IGBD only access with token

[BarryCarlyon]

@neldain

If I want to reuse said token for a given user, I would have wanted to store it in their cookies and refetch a new token once the first one has expired.

DO NOT DO THIS

A token that can call IGDB’s API doesn’t belong to the user, and shouldn’t be visible to users.

@neldain

However, this token does not come with a refresh_token given that it is intended for server to server only

When an app access token expires, just make a new one

@neldain

Looking into the general twitch doc, I figure out that I needed to get the user to authorize my app however the app itself doesn’t need any of their twitch user data, which then seems overkill (and with the app I am building, very inconvenient) to have user grant access.

Not for IGDB no, IGDB only supports App Access Tokens.

So all requests for IGDB should work as follows:

• users visits your website and is logged out of Twitch to your site
• user makes a request for a game
• your website calls your backend
• the backend makes a call to IGDB keeping the Token hidden form the user.

@neldain

Is there something I am missing? A way to make multiple call with the same token without needing the user to give my app permission to read their data since I do not need their data?

IGDB doesn’t work with users tokens so getting a user token does not help you access IGDB data.

IE: the front end doesn’t directly call IGDB.
Your front end calls your backend and the backend proxies the request to IGDB