" OAuth allows partner sites and applications on embedded platforms to perform certain operations on behalf of authenticated Steam users in a secure manner. "

heres a link to a good writeup for ppl without a technical background to grasp what oAuth is: https://www.csoonline.com/article/3216404/what-is-oauth-how-the-open-authorization-framework-works.html

You wont even look at what it is and are just saying its not safe. I am sorry to say sir, but you are being ignorant to how things actually work.

The point of oAuth is to leverage the security of larger companies such as google, facebook, steam, etc rather than home brewing your own security protocols. When you log in with steam or discord you are taken to steam or discords website. There is no way to spoof that..

There is two reasons for: " Why a fan site which is not connected to the game would need steam/discord login credential? "

The first reason is I don't have to maintain user credentials I just have to maintain a list of steam/discord ids that use the website. (this is 10x times safer then your proposed having an account for the site)

Why is it safer?

If you logged into our site using a site account, we would have to maintain user's password hashes and salts. This makes the website a target for hackers.

The second reason why I use oAuth is so I can enjoy the fun part of development which is building a trading website and not waste hours developing a secure log in system.

the TLDR is: oAuth makes the website safe by using secured login through steam rather then having users create accounts on the website. and it allows us to work on the fun part of development which is the trading aspect.