OAuth 2.0 & OpenID Connect
Let users sign in with their existing account without handling their passwords. OAuth 2.0 provides access to approved data, while OpenID Connect adds identity verification through a signed ID token.
Users see the requested data and authorize your application. You manage your application's own session, and users can withdraw access from Account.
Manage applicationsChoose the application type and exact callback URL in Account. Keep a web client's secret on the server only.
Use Authorization Code with PKCE S256, state and only the scopes you need. Add a nonce for OpenID Connect.
Verify the response, exchange the code for tokens and validate the ID token before creating your application's session.
openid profile email — request OpenID Connect sign-in, profile details and email. Only request data your application uses.
offline_access — request a refresh token to renew access. Save the new refresh token returned with each renewal.
Data for your integrations
The public API provides JSON responses for Rust statistics and community articles. These endpoints are separate from Account OAuth and can be used in your own websites, applications or tools.
Read player statistics and select a profile through the id parameter, using the player's Steam ID.
GET/api/rust/stats
Display blog articles in your application or request a specific article using the id parameter.
GET/api/blog/posts
Explore our public projects, follow their development and contribute ideas, issue reports or improvements.
0 Players
April 30, 2019
contact@xopsys.ro