Pretty much.
This is one of the industry standard of obtaining delegated access to someones account.
You can use things like ngrok to reverse proxy a tunnel and use your home machine to handle the hosting.
But your discord bot should be running on hosting so it has reliability. So the same bot hosting can run the web page