A way to validate credentials without Login

Question

question

bayraktarahmetenes asked Sep 26, '23

A way to validate credentials without Login

Hi, I have been searching for an API to check the validity of a credentials in the server side without LoginWithUsernameAndPassword client API, but I could not find. Is there such an API?

The use case is the following. I want to disable client login APIs so that every client has to go through my server which uses server custom id and client API linking. When I do this if a client wants to link an email and password to make the account recoverable, the same email and password can not be used to authenticate the user on another device because I don't have any method to verify the credential since the LoginWithUsernameAndPassword will be disabled.

Authentication

1

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

bayraktarahmetenes commented · Sep 27, 2023 at 09:05 AM

By LoginWithUsernameAndPassword I meant LoginWithEmailAddress

0 ·

Answer 1 · 2023-10-02T06:58:01Z

Rick Chen answered Oct 2, '23

If you want to have full control of player's credential on your custom server, you can store their credentials in their internal user data, or your custom database. Then you can validate the player's credential on your server.

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 2 · 2023-09-27T07:04:41Z

Infer Wang answered Sep 27, '23

You can use this Api Authenticate Session Ticket to validate session ticket.

3

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

bayraktarahmetenes commented · Sep 27, 2023 at 09:05 AM

I did not understand. I want to validate users credential on another device so that I know it is indeed the person and I can let it have the user data. But as I said I want to disable LoginWithEmailAddress

0 ·

Rick Chen ♦ bayraktarahmetenes commented · Sep 29, 2023 at 08:41 AM

I do not understand your requirement. What credentials do you want to validate on server? If you don't want the users to use LoginWithEmailAddress API, why are they allowed to link with Email address?

You can store their credentials in their internal user data instead. And if the user wants to validate their email address, your server can let the users provide their server custom id and email, and login the user on server side and check if the email they provided matches the one in the user internal data.

0 ·

bayraktarahmetenes Rick Chen ♦ commented · Oct 02, 2023 at 03:06 AM

I don't want clients to be able to use Login* apis because I want to control the system within my backend. I want to validate the credentials of the user, which is email and password so that if a user wants to recover an account I can validate this.

0 ·

question