Xsolla-logoXsolla Developers
or
To Publisher Account

[OAuth 2.0] JWT auth by username and password Client-side

post/oauth2/login/token

Authenticates the user by the username/email and password and returns a JWT. Exchanging the code to a JWT via the Generate JWT call is not needed.

Request
query Parameters
client_id
required
integer

Your application ID. Get it after creating an OAuth 2.0 client.

scope
string

Scope is a mechanism in OAuth 2.0 to limit an application’s access to a user’s account.

Can be:

  • email for Auth via social network or Get link for social auth calls to request an email from the user additionally.
  • offline to use refresh_token from Generate JWT call to refresh the JWT when it is expired.
  • playfab to write SessionTicket to the session_ticket claim of the JWT if you store user data at PlayFab.

If you process your own values of the scope parameter, that are not mentioned above, you can set them when using this call. The Xsolla Login server does not process these values, but returns them in the received JWT.

Request Body schema: application/json
username
required
string

Username or email address.

password
required
string

User password.

Responses
200

OK

400

Bad Request

401

Unauthorized

404

Not Found

422

Unprocessable Entity

429

Too Many Requests

Request samples
application/json
{
  • "password": "password123",
  • "username": "John"
}
Response samples
{
  • "error": {
    }
}
System statusAll services operational

Do Not Sell My Personal Information

Privacy PolicyEnd User License Agreement© 2006–2025 Xsolla Inc.