1const projectId = "<ProjectID>";
  2const loginProjectId = "<LoginID>";
  3
  4const serverOauthClientId = <OAuthClientID>;
  5const serverOauthClientSecret = "<OAuthSecretKey>";
  6
  7exports.getXsollaLoginToken = functions.https.onCall((data, context) => {
  8  if (!context.auth) {
  9    throw new functions.https.HttpsError(
 10        "failed-precondition",
 11        "The function must be called while authenticated."
 12    );
 13  }
 14
 15  const postData =
 16      `grant_type=client_credentials&client_secret=${serverOauthClientSecret}&client_id=${serverOauthClientId}`;
 17
 18  const options = {
 19    hostname: "login.xsolla.com",
 20    port: 443,
 21    path: "/api/oauth2/token",
 22    method: "POST",
 23    headers: {
 24      "Content-Type": "application/x-www-form-urlencoded",
 25      "Content-Length": postData.length,
 26    },
 27  };
 28
 29  return new Promise( (resolve, reject) => {
 30    const req = https.request(options, (res) => {
 31      if (res.statusCode !== 200) {
 32        reject(
 33            new functions.https.HttpsError(
 34                "internal",
 35                "Server token not received"
 36            )
 37        );
 38      }
 39      let body = [];
 40      res.on("data", (d) => {
 41        body.push(d);
 42      });
 43      res.on("end", () => {
 44        try {
 45          body = JSON.parse(Buffer.concat(body).toString());
 46        } catch (e) {
 47          reject(
 48              new functions.https.HttpsError(
 49                  "internal",
 50                  "Malformed server token response"
 51              )
 52          );
 53        }
 54        getClientToken(context.auth.uid, body.access_token, resolve, reject);
 55      });
 56    });
 57    req.on("error", (e) => {
 58      reject(new functions.https.HttpsError(
 59          "internal",
 60          "Internal error while server token flow"
 61      ));
 62    });
 63
 64    req.write(postData);
 65    req.end();
 66  });
 67});
 68
 69// eslint-disable-next-line require-jsdoc
 70function getClientToken(userId, serverToken, resolve, reject) {
 71  const postData = JSON.stringify(
 72      {
 73        "server_custom_id": userId,
 74      }
 75  );
 76
 77  const path =
 78      `/api/users/login/server_custom_id?projectId=${loginProjectId}&publisher_project_id=${projectId}`;
 79
 80  const options = {
 81    hostname: "login.xsolla.com",
 82    port: 443,
 83    path: path,
 84    method: "POST",
 85    headers: {
 86      "Content-Type": "application/json",
 87      "Content-Length": postData.length,
 88      "X-Server-Authorization": serverToken,
 89    },
 90  };
 91
 92  const req = https.request(options, (res) => {
 93    if (res.statusCode !== 200) {
 94      reject(
 95          new functions.https.HttpsError(
 96              "internal",
 97              "Client token not received"
 98          )
 99      );
100    }
101    let body = [];
102    res.on("data", (d) => {
103      body.push(d);
104    });
105    res.on("end", () => {
106      try {
107        body = JSON.parse(Buffer.concat(body).toString());
108      } catch (e) {
109        reject(
110            new functions.https.HttpsError(
111                "internal",
112                "Malformed client token response"
113            )
114        );
115      }
116      resolve({
117        "token": body.token,
118      });
119    });
120  });
121  req.on("error", (e) => {
122    reject(new functions.https.HttpsError(
123        "internal",
124        "Internal error while client token flow"
125    ));
126  });
127
128  req.write(postData);
129  req.end();
130}

 1handlers.GetXsollaLoginToken = function (args) {
 2
 3    // TODO replace with production credentials
 4    const projectId = <ProjectID>;
 5    const loginProjectId = "<LoginID>";
 6    const serverOauthClientId = <OAuthClientID>;
 7    const serverOauthClientSecret = "<OAuthSecretKey>";
 8
 9    const getServerTokenBody =
10        `grant_type=client_credentials&client_secret=${serverOauthClientSecret}&client_id=${serverOauthClientId}`;
11
12    const serverTokenResponse = JSON.parse(
13        http.request(
14            "https://login.xsolla.com/api/oauth2/token",
15            "post",
16            getServerTokenBody,
17            "application/x-www-form-urlencoded",
18            {})
19    );
20
21    let serverToken = ""
22    if ('access_token' in serverTokenResponse) {
23        serverToken = serverTokenResponse.access_token;
24    } else {
25        return {
26            "error_message": "Server token not received"
27        }
28    }
29
30    const getUserTokenHeaders = {
31        "X-Server-Authorization": serverToken
32    }
33
34    const getUserTokenBody = JSON.stringify(
35        {
36            "server_custom_id": currentPlayerId,
37        }
38    );
39
40    const getUserTokenPath =
41        `/api/users/login/server_custom_id?projectId=${loginProjectId}&publisher_project_id=${projectId}`;
42
43    const userTokenResponse = JSON.parse(
44        http.request(
45            `https://login.xsolla.com${getUserTokenPath}`,
46            "post",
47            getUserTokenBody,
48            "application/json",
49            getUserTokenHeaders)
50    );
51
52    if ('token' in userTokenResponse) {
53        return {
54            "token": userTokenResponse.token
55        }
56    } else {
57        return {
58            "error_message": "User token not received"
59        }
60    }
61}