-Authentication was one of the difficult things to do in this application. In v0.0.1, users had to enter their bot tokens. After talking with API contributors to get their opinion, it was removed in favor of authentication using client ID and client secrecy. This allows the application to generate and store an oAuth2 token with the scope `applications.commands.update` only, without having to store the bot token. Note that in any case, this application does not need a backend to work. All requests are made with the client (only through a CORS proxy, whose URL is configurable), so the risk of token hacking is almost null (someone would have to install a virus on your computer, and they would then only have access to an oauth token with the scope `applications.commands.update`).
0 commit comments