You can create strategies to handle OAuth.

This is my repo to log in with google, you can access the auth module to check it out. the solution I'm doing is FE will call the API from BE to redirect to Oauth page, and the callback will call your BE, your BE will redirect to FE, and return the token and use it