OAuth authorization code flow isnt working

BarryCarlyon · December 27, 2020, 5:13pm

BarryCarlyon/twitch_misc/blob/master/authentication/user_access_generator/php/index.php#L44



// validate the state/nonce
if (isset($_SESSION['nonce']) && isset($_GET['state']) && $_SESSION['nonce'] == $_GET['state']) {
    // lets exchange the code for an access token
    $ch = curl_init('https://id.twitch.tv/oauth2/token');
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, array(
        'client_id' => CLIENT_ID,
        'client_secret' => CLIENT_SECRET,
        'code' => $_GET['code'],
        'grant_type' => 'authorization_code',
        'redirect_uri' => REDIRECT_URI
    ));

    // fetch the data
    $r = curl_exec($ch);
    // get the information about the result
    $i = curl_getinfo($ch);
    // close the request
    curl_close($ch);

Query string parameters are found in $_GET