Yeah, github OAuth doesnt support a web client only flow, so you at least need a backend to forward along the response to the client.

It's pretty much just that cross site requests are disabled.