Skip to main content
FoN supports OAuth 2.0 authentication with major providers.

Supported Providers

OAuth Flow

OAuth authentication follows the standard flow:
1

Initiate OAuth

Redirect the user to the OAuth initiation endpoint:
2

User Authenticates

User authenticates with the OAuth provider (Google, Apple, or Meta)
3

Callback

Provider redirects back to FoN’s callback endpoint with authorization code
4

Session Created

FoN creates a session and redirects to the application with authentication cookie set

Implementation

Web Applications

For web applications, simply link to the OAuth endpoint:

Single Page Applications

For SPAs, open a popup or redirect:

Mobile Applications

For mobile apps, use a webview or in-app browser:

After OAuth

After successful OAuth authentication:
  1. A session is created on FoN
  2. An auth-token cookie is set
  3. The user is redirected to your application
Use the Check Status endpoint to verify authentication:

Notes

  • OAuth creates or links to a FoN account
  • If the OAuth email matches an existing account, it’s linked
  • Users can have multiple OAuth providers linked to one account
  • MFA can still be enabled alongside OAuth