Added:

• Legal terms management moved to your project > Login > Configure > Legal settings > Terms and policies in Publisher Account.
• The SMSCENTER SMS provider that works with all mobile operators in Russia for sending confirmation codes. You can set it up in Publisher Account > Login > Configure > Communication providers > SMS provider.
• Possibility to check social network connection in Publisher Account > your project > Login > Configure > Authentication > Social login > Click the ⚙ > Try connection.

Added:

• Captcha for passwordless authentication via SMS for English, Chinese, Spanish, and Russian. It is pre-filled automatically for regular users the system recognizes as non-fraudulent.

Added:

• A set of custom attributes for each Login user is now available in Publisher Account.

• Game developers — Xsolla Login partners can pass user attributes in a webhook response.

Updated:

• API call Get users by attribute from server.

Added:

• Customization and localization of SMS messages is now available in the Publisher Account. You can change the text of messages, as well as adapt it for any region by choosing from 20 possible languages.
• You can set user attributes to personalize your product catalog. To add attributes, upload the JSON schema for your authorization option in the User Base > User Attributes section.
• The ability to set up email providers has been added to the Publisher Account. The SendGrid provider is already available for setting up emails.
• Added the ability to change the user’s phone number on the user’s profile page in the Publisher Account.

Added:

• What is it for subsection of the Customization section

• Widget customization subsection of the Customization section

Updated:

• JSON file with widget settings instruction moved to the Customization section

Updated:

• Additional validation of the phone number the user enters when logging in. This reduces the number of SMS delivery errors.

• The list of social providers that can be connected depends on the selected user data storage.

Added:

• Saving user sessions for multiple authorizations on several devices using multiple OAuth 2.0 refresh tokens. This allows the player to always be signed in while visiting websites, opening the launcher, or playing the game from different devices.

• CSS styles of the previous version of the widget became available in the new Login section in Publisher Account. The settings are displayed according to the type of widget used.

Added:

• User data storage section

Updated:

• Integration guide sections: Set up Login project in Publisher Account, Connect user data storage, Integrate solution on application side

Updated:

• Description of the Single Sign-On API call in the How to use Login Widget SDK API calls instruction

Updated:

• Xsolla Login Widget SDK README

Added:

• How to use Login Widget SDK API calls and How to connect JSON with widget settings instructions

Added:

• Passwordless login via email in Publisher Account. To get it, go to your Login project > General settings
• Customization of email templates for passwordless login via email in Publisher Account. To get it, go to your Login project > Customization
• Settings for collecting a user’s email address and phone number in Publisher Account. To get it, go to your Login project > General settings

Added:

• Parameter id in the following API calls:
  • Start auth by phone number (JWT and OAuth 2.0)
  • Complete auth by phone number (JWT and OAuth 2.0)
• API calls:
  • Start auth by email (JWT and OAuth 2.0)
  • Complete auth by email (JWT and OAuth 2.0)

Added:

• Value of event_type parameter in Webhooks endpoints

Added:

• Integration guide section of product documentation

Added:

• Generate JWT API call

Added:

• Management via Publisher Account section

Updated:

• Login API merged with User Account API

Updated:

• How to customize emails to users section

Added:

• API call for authentication via device ID (JWT and OAuth 2.0)
• API call for getting user’s devices
• API call for linking a device to account
• API call for unlinking the device from account
• Parameter is_anonymous in the Get user details call

Added:

• API call for adding username or email authentication to account

Added:

• Widget 2.0 preview section
• Login widget 2.0 preview in Publisher Account. To see it, go to your Login project > General settings > Widget code

Updated:

• OAuth 2.0 protocol section

Updated:

• Instructions for How to customize emails to users

Added:

• API endpoints for work with webhooks

Updated:

• Login documentation

Added:

• API method for updating user’s two-factor authentication settings
• API method for getting user’s two-factor authentication settings

Added:

• Claims after authentication if you use PlayFab storage in the user JWT section

Updated:

• Instruction on how to set up PlayFab

Updated:

• FAQs section in the guide

Added:

• Setting up in a social network for authentication. Available in your Login project > Social connections section of your Publisher Account

Added:

• Setting up links for legal agreements displayed on the Login widget 2.0. Available in your Login project > General settings section of your Publisher Account

Added:

• Authorization in Xsolla Publisher Account via Okta recipe

Added:

• Instructions on how to work with user account for Login & Account System asset

Added:

• Setting up passwordless authentication via phone number for the Login widget 2.0 in your Login project > General settings > Authentication section of Publisher Account

Added:

• Parameter tag in the response of these methods: Get social account friends, Get user public profile, Search users by nickname, Get user details, Get user’s friends for Login API
• New values of gender parameter for Get user details, Update user details methods

Added:

• API method for resending an account confirmation email to the user (JWT and OAuth 2.0)

Added:

• Claim for authentication by a phone number in the user JWT
• API method for logging the user out and deleting the SSO session

Added:

• API methods for starting and completing authentication by phone number of the JWT methods group
• API methods for starting and completing authentication by phone number of the OAuth 2.0 methods group

Added:

• Instructions on how to work with user account for Android

Added:

• Instruction on how to work with user attributes for Android
• Instruction on how to work with user account for Unreal Engine 4

Updated:

• OAuth 2.0 protocol recipe

Added:

• API call for getting the URL to link the social network to the user’s account

Added:

