Profile

Token can also arrive via ?access_token= URL or parent iframe postMessage.