OAuth

CakeAuth provides seamless integration with popular OAuth providers, allowing your users to authenticate using their existing social accounts.

Supported Providers

Currently, CakeAuth supports the following providers:

• Google
• GitHub

The list of supported providers are growing overtime.

How It Works

1. The process begins when a User requests access from the Client
2. The Client sends an authorization request to the OAuth Providers (e.g Google, or GitHub)
3. If the user isn't logged in:
   • OAuth Providers prompts the user for login
   • User provides their credentials
4. User grants consent for the requested permissions
5. After that, the OAuth providers will call a callback to the set callback target (by default to CakeAuth servers)
   • OAuth Providers exchanges the code with CakeAuth for a token
   • CakeAuth sends back both an access token and session token to the Client
6. Finally, the user is authorized

After the initial authentication process is done, the client follows the default token refresh mechanism.

Next Steps