Pass the oauth you get back to https://api.twitch.tv/kraken/ to verify the scopes for the key:
{
"token": {
"valid": true,
"authorization": {
"scopes": [
"channel_check_subscription",
"channel_subscriptions",
"user_read"
],
"created_at": "2017-05-19T13:15:56Z",
"updated_at": "2017-05-19T13:15:56Z"
},
"user_name": "SOMEONE",
"user_id": "SOMEID",
"client_id": "ACLIENT"
}
}
then read authorizations/scopes check the scopes match and then do the PUT
204 No Content is correct, 204 means “created” and in some cases will contain a follow up location in headers (normally to the created responses) so there should be no “body data”
I’ve not needed any scopes yet since my privater caster applications I already have oAuth’s stored for their bots. So can’t comment on the rest (I may build a test flow for it later)