For requests that require Authentication, you will need to have your users authenticate via our OAuth mechanisms. See https://github.com/Bungie-net/api/wiki/OAuth-Documentation for more details.
Authorization URL: https://www.bungie.net/en/OAuth/Authorize
Token URL: https://www.bungie.net/Platform/App/OAuth/token/
Refresh URL: https://www.bungie.net/Platform/App/OAuth/token/
Scopes
-
BnetWrite
Create new groups, clans, and forum posts, along with other actions that are reserved for Bungie.net
elevated scope: not meant to be used by third party applications.
-
ReadDestinyInventoryAndVault
Read Destiny 1 Inventory and Vault contents.
For Destiny 2, this scope is needed to read anything regarded as private. This is the only scope a
Destiny 2 app needs for read operations against Destiny 2 data such as inventory, vault, currency,
vendors, milestones, progression, etc.
-
ReadUserData
Read user data such as who they are web notifications,
clan/group memberships, recent activity, muted users.