Impersonation - Auth Client API

curl --location --request POST 'https://api.lootlocker.com/client/v3/oauth/token?game_version=1.0.0' \ --data-urlencode 'grant_type=urn:ietf:params:oauth:grant-type:token-exchange' \ --data-urlencode 'actor_token_type=urn:ietf:params:oauth:token-type:access_token' \ --data-urlencode 'subject_token_type=lootlocker.v1.player' \ --data-urlencode 'subject_token=01JJS6WYW2RD0AWWYNRB8XJ02W' \ --data-urlencode 'actor_token={{server_api_key}}'

{ "token_type": "bearer", "access_token": "v4.public.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_fBZtr4J4d5rzCPXZTsXXsSZAL2mv8NB2QI", "refresh_token": "v4.public.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_fBZtr4J4d5rzCPXZTsXXsSZAL2mv8NB2QI", "expires_in": 86400 }

Request

Query Params

game_version

string

required

Example:

1.0.0

Body Params application/x-www-form-urlencoded

grant_type

string

required

Must be exactly: urn:ietf:params:oauth:grant-type:token-exchange

Example:

urn:ietf:params:oauth:grant-type:token-exchange

actor_token_type

string

required

Must be exatly: urn:ietf:params:oauth:token-type:access_token

Example:

urn:ietf:params:oauth:token-type:access_token

subject_token_type

string

required

Must be exactly lootlocker.v1.player

Example:

lootlocker.v1.player

subject_token

string

required

Player ULID you want a token for.

Example:

01JJS6WYW2RD0AWWYNRB8XJ02W

actor_token

string

required

Your server api key.

Example:

Responses

🟢200Success: Authorization Code

application/json

Body

token_type

string

required

access_token

string

required

refresh_token

string

required

expires_in

integer

required

🟢200Success: Refresh Token

🟢200Success: Credentials

🟢200Success: Implicit Apple

🟠401Error: Unauthorized Client

🟢200Success: Token Exchange