Git Product home page Git Product logo

Comments (4)

SamuelScheit avatar SamuelScheit commented on May 18, 2024 15

yes we plan to have multiple ways of authentication:

  • OAuth2 (login with Fosscord/Discord/Google)
  • Federated (login with accounts from other instances (like matrix))
  • Decentralized (create a new account with username/password which are only stored on your instance)

Also discord doesn't ban users for using third party clients (although it's stated in the TOS) they do it because of their anti spam system, which tries to mitigate spam bots. Our client will make the exact same api request and be discord compliant, so we will make sure you will not get banned for using it.
Source: https://news.ycombinator.com/item?id=25224151

Also according to this US court rule copying the api interface is considered fair use

from spacebarchat.

Featyre avatar Featyre commented on May 18, 2024 7

Add something to the issue (for Fosscord Server): check out the 2nd to last question from this
image

As for clients, Discord won't just ban people out of the blue, they should notice the user before they decided to ban them, think it logically, does it make sense for Discord to ban someone instantly? No! A ban wave would happen and Discord would lose a bunch of users just because they are using a modded/third-party client.

from spacebarchat.

Gebes avatar Gebes commented on May 18, 2024

Well, @Featyre it depends. Discord only bans accounts out of nowhere if they act maliciously. Also, Discord doesn't care which client/client mods you use, as long as you use the API correctly, because they only see the API interactions and nothing more.

If a Discord account acts maliciously, they make an automated decision based on the Account's trustworthiness (afaik).

What does acting maliciously mean? Poor usage of the API. E. g., no cookies, fingerprint, overuse of specific routes etc.

Discord won't just ban people out of the blue.

They do if you use the API wholly wrong and your Account is untrusted (young Account age, no phone number, no verified mail, etc.).

does it make sense for Discord to ban someone instantly? No!

Yes, it makes sense! What if a token gets abused for spamming? Discord must stop such spam directly, and Discord will only give a second chance if the user opens a support ticket and gives a good explanation (e. g., hijacked token).

they should notice the user before they decided to ban them.

If an old account with a clean record acts maliciously, they will password lock your Account. So, they will send you mail telling you that someone maybe hijacked your Account, and it is locked until you change your password.

So as long as Fosscord uses the Discord API properly, Discord can't notice that a user is using a different client hence no user will be banned out of nowhere.

from spacebarchat.

Featyre avatar Featyre commented on May 18, 2024

Well, @Featyre it depends. Discord only bans accounts out of nowhere if they act maliciously. Also, Discord doesn't care which client/client mods you use, as long as you use the API correctly, because they only see the API interactions and nothing more.

If a Discord account acts maliciously, they make an automated decision based on the Account's trustworthiness (afaik).

What does acting maliciously mean? Poor usage of the API. E. g., no cookies, fingerprint, overuse of specific routes etc.

Discord won't just ban people out of the blue.

They do if you use the API wholly wrong and your Account is untrusted (young Account age, no phone number, no verified mail, etc.).

does it make sense for Discord to ban someone instantly? No!

Yes, it makes sense! What if a token gets abused for spamming? Discord must stop such spam directly, and Discord will only give a second chance if the user opens a support ticket and gives a good explanation (e. g., hijacked token).

they should notice the user before they decided to ban them.

If an old account with a clean record acts maliciously, they will password lock your Account. So, they will send you mail telling you that someone maybe hijacked your Account, and it is locked until you change your password.

So as long as Fosscord uses the Discord API properly, Discord can't notice that a user is using a different client hence no user will be banned out of nowhere.

Reading from this reply I should expand what i talked about: at that time i didn't consider malicious users into modded client users/custom client users, and I do agree that they ban users who use API maliciously, it just doesn't make sense to ban users who are not (and using modded clients).

Also I hope Fosscord (the client) uses Discord API as an official client does.

from spacebarchat.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.