Requirements
Bring the right Discord account, a fresh bot link, and one browser session.
The rebuilt CSF verification flow is short, but it still depends on a live one-time state token and the callback returning to the same session that started the Roblox OAuth redirect.
Current statusGuest
Sign in with Discord to inspect your CSF verification status.
Requested scopeopenid profile
No extra Roblox scopes are requested by the rebuilt flow.
Checklist
What to have ready.
- Use the same Discord account that should receive CSF access and role sync updates.
- Start from a fresh CSF bot link so the URL includes a live one-time
statetoken. - Finish Roblox OAuth before the state expires, usually within about 15 minutes.
- Keep the same browser session open until Roblox returns to
https://csf.rosetech.me/verify/callback.php. - Expect the CSF flow to request only
openid profile.
Common Failures
What usually breaks it.
- Opening an old bookmark instead of a fresh Discord bot link.
- Switching browsers or clearing cookies before the callback returns.
- Letting the one-time state expire before authorization finishes.
- Declining Roblox authorization before the callback reaches CSF.
After Success
What CSF stores after Roblox says yes.
Identity Row
The site stores the Roblox user ID, username, and display name in verified_users.
OAuth Grant
The callback stores the grant and scope so the bot can refresh identity and presence later.
Consumed State
The one-time state is marked used so the same link cannot be replayed later.
