Chat auth token annoying, constant refreshing

[BarryCarlyon]

@tduva

It makes sense for many apps, but my problem is how would a purely clientside non-web IRC client handle refreshing a token?

Implicit auth. And when the token expires, go thru the oAuth loop.

Implicit goes:

GET https://id.twitch.tv/oauth2/authorize
    ?client_id=<your client ID>
    &redirect_uri=<your registered redirect URI>
    &response_type=<type>
    &scope=<space-separated list of scopes>

So no “Secret” just a ClientID

@tduva

Going through the whole authorization process every 12 hours isn’t feasible either for a non-web client where it is pretty intrusive.

Both agree and disagree, if you do it with force_verify off, most users won’t notice the oAuth jump.