I have gone through the article on authentication using OAuth2 at this link: http://www.asp.net/mvc/overview/security/create-an-aspnet-mvc-5-app-with-facebook-and-google-oauth2-and-openid-sign-on
There is no mention of how authorization i.e. roles are implemented when working with OAuth2 authentication.
My understanding is that application roles would be stored in application's database just like it used to be in previous ASP.Net versions, but how would roles be implemented in code in this OAuth2 authentication situation?

Go to the complete details ...