OAuth2 can be difficult. In this article, you not only get an in-depth look at the different concepts but also learn how to implement a proper authentication flow in a modern web application.
https://adevait.com/laravel/api-authentication-with-laravel-passport
https://adevait.com/laravel/api-authentication-with-laravel-passport