Noobie here ! Got the Code - Got the Token - But who is it?

For oAuth it’s pretty straight forward

  • user comes to your website
  • they click login with service
  • then get sent to service
  • they click yes/no
  • they come back with a ?code
  • exchange the code for a token
  • user the token with the relevant service endpoint to get the users data

That works for pretty much any oAuth service, you just drop in the URL’s for the service.