OAuth + PKCE

Start

POST /oauth/init

{
  "provider": "google" | "twitter" | "telegram",
  "redirect_uri": "https://yourapp.example/callback",
  "state": "random-string",
  "code_challenge": "base64url_sha256(code_verifier)"
}

Response

{ "client_id": "string", "url": "https://provider.example/oauth/authorize?..." }

Callback → Redirect to client

<redirect_uri>?wallet_oauth_provider=<provider>&wallet_oauth_state=<state>&wallet_oauth_code=<code>

Finalize

POST /login

{
  "type": "GoogleOAuth",
  "data": { "state": "<state>", "code": "<code>", "code_verifier": "<code_verifier>" }
}