Skip to main content

exchangePortalCode

Exchange a one-time portal authorization code (with the matching PKCE verifier) for an app-scoped gameplay token. Public (the code + verifier authorize the call); called by the destination game at its own origin so the game never sees the player's session token.

exchangePortalCode(
  input: ExchangePortalCodeInput!
): AppTokenResponse!

Arguments​

exchangePortalCode.input ● ExchangePortalCodeInput! non-null input​

Type​

AppTokenResponse object​

A short-lived, app-scoped gameplay token (Overworld portal). Confined to a single app: usable only against that app's Game API + Buddy realtime surface (plus read-only me and same-app refreshAppToken). It CANNOT perform management operations and CANNOT mint tokens for other apps, so a game stack that receives it never gets the player's full identity session.