Skip to main content

CreatePortalAuthorizationCodeInput

Input for createPortalAuthorizationCode: the Overworld (identity origin, holding the session token) mints a one-time code the destination game exchanges for an app token. Browser handoff path; pair with a PKCE verifier held by the destination game origin.

input CreatePortalAuthorizationCodeInput {
  appId: BigInt!
  codeChallenge: String!
  codeChallengeMethod: String
  redirectUri: String!
}

Fields​

CreatePortalAuthorizationCodeInput.appId ● BigInt! non-null scalar​

Numeric id of the target app the player is portaling into.

CreatePortalAuthorizationCodeInput.codeChallenge ● String! non-null scalar​

PKCE code challenge (recommended). Base64url(SHA-256(verifier)) when method is S256. The destination game generates the verifier+challenge so the verifier never leaves its origin.

CreatePortalAuthorizationCodeInput.codeChallengeMethod ● String scalar​

PKCE method: "S256" (default, recommended) or "plain".

CreatePortalAuthorizationCodeInput.redirectUri ● String! non-null scalar​

Where to redirect the player after issuing the code. Must match the target app's configured launch_url origin when set.

Member Of​

createPortalAuthorizationCode mutation