OAuth2 prompt=none 'strict'?

[jimduchek]

I am hoping there is an existing way to do this -- I want to be able to use discord oauth2 for 'login' only, not 'signup'. That is, if the user is not already authorized, return a failure instead of showing the consent screen. I can, of course, immediately call the revocation endpoint and revoke the new authorization, but I'm hoping Discord has a way to do this more cleanly.

[devsnek]

There's no such functionality, and at first thought I'm not entirely sure it would be advisable. Someone could always make an OAuth2 URL for your app with more permissive parameters.

[jimduchek]

They could do that now, couldn't they? And wouldn't do them any good since they wouldn't have the secret to actually use the response code. There are other oauth2 implementations that indeed treat prompt=none strictly -- that is, they return an error instead of asking for consent, if the user hasn't already given it. I would just like to avoid the steps of fetching a token, fetching account information, and then immediately revoking the token (if the account isn't already signed up with us).