stevaidis/dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update OAuth2-Front-Approach.md

Browse Source
This commit is contained in:
Ste Vaidis 2024-12-15 23:54:21 +02:00
parent 270430feb4
commit 5033521dd6
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
OAuth2-Front-Approach.md
View File

@ -9,10 +9,10 @@ A way for the `user` to tell `google` to give an access token to `xorismesiti.gr
1. Frontend **Redirect** the user to Google's OAuth authorization endpoint `accounts.google.com/o/oauth2`
2. Google **Redirect** the user back to `xorismesiti.gr/callback` including the authorization `code`
3. Frontend **Send** the authorization `code` to the Backend
4. Backend **exchange** the authorization `code` for an `access_token` and `refresh token`
2. **fetch** user profile data from from `googleapis.com/oauth2` using the `access_token`
3. **Store** the `tokens` securely in session (front) or a database (back)
4. **Refresh** the `access_token` if it expires
4. Backend **Exchange** the authorization `code` for an `access_token` and `refresh token`
5. Backend **Send** `access_token` and `refresh token` to Frontend
6. Frontend **Store** `access_token` and `refresh token` to secure cookie
7. Frontend **Use** `access_token` to get user data from Google
<br><br><br>