How are playfab api endpoints rate limited

Question

question

Mark Brassington asked Jul 7, '23

How are playfab api endpoints rate limited

I am creating an api for game data access and processing and I will need to authenticate the playfab session ticket in api calls. I've searched around and found:

https://community.playfab.com/questions/42220/passing-sessionticket-to-server.html

"Calling Client API endpoints from a script or other server won't work, as the Client API has a relatively low rate limit, which is currently enforced by IP Address"

https://community.playfab.com/questions/53320/integrating-playfab-authentication-with-aspnet-cor.html

suggests that we can use session tickets for auth in an api. does this mean that:

POST https://titleId.playfabapi.com/Server/AuthenticateSessionTicket

isn't rate limited? but that the client PlayFabClientAPI.whatever() is?

I'm concerned that if I'm using a server api for game data and processing, then all the auth requests would be coming from the one ip (the api) and therefore rate limited out.

if this is the case then what is the official solution for this?

also, is there a page which shows what the rate limits are? is it by account tier?

limits Authentication

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 1 · 2023-07-07T10:14:32Z

Neils Shi answered Jul 7, '23

The post : “https://community.playfab.com/questions/53320/integrating-playfab-authentication-with-aspnet-cor.html ” you mentioned does not mean AuthenticateSessionTicket has no request limit (the API Server/AuthenticateSessionTicket’s current limit is 10,000 requests per 10 seconds). The post means since the session ticket will last around 24 hours, so you can cache the session ticket in your server to reduce the AuthenticateSessionTicket API calls. The limit of the Server API is much higher than Client APIs, and most of the server APIs request limits are based on the entity instead of ip. Currently, there is no public documentation to view rate limits.

2

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Mark Brassington commented · Jul 07, 2023 at 01:32 PM

Thanks for answering this, it's made things much clearer.

Since the entity in this case is the Title, does this mean that the 10,000 requests would be across the Title?

0 ·

Neils Shi Mark Brassington commented · Jul 11, 2023 at 07:04 AM

This limit applies to all AuthenticateSessionTicket requests in a title and different titles will have their own limits.

0 ·

question