How do I create a user using OAuth2?
<p>I am using <a href="https://www.djangoproject.com/" rel="nofollow">Django</a> with a <a href="https://django-tastypie.readthedocs.io/en/latest/" rel="nofollow">Tastypie</a> library, and the <a href="https://github.com/evonove/django-oauth-toolkit" rel="nofollow">Django-OAuth-Toolkit</a>, and a <a href="https://github.com/orcasgit/django-tastypie-oauth/blob/master/tastypie_oauth/authentication.py" rel="nofollow">Tastypie authentication for the Django-OAuth-Toolkit</a>.</p>

<p><strong>Disclaimer:</strong> There is a chance I am totally wrong about all of this. If so, please correct me and guide me towards the less ignorant. </p>

<p><strong>Main Question:</strong> How do I create users securely?</p>

<p><strong>My Understanding:</strong> </p>

<ul>
<li>In order to <code>get</code> or <code>post</code>, the client needs a token.</li>
<li>In order to get a token, <a href="https://django-oauth-toolkit.readthedocs.io/en/latest/tutorial/tutorial_01.html#authorize-the-application" rel="nofollow">they need to login</a>. </li>
<li>In order to login they need a user account.</li>
<li>In order to make an account they need token.</li>
<li><em>In order to make an account they need to login?</em> </li>
</ul>

<p>I am left in a struggle trying to figure this out. Do I make it when the client tries to make an account it does not need OAuth2? Or is there a way to use OAuth2 without a login that only lets the client create accounts?</p>

<p>Any help is much appreciated!</p>