OAuth 2.0 and "Sign in with Google", step by step
What happens between clicking "Sign in with Google" and landing back on the site signed in: the authorization code flow, PKCE, state, the ID token, and the mistakes that let someone else's login become yours.
CodexBash, , 6 min read
"Sign in with Google" takes one click for the user and about six messages between three parties behind the scenes. Most tutorials show you which library to install. This one follows the messages, because once you can see them, every setting in the library stops being magic and every security warning starts to make sense.
Sign in to read the rest
The whole 6 minute article is free with an account, along with every problem, lesson and tutorial. No card.