Allow bots to be made aware of the user ID of connected accounts.

Commentaires

4 commentaires

  • DingleFlop

    As an addendum... This really is public data, as it stands... If I wanted to I could just self-bot if I wanted to use this data maliciously, but us law abiding bot developers can't use this info.

  • PiggyPlex

    If what you mean is getting a user's ID when adding a bot through the OAuth2 flow, this can already be achieved. You can do this by using the identify scope as well as callbacks.

    Example:

    https://discordapp.com/oauth2/authorize?response_type=code&redirect_uri=CALLBACK URL&scope=identify%20bot&client_id=BOT ID

    Make sure to set your redirect URL and add a callback on to your bot, and you're ready to go. It should add the bot and give you the basic user information, apart from the email address. To get the email address of a user, add the email scope. I hope this helped you.

  • DingleFlop

    No. Not getting a user's ID through the OAuth2 flow....


    I mean getting this publicly viewable information that Discord already grabs, using it's own OAuth/OpenID flow, and allowing bots, and not just user accounts to see it. I don't care what info the bot has during an OAuth2 flow. It's not relevant to my suggestion.

  • DingleFlop

    I am not a bot, so I can see this information, even though I am not his friend. But a bot is forbidden from viewing this information.

    I can even click the little box on his steam to bring up his profile.... and lookie there, the URL has his steam user ID.

     

     

    My alternative is to implement my own OpenID solution, get my own token from steam and force the user to authenticate a second time, despite ONLY caring about the user ID...

Veuillez vous connecter pour laisser un commentaire.