In the OAuth protocol, a service consumer will ask a user to authorize a request token in the service provider domain, then exchanges the request token for a access token from the service provider.
I'm wondering why OAuth is designed to have two tokens in the protocol.
Why not just use one single token in this process? That is, the user would authorize the token, and the service consumer would retrieve info from the provider with the token.