User oAuth is documented there.
Step 1) Redirect to twitch
Step 2) Accept applications access to your account
Step 3) user is sent back to your website
Step 4) Exchange the code for a token
You could use implicit auth, but such tokens are not refreshable automatically