Does OAuth Deep Linking Support

[linliyuan]

Currently, it appears that the operation at https://discord.com/oauth2/authorize requires re-login via a web page. Is it possible to directly open this authorization link on a mobile device, so that it opens the Discord mobile app without needing to log in again through the web page?

[Rodentman87]

We do have some support for deep linking that page, however, depending on the type of OAuth flow you're trying to do, we intentionally don't deep link it. For our special OAuth flows that add apps to your server or account (the bot and applications.commands scopes), those can and are deep linked. If you're seeing that these types of flows aren't being deep linked, please open an issue on the docs repo here so we can take a look.

For any actual OAuth flows used to grant access to your account (all other scopes), we intentionally don't deep link into the app because it is extremely likely to break the entire OAuth flow for various reasons.

Technical details of the things that can go wrong when trying to deep link an OAuth flow:

• The first and biggest reason is we actually can't reliably send the user back to the right browser. On both iOS and Android we can deep link the user, but once the user is in the app, we have no idea which browser they came from so we can't send them back to the place that has the necessary state (cookies, localstorage, etc) on the external page to finish the process.
• The second reason is that some OAuth flows rely on us keeping the entire flow within a specific tab in the browser. There's no way to send the user back to a specific tab either, especially because the deep link is handled in such a way where the tab is never even opened. So even if we could send them back to the right browser, we couldn't handle this case either.

[linliyuan]

We are a gaming company, and we are currently working on integrating Discord login for our players. Ideally, we would like players to be able to click the Discord login button on our login page, which would then open the Discord client. After completing the authorization, we would receive the player's information. If deep linking is not supported, players would need to enter their credentials, which is quite cumbersome. Could you please provide any recommendations or solutions for this scenario?

[erkinalp]

Alternative solution: Implement GNAP #4544