Update OAuth2.md

This commit is contained in:
Ste Vaidis 2024-12-15 12:10:33 +02:00
parent a8a897fdc9
commit 31f65b708a

View File

@ -2,7 +2,7 @@
A way for the `user` to tell `google` to give an access token to `xorismesiti.gr` app A way for the `user` to tell `google` to give an access token to `xorismesiti.gr` app
### OAuth2 Flow: ### OAuth2 Standar Flow:
1. **User clicks** "Login with Google" on your platform `xorismesiti.gr` 1. **User clicks** "Login with Google" on your platform `xorismesiti.gr`
2. **Authorization Request**: Redirect to Google's authorization endpoint `accounts.google.com/o/oauth2` 2. **Authorization Request**: Redirect to Google's authorization endpoint `accounts.google.com/o/oauth2`
@ -12,7 +12,7 @@ A way for the `user` to tell `google` to give an access token to `xorismesiti.gr
6. **Access Protected Resources**: App uses the `access_token` to fetch the user's Google profile and email from `googleapis.com/oauth2` 6. **Access Protected Resources**: App uses the `access_token` to fetch the user's Google profile and email from `googleapis.com/oauth2`
7. **Token Refresh** (Optional): If the `access_token` expires, app uses the `refresh token` to get a new `access_token`. 7. **Token Refresh** (Optional): If the `access_token` expires, app uses the `refresh token` to get a new `access_token`.
### Summary of Tasks Split Across Frontend and Backend: ### OAuth2 Frontend/`Backend Flow:
**Frontend** **Frontend**
1. **Redirect** the user to Google's OAuth authorization endpoint. 1. **Redirect** the user to Google's OAuth authorization endpoint.