OAuth

How to Implement Login with GitHub Safely

A practical server-side GitHub OAuth login flow using state validation, authorization code exchange, GitHub user lookup, and a local session.