Sandbox 101: OAuth Best Practices

[@shurvirmori]

callback part needs to be explain as live demo.

[@awful999]

so do we get authroization for our backend application and then use our backend application to communicate with the frontend? meaning customers who are using the frontend application don't need to handle the authroization screen?

[@SquareDev]

Since you need to redirect the Seller to grant you the authorization, you will need to handle part of the authorization on the frontend. The credentials you receive from the Obtain Token endpoint do need to be securely stored and only used by your backend for communicating with Square (since this token is what has access to the Seller's account, you must keep it safe).

[@joshuatrimm8213]

Well... I finally figured out how to get the 'code'. You have to use the square callback in a browser or app.

[@oldacc396]

Man I 'm fighting with this part, any help is seriously appreciated thank you!

[@jasondesmond1895]

​@@oldacc396same