Twitch Chat Integration

Twitch Chat Integration

754k Downloads

Authorization Failure - Please Read - Security Notice

BlayTheNinth opened this issue ยท 1 comments

commented

Mod is currently non-functional. It needs to be updated to Twitch API changes. Please do not post any error logs regarding this publically as they may contain sensitive data.

All tokens created through Twitch Integration have also been revoked to prevent damage from accidental leaks. Detailed info below.

Yesterday (Sep 12 11am PT) Twitch has shutdown Version 3 of their API, which Twitch Chat Integration was using, resulting in an error during the authorization process. The sensitive log in question is an exception that contains the secret token that Twitch Integration used to connect to the chat. This token could have been used by third parties to speak and run commands under your name in chat (but this does not include bit cheering). The token would have not granted any further access beyond that to your account.

A few minutes ago (Sep 13 3pm PT) a log including the sensitive data was posted on the CurseForge page, making me aware of the issue. All tokens created through Twitch Integration have been revoked meaning they are now useless and can no longer be used by third parties to gain access to your chat, even if you have posted a log of your authorization attempt publically. Further authorization setup attempts using Twitch Integration will fail before a sensitive token is created and the files containing the issue have been taken down.

commented

Issue has been resolved in 4.1.14+