Guest Session - Game API

Start a LootLocker session as a guest user. Guest sessions should be used when you do not wish to burden your user with having to create an account on one of the other platforms that LootLocker supports. However, it is important to understand that there is no security for these Guest accounts, and if someone can guess the player_identifier of an existing player, they will be able to play as that player.

curl --location --request POST 'https://api.lootlocker.com/game/v2/session/guest' \ --header 'x-session-token;' \ --header 'Content-Type: application/json' \ --data-raw '{ "game_key": "", "player_identifier": "Some Player", "game_version": "1.1" }'

{ "session_token": "string", "player_identifier": "string", "player_id": 0, "player_name": "string", "player_ulid": "string", "player_created_at": "string", "public_uid": "string", "seen_before": true, "check_grant_notifications": true, "check_deactivation_notifications": true, "check_dlcs": [ "string" ], "success": true }

Request

Header Params

x-session-token

string

required

Your session token will be an opaque string.

Default:

Body Params application/json

Request object for starting a guest session

game_key

string

required

The api key of the game you wish to start a session for

game_version

string

required

The version of the game you wish to start a session for

player_identifier

string

optional

Returned on the initial call, then used for subsequent authentication calls, to keep the same guest account active over multiple sessions.

Examples

Responses

🟢200Base Session Response

application/json

Body

Base Response object for successful session initializations

session_token

string

required

A token used to authenticate the player's current session.

player_identifier

string

required

A unique system-generated identifier for the player,
used internally.

player_id

integer <uint64>

required

A numerical identifier for the player,
often used in databases.

player_name

string

required

The chosen name or alias for the player

player_ulid

string

required

A universally unique identifier (ULID) for the player,
ensuring uniqueness across systems.

player_created_at

string

required

The timestamp when the player account was created.

public_uid

string

required

A unique identifier for the player,
used for public reference or sharing.

seen_before

boolean

required

A flag indicating whether the player has been seen or logged in before.

check_grant_notifications

boolean

required

A flag indicating whether to check for grant notifications.

check_deactivation_notifications

boolean

required

A flag indicating whether to check for deactivation notifications

check_dlcs

array[string] | null

required

An array indicating downloadable content (DLC) associated with the player.

success

boolean

required

A boolean indicating the success of the API call or operation

🟢200Successful Guest Session