Ok, let me preface this by saying that I normally do scientific computing, nothing to do with requests or APIs. I am a bit confused about the whole information flow here.
The way that I wanted my program to work is that I run it, it creates a custom reward on a specified channel, and then a separate program (a discord bot) watches for anyone redeeming that reward so that it can do some followup actions. (give a discord role for a dedicated viewer, specifically). I am now absolutely lost on where what authentication is actually needed. I thought the server-server was enough, but I understand that it would be really dangerous since I could just do this without the permission of the streamer in question. So, considering my presumed functioning in bold, what is it that I am missing? I apologize for posing questions that might be very basic, as mentioned, this is not my area of expertise.