Skip to main content

PortalAuthorizationCode

A one-time portal authorization code. Redirect the player to redirectUri carrying code; the destination game exchanges it (with its PKCE verifier) via exchangePortalCode for an app token. Single-use and short-lived.

type PortalAuthorizationCode {
  code: String!
  redirectUri: String!
  expiresAt: String!
}

Fields​

PortalAuthorizationCode.code ● String! non-null scalar​

The one-time authorization code. Deliver it to the destination game origin only (e.g. as a code query param on redirectUri).

PortalAuthorizationCode.redirectUri ● String! non-null scalar​

The validated redirect URI the player should be sent to.

PortalAuthorizationCode.expiresAt ● String! non-null scalar​

ISO-8601 UTC expiry of the code (typically ~60s).

Returned By​

createPortalAuthorizationCode mutation