Should the Auth token and/or client ID be secret?

API
11

Oh yeah, you have to LITERALLY send people to Twitch (via get) for Step 1 of oAuth.

This is an implicit auth example that illistrates the flow

Step 1 for you would be the same (link to Twitch)

1 Like