#Generic OIDC Connect - Twitch.tv

3 messages · Page 1 of 1 (latest)

languid anvil
#

Hi Team, I am setting up Twitch.tv as an authorization provider for Cloudflare Access using Generic OIDC. The twitch documentation is found at https://dev.twitch.tv/docs/authentication/getting-tokens-oidc/

When attempting to test the configuration, I get an error related to the scope. {"status":400,"message":"invalid scope requested: 'email'"}

The current scope is &scope=openid+email+profile but twitch wants to see user:read:email. Is there any way to modify the scope for this?

Twitch Developers

Using OIDC to get OAuth Access Tokens

valid saffron
#

I dont think you can change the default scopes it requests as those are standard. One thing you can do though is set the authorize endpoint to a worker that just redirects with email replaced with the correct scope.

This is what I do with AWS Cognito because Cognito also doesnt support Twitch not following the standard 😅

languid anvil
#

Ok thanks I'll try that MeowHeartCloudflare