Hello, I need to store the information to get a new access_token in a $_SESSION[’’]. If I encrypt the session containing the refresh_token. Would this be a problem? Would hacking information such as client_secret or client_id be a problem?

You would have to use javascript to capture the token from the URL, and then pass that token to your server. Generally speaking implicit auth is for use when you don’t have a server, and with a server you would generally use “regular” oAuth, https://dev.twitch.tv/docs/authentication/getting-tokens-…

Save user information

API

Jean-Gaspard_Segard April 11, 2021, 10:02pm 12

yes but the site return that