API Key Question

The oAuth dance occurs as follows:

  1. User goes to your website
  2. User clicks login
  3. Send user to Twitch
  4. User auths the app
  5. User is redirected to the specified URL
  6. You grab the code and exchange it for a token
  7. You use the token for API Requests.

For your question I assume you refer to the step 5 redirect URL. That would be the page that is expecting a ?code=foo to perform the login functions and code/token exchange.

So that would be page on your website. https://example.com/somecallback for example