diff --git a/OAuth2-Backend-Approach.md b/OAuth2-Backend-Approach.md index 5eee6b5..7f9b9db 100644 --- a/OAuth2-Backend-Approach.md +++ b/OAuth2-Backend-Approach.md @@ -30,8 +30,8 @@ A way for the `user` to tell `google` to give an access to `xorismesiti.gr` app 3. Use Token - 1. Front **GET** profile data from Back using the `cookie` - 2. Back **GET** profile data from Google using the `access_token` from Front `cookie` + 1. Front **GET** profile data from Back `https://xorismesiti.gr/api/auth/profile` using the `cookie` + 2. Back **GET** profile data from Google `https://www.googleapis.com/oauth2/v3/userinfo` using the `access_token` from Front `cookie` 3. Google **response** to Back with profile data 4. Back **response** to Front with profile data