Introduction
In case your application has no backend (or server), then you need to create a client which uses the OAuth 2.0 Implicit Grant flow.
OAuth 2.0 Implicit Grant Flow
The Implicit grant flow is of a very similar nature to the authorization code grant, with the only difference being that the server returns the access token instead of the auth token once the user is redirected.
As indicated above, this flow can be broken into the following steps:
Since there is no backend in your application, user authorization is handled by Playlyfe. The use needs to login with with his Playlyfe account.
The user is redirected from your application to Playlyfe's authorization endpoint.
Here, the user logs into their Playlyfe account and are shown an authorization prompt to authorize your application to use their Playlyfe credentials.
The user can decide to either grant or deny your application permission. Let us assume permission is granted.
The user is redirected to the redirect URI (provided by you) along with an access token, which can be used by your app to access the user's resources.
Creating the Client
To create a client, head over to your app and navigate to
Menu > Develop > Clients.
There, add a new client and in the client page, select
- No for the first question (Should API calls be made from the backend?)
No for the second (Has own login login system?)
You will need to enter a client name and choose if it is a test client. In a test client, all activity will happen in staging, so that your can safely test your client without worrying about data in production.
The client scopes decide what parts of the API does this client have access to. Be default, the client has access to only Player Runtime routes.
SDKs
Since this type of client resides in the browser, you have to use the Playlyfe Javascript SDK.
Examples
You can find a detailed example in our blog series Jet-Set-Gamify. In the series we take an example todo App and integrate it with Playlyfe.
For any futher assistance, you can find us at our forums.