Social Logins API


The Social Logins API allows fans to authenticate using their existing Google, Facebook, or Apple accounts. A single endpoint handles all three providers — the providerName field determines which provider is used.

If the fan does not already have a Cortex account, one is automatically created and linked to their social provider account. Subsequent logins use the existing link.

For setup instructions on configuring each provider (Google Console, Facebook Developer, Apple Developer), see the Social Logins Setup Guide.

Postman Collection

For full request/response examples, use the Postman collection:

Social Logins Collection

Facebook Example

{
  "providerName": "facebook",
  "providerToken": "FACEBOOK_ACCESS_TOKEN",
  "clientId": "YOURCLUB",
  "deviceId": "550e8400-e29b-41d4-a716-446655440000",
  "registerSource": "web",
  "registerType": "social",
  "registerPlatform": "web"
}

Google Example

{
  "providerName": "google",
  "providerToken": "GOOGLE_ID_TOKEN",
  "clientId": "YOURCLUB",
  "deviceId": "550e8400-e29b-41d4-a716-446655440000",
  "registerSource": "web",
  "registerType": "social",
  "registerPlatform": "web"
}

Apple Example

{
  "providerName": "apple",
  "providerToken": "eyJraWQiOiJZdXlYb1ki...",
  "clientId": "YOURCLUB",
  "deviceId": "550e8400-e29b-41d4-a716-446655440000",
  "metadata": {
    "firstName": "Bob",
    "lastName": "Crown"
  },
  "registerSource": "app",
  "registerType": "social",
  "registerPlatform": "ios"
}

Note on Apple: Apple only provides the user's name on the very first authentication. Pass firstName and lastName in the metadata field to capture this. On subsequent logins, Apple does not include the name in the token.

You can also include the optional language field when requesting a social login token, for example "language": "fr-FR". This value is passed through to Cortex authentication so new accounts are created with the requested language and existing accounts are updated to that language. If language is omitted, new accounts default to English and existing accounts keep their current language; if the value is blank or unsupported, English is used as the fallback.

Provider Token Reference

ProviderToken TypeHow to Obtain
FacebookAccess TokenFacebook Login SDK — returned after user grants permission
GoogleID TokenGoogle Identity Services — returned from the sign-in callback
AppleID Token (JWT)Sign in with Apple JS / AuthenticationServices — returned in the authorization response

For detailed provider SDK setup, see the Social Logins Setup Guide.