The access token in the OAuth flow is requested from the service providing the OAuth service. You’ll need to call the service to obtain an access token by providing the information like client id.

To get a better idea have a look at: https://stackoverflow.com/questions/37674294/what-is-oauth-and-how-does-it-secure-rest-api-calls for an example