apparently discord’s oauth is a little sketchy (i can’t find the video now, but benawad’s dogehouse project had an issue where you could login to anyone’s account because discord oauth was the weakest link security wise)