tachyon-auth v32.0.0

Tachyon Auth

This package provides a client side implementation for login at Twitch. Presently, only the Device Code Flow (DCF) is supported.

There is a complementary package tachyon-auth-server which provides corresponding server side utils.

General Overview

Ultimately, login flows yield an auth-token, which is used to authenticate with services at Twitch. The auth-token is stored via cookie and read by the client and server.

We do not store a refresh token because tokens do not currently expire.

When making authenticated calls to GQL, the suggested error handling pattern for applications is to clear the auth-token storage and retry the request unauthenticated if GQL returns a 403 Forbidden status code.

DCF

Here is an overview of the relevant interpol (backing service owned by Identity) endpoints.

Tracking Spec