Login with Twittor
Let people sign in with their Twittor account
OpenID Connect with no libraries: your site sends the person here, they confirm in the Twittor app, and you get a signed id_token with their name, username and, if they agree, their phone number.
How it works
Authorization code with PKCE
Send people to /auth with client_id, redirect_uri, scope, state and a PKCE challenge, then exchange the code at /token with your Client ID and Secret.
No libraries
Plain OpenID Connect: a link, a redirect and one POST to /token. Nothing to install, no script to add to your page.
Confirm in the app
The person opens Twittor from the link or the QR code and picks the code shown here, so a copied link cannot be used to sign someone else in.
Signed tokens
RS256, ES256, EdDSA or ES256K, as you choose for the login. Keys are published at /.well-known/jwks.json.