http://oauth.vk.com/blank.htmlc token in the hash, to get it you can just, being "above" the user's browser. Web extension installed in the user's browser or the whole of your application on any Electron with the component of the browser will be able to obtain such data. In normal browser it does not do: alien domain.
users.get()on the token: returns data of the user that issued the token.
Find more questions by tags VKontakte