CSFStaff Surface
Requirements

Bring the right Discord account, a fresh bot link, and one browser session.

The rebuilt CSF verification flow is short, but it still depends on a live one-time state token and the callback returning to the same session that started the Roblox OAuth redirect.

Current statusGuest
Sign in with Discord to inspect your CSF verification status.
Requested scopeopenid profile
No extra Roblox scopes are requested by the rebuilt flow.
Checklist

What to have ready.

  • Use the same Discord account that should receive CSF access and role sync updates.
  • Start from a fresh CSF bot link so the URL includes a live one-time state token.
  • Finish Roblox OAuth before the state expires, usually within about 15 minutes.
  • Keep the same browser session open until Roblox returns to https://csf.rosetech.me/verify/callback.php.
  • Expect the CSF flow to request only openid profile.
Common Failures

What usually breaks it.

  • Opening an old bookmark instead of a fresh Discord bot link.
  • Switching browsers or clearing cookies before the callback returns.
  • Letting the one-time state expire before authorization finishes.
  • Declining Roblox authorization before the callback reaches CSF.
After Success

What CSF stores after Roblox says yes.

Identity Row

The site stores the Roblox user ID, username, and display name in verified_users.

OAuth Grant

The callback stores the grant and scope so the bot can refresh identity and presence later.

Consumed State

The one-time state is marked used so the same link cannot be replayed later.