• API call for updating social account friends

Added:

• Instructions on how to set up native OAuth 2.0 authentication for Unity and Android

Updated:

• Instruction on how to set up native OAuth 2.0 authentication for Unreal Engine

Added:

• Delayed registration in browser games recipe

Added:

• Instruction on how to set up native authentication via Steam for Unity and Unreal Engine

Added:

• Setting up an email address request for the Login widget 2.0 in Publisher Account > your Login project > General settings > Authentication

Added:

• Extended registration form recipe

Added:

• Instruction on how to work with user attributes for Unity and Unreal Engine

Added:

• API call for getting social networks linked to user account
• API call for linking social network to user’s account

Updated:

• API call for getting user’s friends
• API call for getting user details

Added:

• API call for searching users by nickname, getting user public profile, and authentication with access token of the social network
• Opening Login Widget 2.0 pages section
• The ability to add and set up OAuth 2.0 clients in Publisher Account > your Login project > General settings > Authorization

Updated:

• Silent authentication recipe

Added:

• The ability to edit an email address in the user card in Publisher Account (for projects with Xsolla Storage)

Added:

• The ability to change the user email address in Publisher Account > your Login project > Users
• The ability to set up silent authentication in Publisher Account > your Login project > Social connections
• The ability to store user’s friends from social networks in Publisher Account > your Login project > General settings > Authentication

Updated:

• Custom storage recipe

Added:

• Lists of errors in the Login API
• Parameter is_redirect in the Silent authentication method

Added:

• Creating a shadow Login project in Publisher Account

Updated:

• Cross-Authentication term has been renamed to Silent authentication

Added:

• Cross-platform account recipe

Added:

• Read only user attribute management methods
• Parameters external_account_id and email added to Get user’s IDs by social ID and platform call
• Getting the social account friends list call

Added:

• Selector field with a list of possible gaming platforms on Widget 2.0
• Silent authentication recipe

Added:

• Integration with Zendesk Chat recipe
• Single Sign-on recipe

Added:

• The ability to restrict characters for input in the form fields in Login Widget 2.0. Contact your Account Manager to set it up

Added:

• The method of checking if a user has logged in via a service

Updated:

• OAuth 2.0 protocol recipe
• Collecting emails during social authentication recipe

Added:

• Displaying Terms Of Service in Login Widget. Contact your Account Manager to set it up
• Silent authentication via the Xbox console platform. Contact your Account Manager to set it up

Updated:

• Product features list in the Login guide
• Playfab recipe
• Selecting a user data storage recipe

Added:

• Login API method for linking a player to a user from your Login project via an external ID

Added:

• New fields in the extended registration form for widget 2.0: date of birth and country

Updated:

• How to customize emails to users recipe
• Collecting emails during social authentication recipe

Added:

• Ability to set up your own validation of registration fields. Contact your Account Manager to set it up
• Xsolla Login Widget Version 2.0

Added:

• Link duplication in emails in case the button link is invalid

Added:

• Authentication via Apple ID. Set up in Publisher Account > your Login project > Social connections

Added:

• User attributes management methods

Updated:

• Login guide

Added:

• Brute force protection. Contact your Account Manager to set it up

Added:

• Only emails of users who give their consent to receive the newsletter are exported to Mailchimp

Added:

• The ability to skip email confirmation during user registration if the data is stored on the Xsolla side. To set it up, please contact your Account Manager

Updated:

• Custom storage recipe: examples of requests from the Xsolla Login server and a section about validating these requests were added

Added:

• Exporting users to Mailchimp recipe

Added:

• User Account recipe

Updated:

• Login API: reworked the reference structure, added the support of the OAuth 2.0 protocol

Added:

• Collecting emails during social authentication recipe

Added:

• The with_logout parameter to the authentication methods based on the JWT protocol. The parameter allows to keep only the latest token active and stop the sessions with the previous token values

Added:

• The ability to log in via an Xbox Live account

Fixed:

• Minor errors

Added:

• An optional step of Login Widget integration to track the widget actions

Added:

• Recipes — Selecting a user data storage: Xsolla storage, PlayFab, Custom storage

Added:

• The groups object in JWT. Contains the data about user’s groups

Added:

• The payload parameter in Login API requests for sending your additional data

Added:

• Opportunity to keep user data in PlayFab

Added:

• Age verification of Korean users via SMS

Updated:

• Login JS SDK version. What’s new in 2.2.3

Added:

• Landscape orientation of the Xsolla Login Widget. Available when using Xsolla Login JS SDK version 2.1.0 and higher

Added:

• Ability to integrate Xsolla Login with the Mailchimp service in the product settings in Publisher Account

Added:

• Statistics section in the Publisher Account. It contains information about active users, the number of authentications by countries, and authentication methods

Added:

• Login & Account System asset documentation

Added:

• The registration date field in the exported CSV-file containing the user list

Added:

• Automatically generated code for widget integration in Login settings in Publisher Account

Added:

• Extended user registration form
• Redirect to the local server address specified in callbackUrl

Added:

• Resending the email confirmation message in Publisher Account > Login > Open and set up > Users > User profile

Updated:

• Login API

Added:

• Sorting users in Publisher Account by the time of their last login at Login > Open and set up > Users
• Filling the email field automatically for all widget windows
• Two-factor authentication via email
• Message with 404 error

Added:

• Managing user accounts in Publisher Account (banning users and password reset)