# `T3.OAuth`
[🔗](https://github.com/dl-alexandre/t3-elixir/blob/main/lib/t3/oauth.ex#L1)

T3 sign-in using ConduitMCP's OAuth discovery, registration, PKCE and callback handling.
Defaults to read-only scope. Tokens stay in Conduit's in-memory store unless the
caller supplies a custom `:store` in `:oauth_options`. The caller owns single-use
consumption of flows created through `begin/2`; `login/2` uses a one-shot listener.

# `begin`

Begin a sign-in for an application serving its own :redirect_uri.

# `complete`

Validate a complete callback URL and exchange its code for secret-wrapped tokens.

# `login`

Run a sign-in with a temporary loopback callback. Requires an :open URL callback.

---

*Consult [api-reference.md](api-reference.md) for complete listing*