup an Oauth2 server and I am having a problem deciding on the flow when registering a new user from an application.</p>
  
  <p>The user registration form sits on the client and not on the oauth2 server.</p>
  
  <p>1.user goes to example.com/register</p>
  
  <p>2.user fills in the form and clicks send</p>
  
  <p>3.I send a request to my oauth 2 server with the client_credentials grant and scope to receive an token on behalf of the client/app.</p>
  
  <ol start="4">
  <li><p>I send a request to POST /users/register with the form values using the token from the previous request.</p></li>
  <li><p>If registration has failed I list the validation rules in a json array.</p></li>
  </ol>
  
  <p>6.If registration was successful i use the scope originally used to generate the new access token for the user.This is then returned.The user is also flagged as inactive in the db.</p>
  
  <p>7.I have to activate the user somehow and send a request to GET /users/activate using my user token ftom the previous requst.</p>
  
  <p>My question is,does this flow sound right and what should i send as the link in for the activation email?</p>
  
  <p>Your response would be appreciated.</p>