JWT auth by username and password

post/oauth2/login/token

Authenticates the user by the username/email and password and returns a JWT. Exchanging the code to a JWT via the Generate JWT call is not needed.

Request

query Parameters

client_id

required

integer

Your application ID. Get it after creating an OAuth 2.0 client.

scope

string

Scope is a mechanism in OAuth 2.0 to limit an application’s access to a user’s account.

Can be:

email for Auth via social network or Get link for social auth calls to request an email from the user additionally.
offline to use refresh_token from Generate JWT call to refresh the JWT when it is expired.
playfab to write SessionTicket to the session_ticket claim of the JWT if you store user data at PlayFab.

If you process your own values of the scope parameter, that are not mentioned above, you can set them when using this call. The Xsolla Login server does not process these values, but returns them in the received JWT.

Request Body schema: application/json

username required	string Username or email address.
password required	string User password.

Responses

200

400

Bad Request

401

Unauthorized

404

Not Found

422

Unprocessable Entity

429

Too Many Requests

Request samples

application/json

{"password": "password123",
"username": "John"
}

Response samples

application/json

{"access_token": "2YotnFZFEjr1zCsicMWpAA",
"expires_in": 3600,
"refresh_token": "tGzv3JOkF0XG5Qx2TlKWIA",
"token_type": "bearer"
}