in app/controllers/user_sessions_controller.rb [22:42]
def callback
unless is_oauth_state_valid?(params[:state])
redirect_to new_user_sessions_path
return
end
token = client.auth_code.get_token(params[:code], redirect_uri: callback_user_sessions_url).token
@user_session = UserSession.new
user = @user_session.authenticate(access_token: token)
if user && sign_in(user)
return_to = get_ouath_state_return_to(params[:state])
redirect_to(return_to || root_path)
else
@error = 'Invalid credentials'
render :new
end
end