Add an API to find the user that installed a bot

[dblock]

Coming from https://github.com/dblock/discord-strava.

My users install a bot via OAuth2 flow. I obtain a Bearer token that I actually never need to use because the bot auth now allows me to post to the guild that has just installed the bot with Authorization: Bot discord-secret-token. (Is this by design? It avoids having to refresh to the obtained token.)

I cannot seem to find a way a way to find out the user ID that completed the OAuth workflow, it doesn't seem possible.

[Qjuh]

Since you got a bearer token from your OAuth2 flow you can use that on the route https://discord.com/developers/docs/resources/user#get-current-user to get data about the user.

[dblock]

/api/users/@me returns a 401 on this token, this is a bot token, but /api/oauth2/@me returns application: .... Maybe I'm missing the identify scope? would that return the user that installed the bot?

[Qjuh]

You said you get a bearer token. I said to use that. Not the bot token. What scopes do you ask for that you have oauth2 flow at all? Since bot and applications.commands scope don’t need the flow.

[dblock]

This was likely a misunderstanding on my part.

I use the oauth flow as a trigger to create a guild record in my database, but was only asking for bot scope and was unnecessarily saving the bearer token.

I've tried adding the identify scope now, which lets me also fetch the user that installed the bot via users/@me with the bearer token, which is what I am after. We can close this unless I'm missing something? Thanks for your help!