Access user information from third-party app?

That is the purpose of oAuth

Your bot dashboard will provide a way for the broadcaster to provide their token
Then moderators login to the dashboard and you use the braodcaster token to check of the logged in user is a mod of that channel.

An example in nodeJS that demonstrates this “logic” of dual tokens