Hello,

I am currently trying to connect to my database from the game, and it should handle some non-private data. However, the user should be authenticated, as the account owner should be the only one to be able to manage that data. I was thinking about using the access token but, besides that I haven't actually found a way to retrieve it in latest versions, I find it's a bit intrusive.

So what would you suggest to verify that the connection is actually established by the account owner?

You would need to establish your own OAuth that probably hooks into Microsoft, which raises a bunch of concerns if a mod is doing it. In general, you shouldn't be doing anything like this since no one can trust a mod to not do something malicious. Additionally, the forums does not support this line of mod creation because of security concerns and potentially malicious intent, no offense.

Thank you for your response. That does indeed seem very sketchy to be done by a mod, which is surely what I don't want at all, so I have probably found another way of approaching what I'm planning to make.