Discord

Sign in to the Discord Developer Portal

Go to the Discord Developer Portal and sign in with the Discord account that should own the application.

Create a new application

Press New Application, give it the name visitors will see on the authorization screen, and accept the terms.

Add the redirect URL

Open OAuth2 in the left navigation and, under Redirects, press Add Redirect. Paste the URI for the origin you are running and save.

VitNode builds this URI from NEXT_PUBLIC_WEB_URL, so it has to match exactly - no trailing slash, no locale prefix.

Add both entries so one application covers local development and your live site.

Copy the client ID and secret

Still on the OAuth2 page, the Client ID and Client Secret are in the client information block at the top. Press Reset Secret if the secret was never revealed or you have lost it - Discord shows it once.

Set the environment variables

Server-side variables, so no NEXT_PUBLIC_ prefix - that prefix is what marks a value for the browser bundle, and a client secret in the browser bundle is a client secret you have published.

DISCORD_CLIENT_ID=1234567890123456789
DISCORD_CLIENT_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Register the adapter

Add DiscordSSOApiPlugin to authorization.ssoAdapters. It is a plain factory function, not a class - there is no new.

import { DiscordSSOApiPlugin } from '@vitnode/core/api/adapters/sso/discord'
import { buildApiConfig } from '@vitnode/core/vitnode.config'

export const vitNodeApiConfig = buildApiConfig({
  plugins: [],
  authorization: {
    ssoAdapters: [
      DiscordSSOApiPlugin({
        clientId: process.env.DISCORD_CLIENT_ID,
        clientSecret: process.env.DISCORD_CLIENT_SECRET,
      }),
    ],
  },
})

The redirect URI is computed when this file is evaluated, so restart the API rather than relying on a hot reload:

bun dev

pnpm dev

npm run dev

Verify it works

Ask the API what it thinks it supports:

curl http://localhost:3000/api/@vitnode/core/middleware
# {"isEmail":false,"sso":[{"id":"discord","name":"Discord"}]}

Then open /login and press Discord. You should see Discord's "connect to" authorization prompt listing your username and email, get bounced back to /login/sso/discord?code=...&state=..., and land on the front page signed in.