Who validates the access token OAuth?

Question

I have followed this article https://www.c-sharpcorner.com/article/web-ap/ Everything is working as expected, however I am not getting one thing that after getting access token when i am sending get request with the token, how is it validated? Is there something hidden?