Login workflowPhotoflow Authentication and Token ManagementUser/BrowserUser/BrowserAngular FrontendAngular Frontend.NET Backend.NET BackendGoogle ServicesGoogle ServicesAuthentication Flow1. Request Login2. Redirect to Google OAuth3. Google OAuth Authentication4. Return Auth Code5. Send Auth Code6. Exchange Code for Google TokensForward code exchange request7. Return Google TokensStore both token types:- Google tokens (access + refresh)- App tokens (JWT access + refresh)Create mapping between them8. Generate App Tokens &Map to Google Tokens9. Return App Tokens10. Store App TokensTOKEN USAGE FLOW11. API Request with App TokenForward request with token12. Validate App TokenVerify JWT signatureCheck token expirationValidate claims13. Lookup Google Tokens14. Google API Call with Google Token15. API Response16. Return Response17. Display ResultsTOKEN REFRESH FLOW18. App Token Expired Request RefreshForward refresh requestCheck if Google tokensalso need refresh19. Google Token Refresh if needed20. New Google Tokens21. New App Tokens22. Update TokensLast modified: 20 December 2025The devops of PFL detailsThe Photoflow site