Social Logins API

The Social Logins API allows fans to authenticate using their existing Google, Facebook, or Apple accounts. A single endpoint handles all three providers — the providerName field determines which provider is used.

If the fan does not already have a Cortex account, one is automatically created and linked to their social provider account. Subsequent logins use the existing link.

For setup instructions on configuring each provider (Google Console, Facebook Developer, Apple Developer), see the Social Logins Setup Guide.

Postman Collection

For full request/response examples, use the Postman collection:

Social Logins Collection

Facebook Example

{
  "providerName": "facebook",
  "providerToken": "FACEBOOK_ACCESS_TOKEN",
  "clientId": "YOURCLUB",
  "deviceId": "550e8400-e29b-41d4-a716-446655440000",
  "registerSource": "web",
  "registerType": "social",
  "registerPlatform": "web"
}

Google Example

{
  "providerName": "google",
  "providerToken": "GOOGLE_ID_TOKEN",
  "clientId": "YOURCLUB",
  "deviceId": "550e8400-e29b-41d4-a716-446655440000",
  "registerSource": "web",
  "registerType": "social",
  "registerPlatform": "web"
}

Apple Example

{
  "providerName": "apple",
  "providerToken": "eyJraWQiOiJZdXlYb1ki...",
  "clientId": "YOURCLUB",
  "deviceId": "550e8400-e29b-41d4-a716-446655440000",
  "metadata": {
    "firstName": "Bob",
    "lastName": "Crown"
  },
  "registerSource": "app",
  "registerType": "social",
  "registerPlatform": "ios"
}

Note on Apple: Apple only provides the user's name on the very first authentication. Pass firstName and lastName in the metadata field to capture this. On subsequent logins, Apple does not include the name in the token.

Provider Token Reference

For detailed provider SDK setup, see the Social Logins Setup Guide.