validateAuthorizeRequest($request, $response)) { $response->send(); killme(); } // display an authorization form if (empty($_POST)) { return '
'; } // print the authorization code if the user has authorized your client $is_authorized = ($_POST['authorized'] === 'yes'); $oauth2_server->handleAuthorizeRequest($request, $response, $is_authorized); if ($is_authorized) { // this is only here so that you get to see your code in the cURL request. Otherwise, // we'd redirect back to the client $code = substr($response->getHttpHeader('Location'), strpos($response->getHttpHeader('Location'), 'code=')+5, 40); echo("SUCCESS! Authorization Code: $code"); } $response->send(); killme(); } }