diff --git a/OAuth2.md b/OAuth2.md index 11a68f8..d81348f 100644 --- a/OAuth2.md +++ b/OAuth2.md @@ -289,11 +289,7 @@ app.listen(3000, () => { # 4. [Frontend] Use the Token -Once the backend exchanges the `code` for the `access_token`, - -incude these tokens to POST reponse recieved from frontend, - -so that the frontend can use it to make authenticated requests to the backend or Google APIs +The frontend receives the tokens from the Backend response, so to make authenticated requests to the backend or Google APIs

Frontend HTTP GET Request to Backend

@@ -305,7 +301,7 @@ Authorization: Bearer access-token-from-backend
-#### ↴ Step 5 takes place here: The Backend request the user data from Google using the Tokens +**↴** Step 5 takes place here: The Backend request the user data from Google using the Tokens

Backedn HTTP Response to Frontend