galaxyBETA
explore
· ·
log in

log me in

log in forgot password

don't have an account?

sign up

preferences

theme picker site-wide filters

galaxy oauth docs

Here be dragons! If you don't know what OAuth is, this page is probably not for you. If you're certain this page is for you and you still don't know what OAuth is, hit the books and thank me later. Yes, the whole thing.

— Yhvr

Welcome to Galaxy’s documentation for OAuth! Galaxy provides a fairly stripped down implementation of an OAuth provider, with authentication flows for both games on-site and services off-site.

The API is presented as-is primarily because of an inability to gauge interest in this feature. If you have a use case for something that’s missing, reach out on Discord and it’ll probably get added!

overview

If you’re unfamiliar with OAuth, run away as fast as you can it’s basically a protocol for letting someone log in on a website with their account on a different website. This is useful if you’re trying to prove someone owns a certain galaxy account, but don’t want to have them give you their password to do so. Since galaxy doesn’t allow mandatory off-site authentication in published games, this provides an easier way for certain games to interop with the platform.

Through a series of messages passed between galaxy and a website, and consent from the user, this identity can be established.

If you haven’t already, make a galaxy account, and then head on over to your application settings to create a new application. From there, you might be interested in the pages on the traditional flow or game flow.