Javascript Auth blocked by CORS

Step 1 of user oAuth his to REDIRECT the user to Twitch. Don’t fetch it yourself.

has an example of Implict auth, which is what token is for.

Na step 1 is redirect to Twitch, OP tried to fetch it instead of redirecting the user