# Trouble with EventSub Websocket Auth **URL:** \ **Category:** Chat and IRC\ **Created:** [November 22, 2024, 6:03am UTC](https://discuss.dev.twitch.com/t/trouble-with-eventsub-websocket-auth/61787 "2024-11-22T06:03:55Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![skribbstv](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@skribbstv](https://discuss.dev.twitch.com/u/skribbstv)\ **Post date:** [November 22, 2024, 6:03am UTC](https://discuss.dev.twitch.com/t/trouble-with-eventsub-websocket-auth/61787/1 "2024-11-22T06:03:55Z")
I am currently trying to setup an app to listen for chat events over a websocket, and eventually send responses to certain chat messages. So far I’ve been following along with the documentation here: > **[Authenticating and Setting up EventSub](https://dev.twitch.tv/docs/chat/authenticating/)** > > Authenticating and EventSub Registering your bot To get an access token, you must first register your bot. For information about registering your bot, see Registering Your App. Authenticating After registering your bot and getting a client ID, you... However I’m having trouble with understanding which tokens I need. Specifically I’m having trouble with this portion of the docs: > **[Authenticating and Setting up EventSub](https://dev.twitch.tv/docs/chat/authenticating/#what-type-of-access-token-to-use)** > > Authenticating and EventSub Registering your bot To get an access token, you must first register your bot. For information about registering your bot, see Registering Your App. Authenticating After registering your bot and getting a client ID, you... It mentions that I need 3 tokens total: - My app’s access token (through [Client credentials grant flow](https://dev.twitch.tv/docs/authentication/getting-tokens-oauth/#client-credentials-grant-flow)) - The streamer’s user access token (through [Authorization code grant flow](https://dev.twitch.tv/docs/authentication/getting-tokens-oauth/#authorization-code-grant-flow)) - My bot’s user access token (???) I’m having so much trouble with the 3rd one. I cannot for the life of me find instructions for creating a USER access token for a BOT. All of the user access token methods redirect me to sign in through my browser with my actual Twitch account’s credentials (which is the streamer account in my case). If I go ahead and do this for both of the user tokens and the scopes that the docs define, then I receive a 403 when attempting to subscribe to the channel.chat.message Event with my bot user as the condition.user\_id. If I set my own channel ID as the user\_id then the request succeeds, but this is not what I want as I want the bot to be the one reading the chat messages (at least this is how it’s shown throughout the rest of the docs). My question then is, how can I generate a user access token for my bot with the needed scopes? And could the documentation be updated to make this clearer if I’m not just missing something obvious? Thank you in advance ---
**Author:** ![skribbstv](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@skribbstv](https://discuss.dev.twitch.com/u/skribbstv)\ **Post date:** [November 22, 2024, 6:08am UTC](https://discuss.dev.twitch.com/t/trouble-with-eventsub-websocket-auth/61787/2 "2024-11-22T06:08:46Z")
For reference, here is the request I’m sending to subscribe to the event ```auto def registerChat(session_id): res = requests.post( "https://api.twitch.tv/helix/eventsub/subscriptions", headers={ 'Authorization': f"Bearer ", 'Client-Id': , 'Content-Type': 'application/json' }, data=json.dumps({ 'type': 'channel.chat.message', 'version': '1', 'condition': { 'broadcaster_user_id': , 'user_id': }, 'transport': { 'method': 'websocket', 'session_id': } }) ) print(res.text) res.raise_for_status() ``` ---
**Author:** ![BarryCarlyon](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/barrycarlyon/32/253_2.png) [@BarryCarlyon](https://discuss.dev.twitch.com/u/BarryCarlyon)\ **Post date:** [November 22, 2024, 11:38am UTC](https://discuss.dev.twitch.com/t/trouble-with-eventsub-websocket-auth/61787/3 "2024-11-22T11:38:26Z")
> [@skribbstv](#): > > I am currently trying to setup an app to listen for chat events over a websocket, > [@skribbstv](#): > > However I’m having trouble with understanding which tokens I need. > [@skribbstv](#): > > My app’s access token (through [Client credentials grant flow](https://dev.twitch.tv/docs/authentication/getting-tokens-oauth/#client-credentials-grant-flow)) Straight websockets take only a user token from the user you want to read the chat as Example: [EventSub WebSockets Chat edition with Implicit Auth Example](https://barrycarlyon.github.io/twitch_misc/eventsub/websockets/web/chat/) My Documentation: [twitch\_misc/eventsub/websockets/web/chat at main · BarryCarlyon/twitch\_misc · GitHub](https://github.com/BarryCarlyon/twitch_misc/tree/main/eventsub/websockets/web/chat#how-does-authentication-work) > Just generated user access token with the following scopes > > - `user:read:chat` from the user you wish to read chat as > > You then use that user access token to create subscriptions to your socket. > [@skribbstv](#): > > It mentions that I need 3 tokens total: You only need three tokens if you are doing Webhooks or conduits transports. When doing straight websockets you need only a token from the bot account/user to read chat as with the scope `user:read:chat` (minimum), you don’t need a client credentials token or a token from the broaadcaster > [@skribbstv](#): > > I cannot for the life of me find instructions for creating a USER access token for a BOT. All of the user access token methods redirect me to sign in through my browser with my actual Twitch account’s credentials (which is the streamer account in my case). “bot accounts” are just “regular twitch accounts” So you get auth the same was as you would any other user, direct the user to login with twitch and grant permissions. To “switch logged in twitch accounts” either - use force verify on the link so a user can check/switch accounts first (a), as otherwise due to no scope change it just goes - direct the user logged in as someone else that has a second bot acccount to use incognito mode (b) - if you own both accounts and doing it yourself, you can go to [twitch.tv](http://twitch.tv) and logout of the site completely before starting the oAuth flow - just use another browser where you are not already logged into main logically it’s easiest to use incognito or another browser (a) see the “not you? log out” button ![image](https://d2opxh93rbxzdn.cloudfront.net/original/3X/1/f/1f303c74aa7e20c5b9d023c8b527ac945651d840.png) (b) ![image](https://d2opxh93rbxzdn.cloudfront.net/original/3X/e/9/e97ddde4e17031dadc3ae5c9ab11fe0b86c6b1be.png) So when I need to get new tokens for the bots I run and control/own the bot accounts I’ll use another browser or incognito to complete the flows > [@skribbstv](#): > > I’m not just missing something obvious? It’s “basic” oAuth to get permissions for account (x) you first need to be logged into service (y) as (x) or on the oAuth dialog use the account switcher if one is available or can be prompted for ---
**Author:** ![system](https://d2opxh93rbxzdn.cloudfront.net/original/2X/0/05909729875cce3b53e59d5561c4d23bb14948fc.png) [@system](https://discuss.dev.twitch.com/u/system)\ **Post date:** [December 22, 2024, 11:39am UTC](https://discuss.dev.twitch.com/t/trouble-with-eventsub-websocket-auth/61787/4 "2024-12-22T11:39:08Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.