Hello, I need to store the information to get a new access_token in a $_SESSION[’’]. If I encrypt the session containing the refresh_token. Would this be a problem? Would hacking information such as client_secret or client_id be a problem?

You would have to use javascript to capture the token from the URL, and then pass that token to your server. Generally speaking implicit auth is for use when you don’t have a server, and with a server you would generally use “regular” oAuth, https://dev.twitch.tv/docs/authentication/getting-tokens-…

Jean-Gaspard_Segard April 11, 2021, 9:33pm 9

Thank you very much !!

Save user information