SharePoint 2013: Make app-only policy type calls in a remote app (REST)
Uses the AllowAppOnlyPolicy attribute and makes app only policy type calls. It uses OAuth to call back into SharePoint Server. The sample uses Representational State Transfer (REST).