OpenAPI Specification
openapi: 3.1.0
info:
title: PlayFab Client Account API
description: 'PlayFab is Microsoft Azure''s backend-as-a-service for live games. The
Client API is the player-facing REST surface used by game clients for
login, account linking, virtual currency, inventory, friends,
leaderboards, statistics, player data, cloud script execution,
multiplayer session lookup, push registration, and analytics events.
Each PlayFab title is scoped to its own subdomain at
`https://{titleId}.playfabapi.com`, where `{titleId}` is the unique
title identifier from the PlayFab Game Manager.
Login calls (`LoginWith*`, `RegisterPlayFabUser`) require no
authentication header and return a `SessionTicket`. Subsequent calls
pass the session ticket in the `X-Authorization` header. Entity-model
calls additionally use the entity token in the `X-EntityToken` header.
'
version: 1.0.0
contact:
name: API Evangelist
email: kin@apievangelist.com
license:
name: Proprietary
servers:
- url: https://{titleId}.playfabapi.com
description: PlayFab title-scoped API server
variables:
titleId:
default: titleId
description: Unique PlayFab title identifier.
security:
- sessionTicket: []
tags:
- name: Account
description: PlayFab account metadata.
paths:
/Client/GetTitlePublicKey:
post:
tags:
- Account
summary: Returns the title's RSA public key
security: []
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- TitleId
- TitleSharedSecret
properties:
TitleId:
type: string
TitleSharedSecret:
type: string
responses:
'200':
description: Public key returned.
/Client/GetPhotonAuthenticationToken:
post:
tags:
- Account
summary: Get a Photon custom authentication token
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- PhotonApplicationId
properties:
PhotonApplicationId:
type: string
responses:
'200':
description: Token returned.
/Client/SetPlayerSecret:
post:
tags:
- Account
summary: Set the player's secret used to sign API requests
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
PlayerSecret:
type: string
EncryptedRequest:
type: string
responses:
'200':
description: Player secret stored.
components:
securitySchemes:
sessionTicket:
type: apiKey
in: header
name: X-Authorization
description: 'Session ticket returned by a successful `LoginWith*` call. Required
for all Client API operations other than login/registration.
'
entityToken:
type: apiKey
in: header
name: X-EntityToken
description: Entity token used for Entity-model API calls.