I run a server.
- Send people to id.Twitch
- They come back to my server
- JS on that page grabs the token
- JS redirects to a custom protocol://token
- Desktop app captures the token
Same server also handles my download links/app assets.
But concievable the JS could run on a GitHub pages page if you wanted to have no server of your own.