justintv / Twitch-API

A home for details about our API
www.twitch.tv
1.72k stars 381 forks source link

Optional "email" field for the scope "user_read" #652

Open kitce opened 7 years ago

kitce commented 7 years ago

I do not really need the "email" to authenticate the user in my application.

Can I make it optional on server side or let the user disable the "email"?

3ventic commented 7 years ago

Why do you need user_read? You can authenticate a user with no scopes and use the root endpoint to get the user's name and ID.

kitce commented 7 years ago

I cannot proceed without the "scope" parameter.

When the user authorizes my application at https://api.twitch.tv/kraken/oauth2/authorize, the server responds 401 with the message "Token invalid or missing required scope".

3ventic commented 7 years ago

You can define an empty scope for the authorization part.

kitce commented 7 years ago

https://api.twitch.tv/kraken/oauth2/authorize?scope= does not work either.

3ventic commented 7 years ago

With all the required parameters? https://api.twitch.tv/kraken/oauth2/authorize?response_type=code&client_id=5hm5...&redirect_uri=https%3A%2F%2Ftwitchstuff.3v.fi%2F...%2F&scope=&force_verify=true is one I actually use.

kitce commented 7 years ago

Does it give your users a browser redirect on {redirect_uri}?code={code}&scope=?