OAuth broken on mobile - Universal Links/App Links intercept

[m0nk3y33]

Actual Behavior

The Kick mobile app is launched instead of the borwser, interrupting the OAuth flow. Users cannot complete authentication for web-based applications.

Impact

This issue affects mobile users who have the Kick app installed. They cannot log in to any third-party web application using Kick OAuth.

Technical Details

• Affected endpoint: https://id.kick.com/oauth/authorize
• Platforms: iOS and Android

Suggestions

Remove Universal Links / App Links from the OAuth subdomain or add a query parameter to disable app redirect like ?browser=true

[tz-easygo]

Hi @m0nk3y33

Thanks for reporting this. We are investigating and will provide updates here as they come.