Adding on to this request, are there any plans to potentially add a “groups” scope to OAuth? For example, this would allow the application to perform requests on groups the user owns
3 Likes
I checked and it’s covered in the same work I mentioned in this post: [Public Beta] Building Your Applications with OAuth 2.0 - #102 by Hooksmith
4 Likes
Got it, did not see that. Were there any previous mentions of an analytics API (as I mentioned in my previous post)?
4 Likes
The vision is all these features should be available through Open Cloud some day but it’s going to take us a while to get there.
Unfortunately I did not see mention of analytics API in the immediate priority list of stuff to implement, but I noted down and forwarded your post above (as well as all other requests on this thread).
5 Likes
Is there any plans to allow us to get the users email?
4 Likes
Answered in [Public Beta] Building Your Applications with OAuth 2.0 - #88 by Hooksmith
No plans to do this at the moment. There’s a large security/privacy burden here that we would need to overcome. I wouldn’t expect it happen soon or at all at this time.
5 Likes
Gotcha, thanks for the update. Was curious just so for a discourse instance I no longer would have to ask for email and have email verification. Hopefully this will come one day.
5 Likes
Can you build websites wit oauth2 or something like that
5 Likes
Depends on what you define as “build”. Websites are where you can see OAuth2 commonly because it is often used as a quicker log in however OAuth2 is not the only thing you need to build a website.
What OAuth2 is, is basically just a way for you to easily have someone give a third party app permission to access and use resources someone has.
5 Likes
Ok and what can the 3 party apps be
4 Likes
Third party apps is anything which is outside of Roblox basically. So for example websites, phone apps, bots.
5 Likes
Sall i so can add my own website
5 Likes
Yea that should work if you where to add it to your site. You basically just need to direct the user when they click a button or something such as that to the URL where the user gives authentication (you just then follow either one of the authentication flows and get the refresh token and access token).
5 Likes
I’ve been working on setting up one of the projects I work on to use the new Roblox OAuth 2.0 infrastructure, but unfortunately I’ve hit a few problems with defining redirect URLs.
The comment underneath the textbox for redirect URLs states that " Must have secure SSL certificate (starts with https://) unless host name is localhost". I have a locally trusted certificate (self-signed) for localhost and HTTPS is mandatory for my application but not permitted as a redirect URL - it seems to only accept localhost without https. HTTPS should be optional (but maybe encouraged) for localhost, not forbidden! My code just doesn’t listen to HTTP other than to immediately use a 302 to upgrade to HTTPS, so I can’t currently use localhost as a development URL.
As a consequence, I currently can’t build my test integration with Roblox. Can this be investigated and resolved?
5 Likes
Thanks for the feedback, we’ll tweak that (heard the same feedback last week internally).
An easy workaround for now for testing is to define it as http:// in your app settings, and just add the “s” in browser bar manually when you hit the void localhost uri, to actually get to your app.
6 Likes
This is resolved now, you can use HTTPS with localhost and custom ports now for redirect URIs.
7 Likes
I’ve submitted my app for verification but it has been declined for an invalid redirect URL, even though it works completely fine when I navigate to it. Can this be looked into please?
5 Likes
Could you resubmit it? We did some relaxing on the moderation policy for redirect URLs recently. Let me know in DM if it’s still getting rejected (please DM me your client ID if so).
5 Likes
Having fixed the redirect URLs (thanks @Hooksmith for your help) I’m now randomly receiving errors from authorize.roblox.com when signing in:
Authorization Error
Argument does not respect the defined limits.
Please contact the owner of the application for help.
Which argument, and which limits? Is there anywhere I can see log output or similar to diagnose this issue?
9 Likes
If you go into the network console you should be able to look at the network payloads and figure this out. The error message there will have the parameter name (if it’s about a specific parameter).
If you need help please send me a fully formed authorization URL in DMs and I can take a look for you.
5 Likes