Looking for some clarification. I’m making an iOs app to get general, non-user related info from the API, this means I need to use app access tokens.
From the OAuth client credentials flow guide, “app access tokens are only for server-to-server API requests”.
Does this mean I can’t request app access tokens directly from my app; is my only option to log users in and use ‘user access tokens’ instead? What are my alternatives, if any, to accessing general twitch info directly from my app without the need to sign in? Thank you.
Correct as you would leak your client secret
Either that, or you App calls your server and the server makes the request to Twitch.
No alternatives are available. To call the API requires a token. (Token type will depend on the data being accessed, but public data will work with an App Access/Client Creds token)
- None, you can’t call the API
- You ask the user to sign in with Twitch, to get a token to use locally
- Your app connects to your/a server and calls the API using an app access token.
Server is anything web based capabile of recieving a request from a thing, generating and using an App Access Token and calling the API. (Just make sure that you secure the app → server connection as well)
Thank you for clarifying.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.