OAuth2 for websites ( Sign in with Chess.com )

Sort:
Eyal282

I need this for my discord bot for quick authentication, I hope someone has an answer for this issue. If Chess.com has OAuth2, it completely lacks documentation for it.

https://github.com/eyal282/Chess-ELO-Discord-Bot

Martin_Stahl

I'm guessing the site does not make that available for things like that and may not be using that at all.

aboody_alawadhi
كتب Eyal282:

I need this for my discord bot for quick authentication, I hope someone has an answer for this issue. If Chess.com has OAuth2, it completely lacks documentation for it.

 

https://github.com/eyal282/Chess-ELO-Discord-Bot

sorry I can't

Eyal282
Martin_Stahl wrote:

I'm guessing the site does not make that available for things like that and may not be using that at all.

I want them to enable this. I went directly to Chess.com support and got referred here. Whether or not it's a bad decision by support to automatically ignore the clear feature request I am unsure, but here I am.

WhiteDrake

Chess.com allows logging in with a Google account, Apple ID (both of which use OAuth) or Facebook (not sure what Facebook uses).

Eyal282
WhiteDrake wrote:

Chess.com allows logging in with a Google account, Apple ID (both of which use OAuth) or Facebook (not sure what Facebook uses).

 

I cannot prove you own Magnus Carlsens account in any way without Chess.com using OAuth2 itself

WhiteDrake
Eyal282 wrote:
WhiteDrake wrote:

Chess.com allows logging in with a Google account, Apple ID (both of which use OAuth) or Facebook (not sure what Facebook uses).

 

I cannot prove you own Magnus Carlsens account in any way without Chess.com using OAuth2 itself

I cannot prove I own Magnus's account even with OAuth2 tongue.png

Eyal282
WhiteDrake wrote:
Eyal282 wrote:
WhiteDrake wrote:

Chess.com allows logging in with a Google account, Apple ID (both of which use OAuth) or Facebook (not sure what Facebook uses).

 

I cannot prove you own Magnus Carlsens account in any way without Chess.com using OAuth2 itself

I cannot prove I own Magnus's account even with OAuth2

 

Eyal282#1334

 

Add me, try using that logic against my bot.

 

WhiteDrake

I'm not trying to use anything against your bot. I'm pretty sure the Chess.com developers haven't implemented their own OAuth service (or any other similar authorisation service). If they did, I'd be kind of worried about the security of their implementation because the site isn't known for flawless code. frustrated.png

I'm sure a people would appreciate it, though, considering how many chess streams are there on Twitch and Youtube.

Eyal282
WhiteDrake wrote:

I'm not trying to use anything against your bot. I'm pretty sure the Chess.com developers haven't implemented their own OAuth service (or any other similar authorisation service). If they did, I'd be kind of worried about the security of their implementation because the site isn't known for flawless code.

I'm sure a people would appreciate it, though, considering how many chess streams are there on Twitch and Youtube.

I have already confirmed they have it, but it's not public.

WhiteDrake
Eyal282 wrote:
WhiteDrake wrote:

I'm not trying to use anything against your bot. I'm pretty sure the Chess.com developers haven't implemented their own OAuth service (or any other similar authorisation service). If they did, I'd be kind of worried about the security of their implementation because the site isn't known for flawless code.

I'm sure a people would appreciate it, though, considering how many chess streams are there on Twitch and Youtube.

I have already confirmed they have it, but it's not public.

Have you reached out to the chess.com developers? For example, you could PM the SA of this club. I'm only aware of the API that has been published. 

Eyal282
WhiteDrake wrote:
Eyal282 wrote:
WhiteDrake wrote:

I'm not trying to use anything against your bot. I'm pretty sure the Chess.com developers haven't implemented their own OAuth service (or any other similar authorisation service). If they did, I'd be kind of worried about the security of their implementation because the site isn't known for flawless code.

I'm sure a people would appreciate it, though, considering how many chess streams are there on Twitch and Youtube.

I have already confirmed they have it, but it's not public.

Have you reached out to the chess.com developers? For example, you could PM the SA of this club. I'm only aware of the API that has been published. 

I reached the only person who didn't immediately redirect me - founder of Chess.com - erik. I reached him because 3 years ago he replied to someone regarding OAuth2.

ogwoziu

I guess you can use existing API to get user profile, then check if specific adnotation exists in his description. For example thatUser@discord.bot I think there are aready few services doing that.

Eyal282
ogwoziu wrote:

I guess you can use existing API to get user profile, then check if specific adnotation exists in his description. For example thatUser@discord.bot I think there are aready few services doing that.

That's already used, but it's bad.

They intend to let me use their OAuth system, but I still asked them to make it public.