---
title: "Discord API OAuth2 authorization responses now include the iss parameter: 2026-10-14 | Harbyn"
description: "Discord API OAuth2 authorization responses now include the iss parameter, announced Oct 14, 2026."
canonical: "https://harbyn.com/changes/discord/2026-10-14-oauth2-authorization-responses-now-include-iss"
last-updated: 2026-10-17
---

# Discord API OAuth2 authorization responses now include the iss parameter

Markdown version of <https://harbyn.com/changes/discord/2026-10-14-oauth2-authorization-responses-now-include-iss>.

Behavior change - Discord API. low severity. In effect.

OAuth2 authorization responses that redirect to your redirect\_uri now include an iss parameter set to https://discord.com, following RFC 9207. The authorization server metadata and OpenID configuration now set authorization\_response\_iss\_parameter\_supported to true.

## Facts

| Fact | Value |
| --- | --- |
| Vendor | [Discord API](https://harbyn.com/vendors/discord.md) |
| Kind | Behavior change |
| Severity | low |
| Status | In effect |
| Announced | Oct 14, 2026 |
| Added to Harbyn | Oct 17, 2026 |
| Lead time | No dated deadline |
| Review | Reviewed by a person, extracted by a model |

## Find it in your code

```sh
npx harbyn scan
```

This change names no identifier the scanner can match line by line, so the scan tells you whether your repository uses Discord API, from its packages and API hosts. Nothing leaves your machine.

## Sources

Where this event comes from: the page we read, when we read it, and the hash of that snapshot.

- <https://docs.discord.com/developers/change-log/rss.xml> (changelog, fetched 2026-10-17 13:00 UTC, sha256 `008308537fca7ad8b731f4a54ff8dc658eb147f6f9d0ce498175a85092debce2`)

## Related changes

### More from Discord API

- [Embedded App SDK renames getInstanceConnectedParticipants to getActivityInstanceConnectedParticipants](https://harbyn.com/changes/discord/2026-10-06-getactivityinstanceconnectedparticipants-command-renamed.md) (Deprecation, announced Oct 6, 2026)
- [Custom Status Hidden by Profile Privacy Settings](https://harbyn.com/changes/discord/2026-09-17-custom-status-hidden-by-profile-privacy-settings.md) (Behavior change, announced Sep 17, 2026)
- [Shard Param Required for Get Current User Guilds with Large Bot Sharding](https://harbyn.com/changes/discord/2026-09-15-shard-param-required-for-get-current-user-guilds-with-large-bot-sharding.md) (Breaking change, announced Sep 15, 2026)

### Changes at other vendors

- [Amazon Selling Partner API: ORDER\_CHANGE notifications add PreFulfillmentStatusChange for Amazon Autos](https://harbyn.com/changes/amazon-sp-api/2026-10-14-sp-api-updates-new-listings-items-api-ivp-values-in-eu5-jp-and-ca-stores-oct-3.md) (effective Oct 28, 2026)
- [BigCommerce: 301 redirects will apply only to storefront channels](https://harbyn.com/changes/bigcommerce/2026-10-07-301-redirects-now-apply-to-storefront-channels-only.md) (effective Nov 10, 2026)
- [GitHub: Secret scanning audit log business field changes to enterprise slug](https://harbyn.com/changes/github/2026-10-20-updates-to-github-secret-scanning-7.md) (effective Nov 12, 2026)
- [Jira / Atlassian Cloud: New IP address ranges in use from January 1, 2027](https://harbyn.com/changes/atlassian-jira/2026-10-16-atlassian-cloud-adds-new-ip-address-ranges.md) (effective Jan 1, 2027)

[All upcoming deadlines](https://harbyn.com/deadlines.md)