You need a secret to get a refreshable token, unless you provide somewhere a server to go get a token for users to copy/paste, ignoring the use of implicit auth where the token expires after a set time (and is not refreshable) and makes it “fun” if you/broadcaster are throwing your output in a OBS browser source, as apposed to window capture, for broadcasters to interact with when they need to reauth.
Yes your solution will work, but being client side, you are making it not as user/broadcaster friendly as it could be.