# Rejecting users who have authorised an app **URL:** \ **Category:** API\ **Created:** [November 12, 2014, 12:59am UTC](https://discuss.dev.twitch.com/t/rejecting-users-who-have-authorised-an-app/1173 "2014-11-12T00:59:07Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![bluee](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/bluee/32/250_2.png) [@bluee](https://discuss.dev.twitch.com/u/bluee)\ **Post date:** [November 12, 2014, 12:59am UTC](https://discuss.dev.twitch.com/t/rejecting-users-who-have-authorised-an-app/1173/1 "2014-11-12T00:59:07Z")
I’m working on [an application](https://github.com/nodecg/nodecg) which allows users to authenticate via Twitch, or Steam, then checks their account against a whitelist before granting access. This works fine for whitelisted users, but if a user accidentally authorizes the app while on an alternate account, and is rejected by the whitelist check, clicking the oauth login link to try again will immediately reuse the same login details, and they must go to Twitch to log out before trying again. While this isn’t a major problem (we can tell users to go and log out before trying again), Steam allows the user to change account after being sent to the oauth login page a second time. Edit: Didn’t see it as I filtered by API, related to [How to let a user “log out”](https://discuss.dev.twitch.tv/t/how-to-let-a-user-log-out/1138) ---
**Author:** ![BarryCarlyon](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/barrycarlyon/32/253_2.png) [@BarryCarlyon](https://discuss.dev.twitch.com/u/BarryCarlyon)\ **Post date:** [November 12, 2014, 4:28pm UTC](https://discuss.dev.twitch.com/t/rejecting-users-who-have-authorised-an-app/1173/2 "2014-11-12T16:28:16Z")
Why not just add a link to the page that says “You are not whitelisted to continue click here to logout of Twitch and Retry” and link to [http://www.twitch.tv/logout](http://www.twitch.tv/logout) That said, should also include notes about deauthing your application too…