I’d probably just
- use token against users API (as that doesn’t need parameters) to get ID / display
- then call get followed streams to get follows streams with the ID form the previous call
Then I’m just storing the token. And use the call to get users as a validate.