{"action":"created","issue":{"url":"https://api.github.com/repos/Rapptz/discord.py/issues/518","repository_url":"https://api.github.com/repos/Rapptz/discord.py","labels_url":"https://api.github.com/repos/Rapptz/discord.py/issues/518/labels{/name}","comments_url":"https://api.github.com/repos/Rapptz/discord.py/issues/518/comments","events_url":"https://api.github.com/repos/Rapptz/discord.py/issues/518/events","html_url":"https://github.com/Rapptz/discord.py/issues/518","id":216200041,"number":518,"title":"How does this log into a user account without an API token?","user":{"login":"robbie0630","id":5222372,"avatar_url":"https://avatars1.githubusercontent.com/u/5222372?v=3","gravatar_id":"","url":"https://api.github.com/users/robbie0630","html_url":"https://github.com/robbie0630","followers_url":"https://api.github.com/users/robbie0630/followers","following_url":"https://api.github.com/users/robbie0630/following{/other_user}","gists_url":"https://api.github.com/users/robbie0630/gists{/gist_id}","starred_url":"https://api.github.com/users/robbie0630/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robbie0630/subscriptions","organizations_url":"https://api.github.com/users/robbie0630/orgs","repos_url":"https://api.github.com/users/robbie0630/repos","events_url":"https://api.github.com/users/robbie0630/events{/privacy}","received_events_url":"https://api.github.com/users/robbie0630/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2017-03-22T20:38:16Z","updated_at":"2017-03-25T19:32:54Z","closed_at":"2017-03-25T01:35:54Z","body":""},"comment":{"url":"https://api.github.com/repos/Rapptz/discord.py/issues/comments/289234099","html_url":"https://github.com/Rapptz/discord.py/issues/518#issuecomment-289234099","issue_url":"https://api.github.com/repos/Rapptz/discord.py/issues/518","id":289234099,"user":{"login":"robbie0630","id":5222372,"avatar_url":"https://avatars1.githubusercontent.com/u/5222372?v=3","gravatar_id":"","url":"https://api.github.com/users/robbie0630","html_url":"https://github.com/robbie0630","followers_url":"https://api.github.com/users/robbie0630/followers","following_url":"https://api.github.com/users/robbie0630/following{/other_user}","gists_url":"https://api.github.com/users/robbie0630/gists{/gist_id}","starred_url":"https://api.github.com/users/robbie0630/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robbie0630/subscriptions","organizations_url":"https://api.github.com/users/robbie0630/orgs","repos_url":"https://api.github.com/users/robbie0630/repos","events_url":"https://api.github.com/users/robbie0630/events{/privacy}","received_events_url":"https://api.github.com/users/robbie0630/received_events","type":"User","site_admin":false},"created_at":"2017-03-25T19:32:54Z","updated_at":"2017-03-25T19:32:54Z","body":"OAuth2 was created in order to indirectly expose an account to a third-party website without revealing your credentials to the third-party. The OAuth2 authorization endpoint is `/api/oauth2/authorize`. Using `/api/auth/login` violates OAuth2 because a) it does not use the OAuth2 API to generate a bearer token, and b) it reveals credentials to the third-party outside of a resource-owner credentials grant. [This activity is not supported by Discord, is strongly recommended against, and is bannable if the user has 2FA enabled.](https://github.com/hammerandchisel/discord-api-docs/issues/69) The recommended alternative is to use the `localStorage` token."}}
{"actor":{"display_login":"robbie0630"}}