Understanding OAuth

From the Giraffe App, user clicks icon directing them to the Moose App. Stuff happens in the background: Giraffe passes information (a key?) to Moose.

User at Moose says yes, Giraffe is authorized. Giraffe passes information back to Moose (the lock?).