game flow

Because the method outlined in this article uses Galaxy’s iframe API to pass messages around, the content overlaps with the docs on that. Click the links in the list below to see more in-depth documentation.

The consent works as follows:

1. Send an authorize action
2. User decides to reject or accept authentication request
3. You recieve an authorized response with an error or auth code
4. Send the auth code to your backend, and exchange it for a token

testing

The iframe tester page supports the game flow, as long as you are logged in as the creator of the app you are attempting to authorize with.