We are looking for more information on oAuth for our design. There are two important questions :-
1. OpenAM is not directly redirecting to Facebook from OpenAM Server. It is sending a 200 OK with HTML and JS files to browser, which send request to Facebook. What we are looking for is a redirect (302 ) from server itself. What we need is redirect (302) to facebook directly from OpenAM.
2. We are looking for a plug-in in oAuth2 flow that allow us to customize the state variable being sent to Facebook or other oAuth providers. In following URL
3. Is there an API in OpenAM to generate an access token?