Barry Carlyon

Adjust the readme to make it more obvious that this is a user authentication example and not suitable for things were a user login is not practical/sensible

**Brief description** If you have a ClietnId that is confidentical If you use DCF to get a token with out a client secret involved. And you do get a valid...

**Brief description** If you try to https://dev.twitch.tv/docs/api/reference/#update-conduit-shards on a conduit that doesn't exist You get a generic 404 "not found" rather than a "conduit not found" **How to reproduce** Try...

**Brief description** Get Creator Goals, will return a goal that is either of the bits goal but the type is blank Example from the API: ```json { "data": [ {...

Invalid CSRF token: Too confusing for a User.

7

**Brief description** Occasionally, when you perform step 1 of oAuth (redirect user to Twitch to allow/deny an account link) A JSON blob is returned in the body: {"error":"Invalid CSRF Token"}...

OIDC WellKnown out of date

1

**Brief description** https://id.twitch.tv/oauth2/.well-known/openid-configuration States that the scopes supported are _only_ `openid` However if you want the JWT returned by OpenID authentication to (or myinfo endpoints) contain the users verified email...

If you try to auth with _many_ scopes and you are not already logged into Twitch you get a 502

2

**Brief description** If a user is not already logged into twitch and tries to go to a id.twitch `token` get a 502 instead of redirect to login. This _only_ occurs...

**Brief description** On the automatic reward topic emote only seems to be populated on a emote obtain _if_ it's the random unlock type So `chosen_sub_emote_unlock` or `chosen_modified_sub_emote_unlock` has `null` for...

**Brief description** If you oAuth and the redirect URI is mismtached. Twitch will ignore the passed in redirect URI and redirect to the _first_ URI in the list of OAuth...

Get User Extensions returns active extensions only and not installed extension

5

**Brief description** Get User Extensions should return a list of all extensions installed to a channel Currently it only returns the active extensions. So I have no idea whats available...