Announcing APIs and EventSub for Polls and Predictions

[Dist]

@tduva

so it should be possible on Twitch’s side to both log which mod performs an action and even how they perform it (which client id the token is from), so they could immediately be unmodded.

But that’s not currently how things work. There is no way for a broadcaster to see what apps someone else has connected, or permissions granted. So until Twitch implement something along those lines it IS a security issue letting mods delegate permissions to a channel that they mod for, without the broadcasters consent. If you wish to request this feature, post it on Uservoice https://twitch.uservoice.com/

@tduva

I’d rather not add more complexity and more possible points of failure than necessary, but instead put time into improving the experience for my (and thus Twitch’s) users.

Then use Twitch’s first party mod dashboard and tooling for creating polls/predictions. As has previously been discussed if the current implementation doesn’t meet your needs then it’s best put on Uservoice so that Twitch can see what your use case is and what demand there is by developers for that. And who knows, if people had voted for this use case on Uservoice prior to these endpoints being released maybe Twitch would have considered such functionality at launch.

@tduva

And if we go that route of building an intermediary API that forwards API requests from mods on the broadcaster’s behalf, then all those actions would appear to be performed on the broadcaster’s behalf. So even if it shows who performs an action on Twitch directly, it wouldn’t show the mod’s name. The broadcaster would have to look up who performed the action on the dashboard of the third-party tool (assuming logs like that exists there).

Most importantly, should mistakes happen the broadcaster (who is the account that’s liable here) can instantly disconnect the app. Doesn’t matter which mod used the app (or if the app acted on it’s own without intervention from a mod), the broadcaster themselves has the capability to kill the connection.

Yes, it would be nice if mods could use the permissions they have more readily in 3rd party tools (or better yet, if Twitch themselves had better tooling), but as it CURRENTLY STANDS it is not something that’s secure, and can put a channel at risk. Yes there are things Twitch can do to make it a viable option, but those are separate features from these specific endpoints and should be requested on Uservoice, and ideally discussed somewhere more appropriate than this announcement thread.