twitchdev / issues

Issue tracker for third party developers.
Apache License 2.0
73 stars 6 forks source link

The 50 token rule - missing #986

Open BarryCarlyon opened 2 months ago

BarryCarlyon commented 2 months ago

Brief description

The rule about token generation limits is missing from the Authentication guide

Expected documentation

Information about when you generate token 51 it will kill token 1.

https://dev.twitch.tv/docs/authentication/

Additional context or questions

Not sure when it went missing

ConnorKrammer commented 1 month ago

There's a paragraph—somewhat out of the way—under the "Refreshing Access Tokens" page that mentions the 50-token limit, but it doesn't actually say what happens to existing tokens when you try to generate the 51st token. It just says "the request fails".

If that's untrue and the request actually succeeds, causing an earlier-generated token to be revoked, then this paragraph needs to be updated as well. (I notice that this paragraph is unchanged since at least April 2022; any chance that it was correct back then, but wrong and out of date now?)

Edit: Maybe this paragraph has never been correct, or not for a long time. I found a thread on the Twitch dev forum that mentions the revocation behaviour, and it was posted in Jan. 2022, a few months before the earliest Wayback Machine snapshot of the paragraph that I linked above was taken: https://discuss.dev.twitch.com/t/should-i-reuse-access-tokens/36518/2