Looking for a little pointer. I’m working integrating the OAuth2 CFC found in Forgebox, but I’m having some trouble seeing how to tie it into my session management. Looking at the doc pointer, there appears to have been a good starter doc here: http://www.progratory.com/index.cfm/2014/10/31/Getting-started-with-oauth2-for-Google, but that’s now gone 404. I’ve downloaded and set up the OAuth2-Examples from Forgebox, but I’m still a bit confused as to how to just use our Google Domain as the OAuth2 source for our SIS app (which I wrote in CF). I’ve looked for any YT videos or CFCasts, but nothing available. Any good documentation or examples pointers would be greatly appreciated.

if it helps... http://web.archive.org/web/20180723003201/http://www.progratory.com/index.cfm/2014/10/31/Getting-started-with-oauth2-for-Google

The example app in Forge box saves the auth token in the application scope instead of the session scope and that was throwing me a bit…

Well better not to use session scopes in a stateless application which uses oAuth. You cannot match the exact timeouts of either which would be a problem in the long run. Plus you would need to maintain or force some kind of session management in a stateless application which disrupts the whole point of a stateless application.