Get credentials

Create an application

Go to the Discord Developer Portal and click New Application. Give it a name.

Add a redirect URI

Navigate to OAuth2 > General. Under Redirects, add:

https://auth.example.com/auth/oauth/discord/callback

Copy credentials

From OAuth2 > General, copy the Client ID and Client Secret.

Configuration

lib/kavach.ts

import { createKavach } from '@kavachos/core';
import { oauth } from '@kavachos/core/plugins/oauth';

const kavach = await createKavach({
  database: { provider: 'postgres', url: process.env.DATABASE_URL! },
  secret: process.env.KAVACH_SECRET!,
  baseUrl: 'https://auth.example.com',
  plugins: [
    oauth({
      providers: [
        {
          id: 'discord',
          clientId: process.env.DISCORD_CLIENT_ID!,
          clientSecret: process.env.DISCORD_CLIENT_SECRET!,
        },
      ],
    }),
  ],
});

DISCORD_CLIENT_ID=1234567890123456789
DISCORD_CLIENT_SECRET=...

Scopes

Default scopes: identify email

Scope	What it unlocks
`identify`	Read username, discriminator, avatar
`email`	Read the user's email address
`guilds`	Read the servers the user belongs to
`guilds.members.read`	Read guild membership details

User data returned

Field	Source	Notes
`id`	`id` field	Stable Discord snowflake ID
`email`	`email` field	Verified email
`name`	`username` field	Current username (not discriminator)
`image`	`avatar` hash	Constructed CDN URL

Discord email addresses are verified before the account can use OAuth. You will always receive a verified email when the email scope is requested.

Discord