// oauth_server.js - OAuth2 provider issuing tokens in fragment
const express = require('express');
const app = express();

app.get('/authorize', (req, res) => {
    const redirectUri = req.query.redirect_uri;
    const state = req.query.state || '';
    // Simulate user approval: redirect with access token in fragment
    const token = 'secret_access_token';
    res.redirect(`${redirectUri}#access_token=${token}&state=${state}`);
});

app.listen(3000, () => console.log('OAuth server on :3000'));