search

cgisca / PGSGP

Play Games Services plugin for Godot Game Engine - Android
MIT License
217 stars 61 forks source link

PGSGP: How works backend token verification? #73

Open Star-Frog opened 2 years ago

Star-Frog commented 2 years ago

I would like to integrate token authentication on the server side for the PlayGamesServices so that only the server can make calls. "Never trust the client" ;)

Seems to be a common practice: https://developer.android.com/games/pgs/android/server-access

Here is a graphic (for better understanding): _https://developer.android.com/games/playgames/integrating-pgs-existing-id-solutions#restore_player_state_

How can I have the token received - (on the backend) from the client - exchanged for the access token at Google Play Games Services. Is there a module for this or another solution? Thanks in advance! :)