Authentication

OAuth2 and OpenID

Well-Played.gg uses OAuth2 as its authentication mechanism.

Requests format

To provide the authorization token, you will have to add an authorization header containing your generated OAuth2 token.
example:

curl -X POST -H 'organization-id: ORGANIZATION_ID_HERE'\
     -H 'authorization: Bearer TOKEN_HERE'\
     -d '{...}' https://api.warrior.well-played.gg

OpenID configuration

You can find the OpenID configuration on the follwing endpoint: https://oauth.warrior.well-played.gg/.well-known/openid-configuration
It can be used to automatically configure OpenID clients

OAuth endpoints

• Authorization endpoint: https://oauth.warrior.well-played.gg/oauth2/auth
• Token endpoint: https://oauth.warrior.well-played.gg/oauth2/token
• User info endpoint: https://oauth.warrior.well-played.gg/userinfo
• JWKS endpoint: https://oauth.warrior.well-played.gg/.well-known/jwks.json
• End session endpoint: https://oauth.warrior.well-played.gg/oauth2/sessions/logout
• Revocation endpoint: https://oauth.warrior.well-played.gg/oauth2/revoke

Create an application

TODO

Authorize an application to interact with your Organization

TODO

Authorization Code Flow (User authentication)

TODO

Client Credentials Flow (Server to Server authentication)

TODO