---
title: "Initiate Game Auth"
method: POST
path: "/{YOUR_INITIATE_GAME_AUTH_ENDPOINT}"
tags: ["Authentication"]
---

# Initiate Game Auth

`POST /{YOUR_INITIATE_GAME_AUTH_ENDPOINT}`

<Warning> This API endpoint is only relevant for the Game Redirect Login method. </Warning> <Note> This is a callback API. Appcharge calls this endpoint on your server when specific events occur. </Note> Notifies your system to initiate an authentication session in your game. <br /> <br /> Appcharge calls this endpoint when a player attempts to log in via [Game Redirect Login](/../../guides/webstore/player-authentication/game-redirect-login/about-game-redirect-login). Your server responds with either the data needed to redirect the player to your game for authentication, or an error.

## Headers

- `x-publisher-token` string
- `signature` string

## Request body

- object
  - `device` 'DESKTOP' | 'APPCHARGE' — Device the player used to log in. + `DESKTOP`: PCs and laptops. + `APPCHARGE`: Mobile.
  - `date` string, date-time — Date in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format.

## Response `200`

OK

- object
  - `deepLink` string, required — Deeplink for redirecting the player to your game for authentication.
  - `accessToken` string, required — Player access token.
  - `desktopAutoRedirect` boolean — Whether players logging into the web store on desktop are redirected to the deepLink URL instead of being shown a QR code. When `false` or omitted, these players see a QR code of the deeplink and must scan it with their phone to open the game.

## Other responses

- `400` — Invalid signature
- `401` — Unauthorized
- `403` — Parameters not correct

---

[API](https://skmtc.net/appcharge/apis/grant-award.md) · [All operations](https://skmtc.net/appcharge/apis/grant-award/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/appcharge/grant-award/revisions/b4f6759240d5/schema)