OAuth callback with php, what am I doing wrong?

BarryCarlyon · July 25, 2020, 6:26pm

Your URL is malformed

$url = 'https://id.twitch.tv/oauth2/token';

You you should be using cURL not file_get_contents. FGC is normally blocked from making HTTP requests on most providers for security reasons

Provides a PHP example

github.com

BarryCarlyon/twitch_misc/blob/main/authentication/user_access_generator/php/index.php#L38

    
      
              session_destroy();
              header('Location: /');
          
          
    exit;
          } else if (isset($_GET['code']) && $_GET['code']) {
              // we have a code on the address line so lets parse and exchange
          
          
    // validate the state/nonce
              if (isset($_SESSION['nonce']) && isset($_GET['state']) && $_SESSION['nonce'] == $_GET['state']) {
                  // lets exchange the code for an access token
                  $ch = curl_init('https://id.twitch.tv/oauth2/token');
                  curl_setopt($ch, CURLOPT_POST, true);
                  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
                  curl_setopt($ch, CURLOPT_POSTFIELDS, array(
                      'client_id' => CLIENT_ID,
                      'client_secret' => CLIENT_SECRET,
                      'code' => $_GET['code'],
                      'grant_type' => 'authorization_code',
                      'redirect_uri' => REDIRECT_URI
                  ));

Line 38 onwards specifically