Hi Luisa

Thank you for your feedback and compliments. It is great to hear that my blog helped you to understand the OAuth 2 flows.

Regarding your question, actually the Consumer credentials were indicated to represent that you have to eass them as Basic Authorization header.

[1]: https://tools.ietf.org/html/rfc6749#section-4.3.1