RoRoster Roblox OAuth 2.0 Integration & Scope Demonstration
This demo starts with the user signed out to demonstrate the complete Roblox OAuth 2.0 authorization code flow, requested permission scopes (openid, profile), category justification, and the resulting authenticated operations dashboard.
1Complete Authorization Flow (Starts Signed Out)
Begins signed out • Shows user clicking "Sign In with Roblox" → Consent dialog → Redirect back to original app
Step 1: User Is Signed Out & Clicks "Sign In with Roblox"
The user begins signed out on RoRoster. Clicking the official "Sign In with Roblox" button initiates the OAuth 2.0 authorization request with client ID and scopes.
Clicking the button above sends the user to Roblox's OAuth 2.0 authorization endpoint.
?client_id=8936002500953580088
&response_type=code
&redirect_uri=https://roroster.com/api/auth/roblox/callback
&scope=openid%20profile
&state=5f9a2b8e1c...
2Category Justification & Permission Scope Usage
Detailed explanations of why RoRoster belongs in its category and how requested scopes are used
App Category Justification: Community & Group Management / Staff Operations
RoRoster belongs squarely in the Community & Group Management category because its sole function is enabling Roblox group owners and community leadership to coordinate, schedule, and track their volunteer staff teams. RoRoster provides:
• Live In-Game Shift Tracking & Quotas
Staff track active on-duty time in connected Roblox places. RoRoster calculates weekly attendance quotas and prevents idling.
• Open Cloud Batch Group Ranking
Community leaders host formal training sessions and execute 1-click promotions directly to their Roblox group ranks via Open Cloud.
• In-Game Incident Dispatcher Queue
Player help requests and exploiter reports from Roblox games queue in real time for on-duty staff to claim and resolve.
• Leave of Absence (LOA) & Quota Freezing
Staff submit time-off requests. When approved, RoRoster automatically freezes their shift hour requirements to avoid unfair demotions.
Field Accessed: sub (Unique numeric Roblox User ID)
Why RoRoster requests this scope & how it is used:
1. Passwordless Identity Verification: Cryptographically proves ownership of the Roblox account without collecting passwords, cookies, or .ROBLOSECURITY tokens.
2. Group Rank & Permission Lookup: RoRoster uses the verified Roblox User ID to query Roblox Open Cloud Groups API (/v1/groups/9999999/roles) to determine if the user is a staff member, supervisor, or director.
3. Audit & Accountability Ledger: Shift timeclock sessions, disciplinary notices, and attendee promotion commands are mapped directly to this unique User ID.
Fields Accessed: preferred_username, name, picture
Why RoRoster requests this scope & how it is used:
1. Top Navigation Bar: Displays the staff member's Roblox avatar and username on the upper dashboard header.
2. Staff Directory & Roster: Shows the staff member's official avatar and display name in the community directory, shift schedules, and activity tables.
3. Incident Dispatcher & Timeclock: Allows fellow staff and supervisors to immediately recognize who responded to an in-game support call or clocked in for a shift.
Data Protection, Storage Transparency & Terms
Full adherence to Roblox Developer Terms and Privacy Regulations
- Roblox User ID (numeric identifier)
- Roblox Username and Display Name
- Public avatar headshot thumbnail URL
- Session authentication timestamp & token expiry
- Roblox account passwords or security cookies (.ROBLOSECURITY)
- Email addresses or personal contact info
- Billing data, payment details, or Robux transactions
- Account inventory or trade permissions
Ready to inspect the live workspace?
Click below to enter the RoRoster Demo Community. The workspace operates in restricted demo mode as @Demo (Managing Director) with full ReAdmin operations tools.