originally posted in:BungieNetPlatform
View Entire Topic
The number one source of complaints and worries with mobile apps is users complaining they have to enter their Microsoft or PSN username and password into an app before it can access the private Destiny API. They are quite right to be worried as those credentials give access to credit card based services, private email and highly valuable game libraries with related data.
I doubt any of us want to touch these details, but we have no choice. There is no genuine Oauth or other way to authenticate our apps to get the Bungie account details and access the full API. Can you give us a heads up on if you have any plans to address this?
English
#Destiny
-
You're preaching to the choir my friend xP I've definitely run into this issue myself and can very much relate. Currently there is no workaround so far as I can tell other than only using public endpoints (note more and more things are becoming public). I imagine the issue is that in order to prevent malicious third parties from trolling the snot out of you (like constantly moving items from your inventory to your vault while you're playing, etc etc) you need to be logged in to do certain things to prevent stuff like that from happening. Like you said an OAuth would be fantastic, but currently that's not a thing unfortunately.