OAuth API for Mobile - How to accomplish? Whitelist?

@george, is it possible that this callback code I’m getting IS the final token? I’m fairly new to OAuth and documentation is incredibly poor.