I've built something similar. If I understand correctly, once you auth the user, send the auth token to your bot through a trigger and then verify it on your server through a code card