User authentication
Delete users or projects
How do I delete a Login project?
How do I delete a user from a Login project via API?
- Follow the steps below to use the Login API:
- Open your project in your Publisher Account and go to the Players > Login section.
- Click Configure in the pane of a Login project.
- Go to the Security block and select the OAuth 2.0 section.
- Click Add OAuth 2.0 client.
- Specify OAuth 2.0 redirect URIs.
- Check the
Server (server-to-server connection)box. - Click Connect.
- Copy and save the client ID and secret key.
- Generate a server token.
- Call the user deletion endpoint and pass the user and your Login project IDs with the
Authorization: Bearer <server_token>header, whereserver_tokenis your server token.
- Follow the steps below to use the Login API:
- Open your project in account for mobile games and go to the Other tools > Login section.
- Click Configure in the pane of a Login project.
- Go to the Security block and select the OAuth 2.0 section.
- Click Add OAuth 2.0 client.
- Specify OAuth 2.0 redirect URIs.
- Check the
Server (server-to-server connection)box. - Click Connect.
- Copy and save the client ID and secret key.
- Generate a server token.
- Call the user deletion endpoint and pass the user and your Login project IDs with the
Authorization: Bearer <server_token>header, whereserver_tokenis your server token.
- Follow the steps below to use the Login API:
- In your project in the account, go to the Players > Login section.
- Click Configure in the pane of a Login project.
- Go to the Security block and select the OAuth 2.0 section.
- Click Add OAuth 2.0 client.
- Specify OAuth 2.0 redirect URIs.
- Check the
Server (server-to-server connection)box. - Click Connect.
- Copy and save the client ID and secret key.
- Generate a server token.
- Call the user deletion endpoint and pass the user and your Login project IDs with the
Authorization: Bearer <server_token>header, whereserver_tokenis your server token.
- Follow the steps below to use the Login API:
- In your project in the account, go to the Players > Login section.
- Click Configure in the pane of a Login project.
- Go to the Security block and select the OAuth 2.0 section.
- Click Add OAuth 2.0 client.
- Specify OAuth 2.0 redirect URIs.
- Check the
Server (server-to-server connection)box. - Click Connect.
- Copy and save the client ID and secret key.
- Generate a server token.
- Call the user deletion endpoint and pass the user and your Login project IDs with the
Authorization: Bearer <server_token>header, whereserver_tokenis your server token.
- Follow the steps below to use the Login API:
- In your project in the account, go to the Players > Login section.
- Click Configure in the pane of a Login project.
- Go to the Security block and select the OAuth 2.0 section.
- Click Add OAuth 2.0 client.
- Specify OAuth 2.0 redirect URIs.
- Check the
Server (server-to-server connection)box. - Click Connect.
- Copy and save the client ID and secret key.
- Generate a server token.
- Call the user deletion endpoint and pass the user and your Login project IDs with the
Authorization: Bearer <server_token>header, whereserver_tokenis your server token.
- http
1DELETE https://login.xsolla.com/api/users/{login_user_id}?projectId={login_project_id} HTTP/1.1
2X-Server-Authorization: Bearer {server_token}
Authentication
How do I set up a specific authentication on the Login widget 2.0?
Yes. Follow the instructions below to set it up:
- Go to Publisher Account in your Login project > General settings > Authentication section.
- Set the switches you need to On.
This feature is not implemented for the previous version of the Login widget.
Yes. Follow the instructions below to set it up:
- In your project in the account for mobile games, go to in your Login project > General settings > Authentication section.
- Set the switches you need to On.
This feature is not implemented for the previous version of the Login widget.
Yes. Follow the instructions below to set it up:
- Go to your account in your Login project > General settings > Authentication section.
- Set the switches you need to On.
This feature is not implemented for the previous version of the Login widget.
Yes. Follow the instructions below to set it up:
- Go to your account in your Login project > General settings > Authentication section.
- Set the switches you need to On.
This feature is not implemented for the previous version of the Login widget.
Yes. Follow the instructions below to set it up:
- Go to your account in your Login project > General settings > Authentication section.
- Set the switches you need to On.
This feature is not implemented for the previous version of the Login widget.
How do I connect my own application for social network authentication? Can I add a title and icon for my own application?
If authentication via social networks has already been connected, Xsolla’s application credentials are used by default.
Reconnect the social network in Publisher Account:
- Specify the credentials of your own application.
- Complete the suggested settings in the social network card.
Reconnect the social network in the account for mobile games :
- Specify the credentials of your own application.
- Complete the suggested settings in the social network card.
Reconnect the social network in your account:
- Specify the credentials of your own application.
- Complete the suggested settings in the social network card.
Reconnect the social network in your account:
- Specify the credentials of your own application.
- Complete the suggested settings in the social network card.
Reconnect the social network in your account:
- Specify the credentials of your own application.
- Complete the suggested settings in the social network card.
Can I change the order of the social networks on the Login widget?
Yes, contact your Customer Success Manager or email to [email protected] and specify:
- the Login ID from Publisher Account
- the desired order of social networks
- the way you want to display buttons of social networks
By default, the order of social networks is determined by their popularity in the user’s region.
Yes, contact your Customer Success Manager or email to [email protected] and specify:
- the Login ID from your account for mobile games
- the desired order of social networks
- the way you want to display buttons of social networks
By default, the order of social networks is determined by their popularity in the user’s region.
Yes, contact your Customer Success Manager or email to [email protected] and specify:
- the Login ID from your account
- the desired order of social networks
- the way you want to display buttons of social networks
By default, the order of social networks is determined by their popularity in the user’s region.
