title: What OAuth2.0 flow to use to secure my Rest API?
body: <p>I have a Rest API that is used by different clients: </p>
  
  <ul>
  <li>Browser, when using swagger  </li>
  <li>Postman, when calling API  </li>
  <li>Curl </li>
  <li>Other HttpClients, jvm, Python and such. </li>
  </ul>
  
  <p>I want all clients to get authenticated with Azure AD. So each of them has to have an email, authenticate itself in front of Azure AD and then pass some token to my Rest API, on the backend I will validate the token. I really don't understand which flow to use. The one that is closest to my scenario seems to be Credentials Flow but I still don't understand how it fits in.
  This picture is what I am trying to achieve: 
  <a href="https://i.stack.imgur.com/IXTHG.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/IXTHG.png" alt="enter image description here"></a></p>