Request: allow-list user API auth redirect for shadowhex.net

FiveM Discussion
1

I run an independent GTA racing league at https://shadowhex.net and I am using the Discourse User API Key flow to let drivers sign in with their Cfx.re account, as recommended in previous threads here.

Could a staff member please add the following URL to allowed_user_api_auth_redirects?

https://shadowhex.net/api/auth/cfx/callback

The integration requests the session_info scope only — no read, no write. The key is used once to read the account id and is then revoked immediately; it is never stored. The site only needs a permanent identifier so a driver’s results survive a rename.

Application name: ShadowHex GTA League
Forum account: @ShadowHex99

Thank you.

2

There’s no allowlist for user API keys, all origins are allowed. I can see other third-party applications auth fine in the last few hours, so this is likely a problem on your side.

1 Like
3

Thank you!