diff --git a/OAuth2.md b/OAuth2.md index d48094d..c7b311f 100644 --- a/OAuth2.md +++ b/OAuth2.md @@ -1,12 +1,12 @@ OAuth2 Flow: -1. User clicks "Login with Google" on your platform (xorismesiti.gr). -2. Authorization Request: Redirect to Google's authorization endpoint, requesting the user's profile and email. -3. User Login and Consent: User logs in to Google and grants permissions. -4. Authorization Code Response: Google redirects back to your platform with an authorization code. -5. Access Token Request: Exchange the authorization code for an access token. -6. Access Protected Resources: Use the access token to fetch the user's Google profile and email. -7. Token Refresh (Optional): If the token expires, use the refresh token to get a new access token. +1. **User clicks** "Login with Google" on your platform (xorismesiti.gr). +2. **Authorization Request**: Redirect to Google's authorization endpoint, requesting the user's profile and email. +3. **User Login and Consent**: User logs in to Google and grants permissions. +4. **Authorization Code Response**: Google redirects back to your platform with an authorization code. +5. **Access Token Request**: Exchange the authorization code for an access token. +6. **Access Protected Resources**: Use the access token to fetch the user's Google profile and email. +7. **Token Refresh** (Optional): If the token expires, use the refresh token to get a new access token. # 1. Authorization Request (User Initiates Login)