<!-- Load once, anywhere in your page -->
<script src="https://auth.cobinar.com/sdk/cobinar-auth.js" defer></script>

<!-- Place wherever you want the button -->
<div
  data-cobinar-signin
  data-client-id="YOUR_CLIENT_ID"
  data-scope="openid profile email"
  data-callback="onSignIn"
  data-theme="dark"
  data-size="lg"
></div>

<script>
  function onSignIn(result) {
    // Send result.code to your server to exchange for tokens
    console.log('Auth code:', result.code);
  }
</script>

<script src="https://auth.cobinar.com/sdk/cobinar-auth.js"></script>
<script>
  CobinarAuth.init({
    clientId: 'YOUR_CLIENT_ID',
    scope:    'openid profile email',
    onSuccess(result) {
      // POST result.code to your server
      fetch('/api/auth', { method:'POST', body:JSON.stringify({code:result.code}) });
    },
    onError(err) { console.error(err); }
  });

  CobinarAuth.renderButton('#myDiv', { theme:'dark', size:'lg' });
  // Or trigger from any click:
  document.getElementById('btn').addEventListener('click', () => CobinarAuth.signIn());
</script>

<!-- Link to this URL -->
<a href="https://auth.cobinar.com/oauth/authorize
  ?response_type=code
  &client_id=YOUR_CLIENT_ID
  &redirect_uri=https://myapp.com/auth/callback
  &scope=openid profile email
  &state=RANDOM_STATE">Sign in with Cobinar</a>

// Server-side: exchange the code (Node.js)
const tokens = await fetch('https://auth.cobinar.com/oauth/token', {
  method: 'POST',
  body: new URLSearchParams({
    grant_type:    'authorization_code',
    code:          req.query.code,
    redirect_uri:  'https://myapp.com/auth/callback',
    client_id:     process.env.COBINAR_CLIENT_ID,
    client_secret: process.env.COBINAR_CLIENT_SECRET,
  })
}).then(r => r.json());