Node.js is widely used as a backend for SPAs. SPAs that use an OAuth2 flow usually open a popup with the authorization URL. So the whole authorization part is handled client-side.
I think it should be possible to make the authorizationURL optional, since in the case of SPAs, it's of no use on the server.
Node.js is widely used as a backend for SPAs. SPAs that use an OAuth2 flow usually open a popup with the authorization URL. So the whole authorization part is handled client-side.
I think it should be possible to make the
authorizationURL
optional, since in the case of SPAs, it's of no use on the server.