Yes, contact your Customer Success Manager or email to [email protected] and specify:
- the Login ID from your account
- the desired order of social networks
- the way you want to display buttons of social networks
By default, the order of social networks is determined by their popularity in the user’s region.
Yes, contact your Customer Success Manager or email to [email protected] and specify:
- the Login ID from your account
- the desired order of social networks
- the way you want to display buttons of social networks
By default, the order of social networks is determined by their popularity in the user’s region.
How do I link a social network account to a user in a Login project?
The following are the ways of linking social network accounts to the user:
- Automatic linking is executed if the user’s email address in the social network account matches the email address in the Login project.
- Manual linking is executed using the
Link social network to account call.
To get information about linked social network accounts, use the
How do I enable two-factor authentication in a Login project?
Contact your Customer Success Manager or email to [email protected] with a request to enable.
Does the Login have protection against brute-force attacks and other anomalies?
Yes, Login has rate limit, DDoS protection, and two-factor authentication.
If I use a custom user data storage, how can I pass specific error codes to the widget instead of the general “Service temporarily unavailable. Please try again later.”?
You can pass the error code in the response to the user registration, authentication, password reset, or email address change request in the following format:
- json
1{
2 "error":{
3 "Code":"003-001"
4 }
5}
How can the user sign in on a new device with a passkey?
The user should choose Use passkey, scan the QR code with the device where the passkey is saved, and confirm with biometrics or a PIN. Creating a second passkey is currently not possible.
What should the user do if they lost their passkey?
The user should sign in with another method (classic, social, or passwordless). Creating a second passkey is currently not possible.
How can the user revoke their passkey?
Revoking a passkey is not available yet.
I get the “Passkeys cannot be the only login option” error when I turn on passkeys. What should I do?
The project must keep at least one other login method (classic, social, or passwordless) enabled. Enable another login method, then try again.
Manage user password
Can I set a new password for a user without sending a confirmation email?
No, the password can’t be changed without sending a confirmation email.
Can I declare a specific format for the password?
Configure emails
Can I disable sending emails from Xsolla and send only my emails?
No, but you can change the email’s design. Follow the Email customization instruction to set this up.
Can I use my own SendGrid application to send emails?
Yes, follow the instructions to do this. All Xsolla’s emails will also be sent through this service.
How do I set the email address for the email’s sender?
Use your own SendGrid application. Set up authentication for your domain in SendGrid, then follow the instructions.
Other
What Xsolla network IP addresses do I need to add to the allowlist to configure webhooks?
Refer to the webhooks documentation for the list of IP addresses from which webhooks are sent.
The user receives the error: “010-003 Widget loading failed. Please add at least one Callback URL in order for the widget to work." How to fix this?
The user should try again later. If the error still appears, they need to contact the game support team.
When making a request to the Login API from a browser, I get the error “Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource (Reason: CORS header “Access-Control-Allow-Origin” missing)” . How do I fix this?
I have set a Callback URL in my Login project. While testing the URL, it redirects me to https://login.xsolla.com/api/blank . How do I fix this?
https://login.xsolla.com/api/blankCallback URL is a URL address or a path a user is redirected to after successful authentication, email confirmation, or password reset.
If you have specified more than one Callback URL in your Login project, the system will redirect all requests to the default URL. To set up redirection to the required URL, select your integration option and follow these instructions:
- If you integrated Login via widget, select the required Callback URL in Publisher Account in your Login project > General settings > Widget code section and copy a new widget code.
- If you integrated Login via API calls, for any request to the Login API, pass the required Callback URL as the value of the
login_urlparameter.
If you have specified more than one Callback URL in your Login project, the system will redirect all requests to the default URL. To set up redirection to the required URL, select your integration option and follow these instructions:
- If you integrated Login via widget, select the required Callback URL in the account for mobile games in your Login project > General settings > Widget code section and copy a new widget code.
- If you integrated Login via API calls, for any request to the Login API, pass the required Callback URL as the value of the
login_urlparameter.
If you have specified more than one Callback URL in your Login project, the system will redirect all requests to the default URL. To set up redirection to the required URL, select your integration option and follow these instructions:
- If you integrated Login via widget, select the required Callback URL in the account in your Login project > General settings > Widget code section and copy a new widget code.
- If you integrated Login via API calls, for any request to the Login API, pass the required Callback URL as the value of the
login_urlparameter.
If you have specified more than one Callback URL in your Login project, the system will redirect all requests to the default URL. To set up redirection to the required URL, select your integration option and follow these instructions:
- If you integrated Login via widget, select the required Callback URL in the account in your Login project > General settings > Widget code section and copy a new widget code.
- If you integrated Login via API calls, for any request to the Login API, pass the required Callback URL as the value of the
login_urlparameter.
If you have specified more than one Callback URL in your Login project, the system will redirect all requests to the default URL. To set up redirection to the required URL, select your integration option and follow these instructions:
- If you integrated Login via widget, select the required Callback URL in the account in your Login project > General settings > Widget code section and copy a new widget code.
- If you integrated Login via API calls, for any request to the Login API, pass the required Callback URL as the value of the
login_urlparameter.
Is Login GDPR compliant?
Yes, Login complies with the requirements of the GDPR, CCPA and other regional regulations.
Can I use Login in a mobile application?
Yes, to set up Login, use these instructions for the following SDKs:
Found a typo or other text error? Select the text and press Ctrl+Enter.