ClientAuth

Client Platform Overview

Integrate Axolite into launchers with secure player auth, user profiles, plans, and analytics.

Before you begin

Create a client app in dashboard.
Store client_secret only in your backend.
Set separate secrets for development and production launchers.

Endpoint guide

Task	Endpoint	Typical frequency
Validate launcher session	`POST /client/player-auth/verify`	Per login attempt
List player accounts	`GET /client/users`	Admin dashboard refresh
Resolve permissions	`GET /client/ranks/:rank_id/merged-permissions`	On rank change or login
Load plans	`GET /client/plans`	On store page load
Stream analytics	`GET /ws/client/:client_app_id/analytics`	Continuous

What you can build

Centralized launcher login and token handoff.
Rank and plan aware feature gating.
Realtime analytics from launcher events.

TypeScript example

const res = await fetch("https://api.axolite.dev/client/player-auth/verify", {
  method: "POST",
  headers: {
    "content-type": "application/json",
    "x-client-secret": process.env.AXOLITE_CLIENT_SECRET!
  },
  body: JSON.stringify({ session_token: "pst_abc123" })
})

const payload = await res.json()
if (!payload.valid) {
  throw new Error("Session not valid")
}

Recommended start order

/client/apps
/client/player-auth
/client/users
/client/ranks
/client/plans
/client/websockets