originally posted in:BungieNetPlatform
Heyo!
I've been enjoying the neat apps that have come out of the Destiny api and I figured I'd give it a go. Thanks to everyone for the help on getting up to speed on how things work.
I have a log in flow that seems to work alright, but I don't know if it's the official way to authenticate a user. Is there any place I can look to get more info besides piecing together fragments from other threads? It feels weird to handle a user's email and password for their PSN / XBOX account directly.
I've written what I have so far in a gist, attached above, for the benefit (hopefully) of others.
Thanks for the help!
-
Even though it works and there isn't any other way to do it, that method of authentication is unsupported. Nevertheless, you absolutely should not be handling authentication details as a third party. It's obviously fine if you own the account, but anyone else's details you shouldn't be touching or asking for.