Yes! It is actually much safer for us to use OAuth than for users to provide us with a username and password. OAuth allows users to grant permission to third-party applications to access their resources without sharing their login credentials (username and password). Instead, the third-party application receives an access token that provides limited and time-bound access to specific resources on the user's behalf.

OAuth leverages a centralized authentication server, which helps in better security management and enforcement of authentication and authorization policies. This reduces the risks associated with handling credentials in multiple places.

For battle.net we only receive your battle tag. For Discord we access your username, avatar and banner.