From f9af5b89badb2b1a813cd368fc3a6a055ee1968a Mon Sep 17 00:00:00 2001 From: Ste Vaidis Date: Sun, 15 Dec 2024 19:18:24 +0200 Subject: [PATCH] Update OAuth2-Front-Approach.md --- OAuth2-Front-Approach.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/OAuth2-Front-Approach.md b/OAuth2-Front-Approach.md index 84b7378..7a10ada 100644 --- a/OAuth2-Front-Approach.md +++ b/OAuth2-Front-Approach.md @@ -43,7 +43,7 @@ A way for the `user` to tell `google` to give an access token to `xorismesiti.gr 1. A button "Login with Google" redirects the user to the Google's authorization endpoint `accounts.google.com/o/oauth2/v2/auth` 2. After the redirection, the user will log in to Google and grant permissions (if they haven’t already). -3. Google will redirect the user back to your redirect_uri `https://xorismesiti.gr/callback` with an authorization code `?code=` +3. Google will redirect the user back to your redirect_uri `https://xorismesiti.gr/callback` with an authorization code `?code=ABC123` *Security: the state string should be validated upon receiving the response from Google, as it ensures that the response corresponds to the request.* @@ -277,7 +277,7 @@ app.listen(3000, () => {
-### 2.3 Front +### 2.3 Frontend The frontend gets the tokens from the backend response,