Sign in with Roblox

An optional one-click verification method that runs alongside the profile-code flow. When enabled, members see a method picker on the verify page.

Fastest path

If the member is already signed in to Roblox, verification is two clicks and no copy-pasting.

PKCE, no secrets in the browser

We use the OAuth 2.0 Authorization Code flow with PKCE. The code is exchanged for tokens server-side.

Password-free

Roblox handles the login on their own domain. We only receive your Roblox user ID, username, and display name.

Availability

There’s nothing to enable or configure. “Sign in with Roblox” is built into the platform and offered automatically on every server’s verify page, right alongside the profile-code method. Members simply pick whichever they prefer.

  • No OAuth apps, keys, or redirect URIs to set up — we manage all of that.
  • Works the moment the bot is in your server.
  • Members who are already signed in to Roblox finish in two clicks; everyone else can fall back to the profile-code flow.

How it flows

  1. The member clicks “Sign in with Roblox” on the verify page.
  2. We generate a PKCE verifier + state, store them against the verification session, and redirect to Roblox.
  3. Roblox authenticates the member and redirects back to our callback.
  4. We validate the state, exchange the code for tokens server-side, and read the member's Roblox identity from the userinfo endpoint.
  5. The link is created, plan limits are checked, and a role-sync job is queued — same as the profile-code path from there on.
Next · Role sync