OIC Integration exposed based on OAuth2

Hi,

I want to expose a Rest API built in Oracle Integration Cloud with a third party system. This API will follow the OAuth2 protocol, so when the third party system calls the API, they need to pass the Token to access the API. My understanding of creating the flow is as below:

1. Create a Custom Rest API in OIC to get the auth token from IDCS (/oauth2/v1/token) by passing the Client Id and Client secret. So the third party application will call this custom API to get the Auth Token by passing the client id and secret.