Please enable JavaScript.

Coggle requires JavaScript to display documents.

Discord Linking Process - Coggle Diagram

- - - - The email, token, and distribution queries on the URL are provided by the game and are required to ensure that the user who is attempting to link their game has a valid account
        
        The validation of these credentials is done via requesting the Game Transfer's API, choosing a specific API depending on if the distribution is the stable or beta build, and then providing the email and token to the decided API
        
        After validation is successful, semblance.services' API will generate a new "state" that will be both utilized by discord's oauth that will be redirected to soon and by the oauth handling step. This is to ensure that the user who is authorizing themselves will safely be able to authorize themselves.
        
        After the "state" is created, the given email and token that was used for the pre-validation will be inserted into a "claims" and encrypted to ensure no readability by anyone else other than the server
        
        Now the response will be built via redirecting the user to discord's oauth to retrieve access to modifying user connections, before the redirect though, 2 new cookies will be created, "clientState" and "secretClaims". They will contain "state" and "claims" respectively.
        
        user connections are generally things you connect to your discord account, like github, youtube, twitch, and so on. The authorized access to modify user connections is a way for people to create custom connections for their profile
        
        After the user has authorized themselves through discord's oauth that was redirected to, they'll be redirected to "semblance.services/oauth-callback" to handle the authorized data given by discord.
        
        1 more item...
- - - - creates a custom token using the provided email and token and encrypting it and then fetches for a an account that has a matching custom token with the one created
        
        Updates the found user with the given game data
- - - - To ensure the given user credentials is of an account that has actually linked up with discord, it'll fetch for a user with the old custom token to see if a linked account exists
        
        The user's linked account will finally be updated with the new custom token to ensure they're able to continue using the "Update Stats" button without any issues with the authorization not finding a linked account