One Connect

You are adding One Connect to this application. Its users will grant the app scoped, revocable access to their own tools. The package does the OAuth work; you wire three things: a button, two routes, and the calls made with the grant.

Browser                    Your backend                          One
<ConnectButton>  ------>   GET /api/one/authorize   ---302--->  hosted page: sign in, pick tools, set access
                           GET /api/one/callback    <--302----  ?code&state
                             saves the grant for the user, redirects home
                 <------   onSuccess fires
Later:                     oneConnect.runAction(userId, ...) -> One, grant enforced

The client secret and the connect key stay on the server.

1 - Choose the mode