I've been enjoying the neat apps that have come out of the Destiny api and I figured I'd give it a go. Thanks to everyone for the help on getting up to speed on how things work.
I have a log in flow that seems to work alright, but I don't know if it's the official way to authenticate a user. Is there any place I can look to get more info besides piecing together fragments from other threads? It feels weird to handle a user's email and password for their PSN / XBOX account directly.
I've written what I have so far in a gist, attached above, for the benefit (hopefully) of others.
Thanks for the help!
Even though it works and there isn't any other way to do it, that method of authentication is unsupported.
Nevertheless, you absolutely should not be handling authentication details as a third party. It's obviously fine if you own the account, but anyone else's details you shouldn't be touching or asking for.