Social login

post

https://social-logins.cortextech.io/v1/auth/sociallogin

Exchanges a social provider token for an InCrowd / FanScore access token.

The providerToken is validated against the named provider — a Google or Apple id_token, or a Facebook access token — using the configuration registered for the supplied clientId. If the provider identity has not been seen before, a Cortex SSO user is provisioned from the profile returned by the provider and a mapping is stored; otherwise the existing mapping is used.

The endpoint is unauthenticated: the providerToken in the body is the only credential.

Some clients require a first and last name on the provider profile before a new user can be created. Where the provider does not return them — Apple only supplies them on first authorisation — pass them in metadata.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

providerName

string

enum

required

The social provider that issued the token. Builds running the local profile also register an additional mock provider, which is not available in deployed environments.

Allowed:

providerToken

string

required

The token issued by the provider — an id_token for Google and Apple, an access token for Facebook.

clientId

string

required

Identifier of the client the login is being performed against.

deviceId

uuid

required

Identifier of the device making the request. Must be a version 4 UUID.

metadata

object | null

Additional provider-specific profile fields. Apple returns the user's name only on first authorisation, so it is passed here.

registerSource

string | null

Source recorded against the user when a new account is provisioned.

registerType

string | null

Registration type recorded against the user when a new account is provisioned.

registerPlatform

string | null

Platform recorded against the user when a new account is provisioned.

tokenVersion

string | null

enum

Version of the access token to issue. Matched case-insensitively; any other value falls back to the default version.

Allowed:

language

string | null

Preferred language recorded against the user.

Responses

Language

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200The provider token was validated successfully and a FanScore access token was issued.

401The resolved user is blacklisted. Error code: user_blacklisted.

500An unexpected error occurred while reading or storing the identity mapping, or while calling the FanScore auth service.