CLOT Authentication - Revision history

Fizzer at 02:35, 18 April 2026

2026-04-18T02:35:29Z

96.126.110.127: /* Step 3: Link to Warzone's authentication page from your website */

2024-04-03T00:29:38Z

Step 3: Link to Warzone's authentication page from your website

← Older revision		Revision as of 00:29, 3 April 2024
Line 38:		Line 38:
	# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.		# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.

	Players who click your Sign In link will be redirected back to your login page with their token and clotpass added. This CLOT ~~Authentcation~~ URL is also suitable for sharing on the Warzone forums or anywhere else you'd like to attract players.		Players who click your Sign In link will be redirected back to your login page with their token and clotpass added. This CLOT Authentication URL is also suitable for sharing on the Warzone forums or anywhere else you'd like to attract players.

	== Optional: State parameter ==		== Optional: State parameter ==

DanWL60 at 10:42, 4 December 2018

2018-12-04T10:42:54Z

← Older revision		Revision as of 10:42, 4 December 2018
Line 48:		Line 48:
	To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.warzone.com/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.		To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.warzone.com/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.

	[[:Category:CLOT]]		[[Category:CLOT]]

Fizzer at 03:39, 13 November 2017

2017-11-13T03:39:53Z

DanWL60: Added CLOT Category

2015-01-16T15:42:11Z

Added CLOT Category

← Older revision		Revision as of 15:42, 16 January 2015
Line 47:		Line 47:

	To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.warlight.net/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.		To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.warlight.net/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.

			[[:Category:CLOT]]

Fizzer at 23:55, 18 December 2014

2014-12-18T23:55:23Z

← Older revision		Revision as of 23:55, 18 December 2014
Line 28:		Line 28:
	=== Step 2: Register your log-in page with WarLight ===		=== Step 2: Register your log-in page with WarLight ===

	# Visit the following page in your browser: ~~http~~://warlight.net/CLOT/Config		# Visit the following page in your browser: https://www.warlight.net/CLOT/Config
	# Type in the URL to your log-in page into the text box under CLOT Redirect Url (http://example.com/login in this example)		# Type in the URL to your log-in page into the text box under CLOT Redirect Url (http://example.com/login in this example)
	# Click Save		# Click Save
Line 34:		Line 34:
	=== Step 3: Link to WarLight's authentication page from your website ===		=== Step 3: Link to WarLight's authentication page from your website ===

	# Visit, once again, the following page in your browser: ~~http~~://warlight.net/CLOT/Config		# Visit, once again, the following page in your browser: https://www.warlight.net/CLOT/Config
	# Copy your CLOT Authentication URL from this page		# Copy your CLOT Authentication URL from this page
	# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.		# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.
Line 46:		Line 46:
	For example, say you wanted to run two ladders from the same site, a 1v1 ladder and a 2v2 ladder. You may wish to provide a link that directly joins a player to your 1v1 ladder. However, your log-in page wouldn't know which ladder to join the player to.		For example, say you wanted to run two ladders from the same site, a 1v1 ladder and a 2v2 ladder. You may wish to provide a link that directly joins a player to your 1v1 ladder. However, your log-in page wouldn't know which ladder to join the player to.

	To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, ~~http~~://warlight.net/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.		To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.warlight.net/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.

Fizzer at 07:17, 3 May 2013

2013-05-03T07:17:00Z

← Older revision		Revision as of 07:17, 3 May 2013
Line 2:		Line 2:
	This page describes how [[CLOT]] creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are on WarLight.net.		This page describes how [[CLOT]] creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are on WarLight.net.

	If you want to allow players to perform actions on ~~the ladder~~ (adding themselves, removing themselves, forming teams, etc.), using this authentication system is recommended. However, it's possible to create a CLOT without authentication if you perform these kinds of actions yourself, or trust players to do it correctly.		If you want to allow players to perform actions on your CLOT (such as adding themselves, removing themselves, forming teams, etc.), using this authentication system is recommended. However, it's possible to create a CLOT without authentication if you perform these kinds of actions yourself or trust players to do it correctly.


	== Implementing Authentication ==		== Implementing Authentication ==

Fizzer: Created page with " This page describes how CLOT creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are ..."

2013-05-03T06:56:16Z

Created page with " This page describes how CLOT creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are ..."

New page

This page describes how [[CLOT]] creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are on WarLight.net.

If you want to allow players to perform actions on the ladder (adding themselves, removing themselves, forming teams, etc.), using this authentication system is recommended. However, it's possible to create a CLOT without authentication if you perform these kinds of actions yourself, or trust players to do it correctly.

== Implementing Authentication ==

=== Step 1: Create a log-in page ===

Create a page on your CLOT website to receive player credentials. For our example, we'll assume this page is located at http://example.com/login

This page will be passed two querystring parameters - '''token''' and '''clotpass'''. Here's the procedure you should take when implementing this page:

# Verify that both querystring parameters are present ('''token''' and '''clotpass''').
# Verify that the '''token''' in the querystring contains only numerical digits.
# Call WarLight's [[Validate invite token API]] with the '''token''' from the querystring.
# Verify that the Validate Token API returns a '''clotpass''' field.
# Verify the '''clotpass''' in the querystring exactly matches the '''clotpass''' returned from the Validate Token API.
# Store the '''token''' in the user's current session.
# Redirect the user to another page on your site.

If any of the verification steps fail, you should redirect the user to another page on your site and display an error message there.

Once the token is written into the user's current session, you may check for this on any page from your website, and if it's present, you know the user is authenticated. This token is the user's invite token, suitable for passing to the [[Create game API]]. You don't need to call the Validate Token API again as long as the user's session stays intact. You may wish to provide a Sign Out button that clears the token from the user's current session.

It's important to redirect, both on success and failure, so that the clotpass isn't ever displayed in the user's address bar. You don't want them to copy a URL with it and share it publicly without realizing it contains information they want to keep to themselves. Redirecting ensures they don't accidentally share it.

=== Step 2: Register your log-in page with WarLight ===

# Visit the following page in your browser: http://warlight.net/CLOT/Config
# Type in the URL to your log-in page into the text box under CLOT Redirect Url (http://example.com/login in this example)
# Click Save

=== Step 3: Link to WarLight's authentication page from your website ===

# Visit, once again, the following page in your browser: http://warlight.net/CLOT/Config
# Copy your CLOT Authentication URL from this page
# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.

Players who click your Sign In link will be redirected back to your login page with their token and clotpass added. This CLOT Authentcation URL is also suitable for sharing on the WarLight forums or anywhere else you'd like to attract players.

== Optional: State parameter ==

You may optionally append a '''state''' querystring argument to your CLOT Authentication URL. This will be passed through unchanged to your log-in page.

For example, say you wanted to run two ladders from the same site, a 1v1 ladder and a 2v2 ladder. You may wish to provide a link that directly joins a player to your 1v1 ladder. However, your log-in page wouldn't know which ladder to join the player to.

To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, http://warlight.net/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.

← Older revision		Revision as of 02:35, 18 April 2026
Line 1:		Line 1:

	This page describes how [[CLOT]] creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are on ~~warzone~~.~~com~~.		This page describes how [[CLOT]] creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are on war.app.

	If you want to allow players to perform actions on your CLOT (such as adding themselves, removing themselves, forming teams, etc.), using this authentication system is recommended. However, it's possible to create a CLOT without authentication if you perform these kinds of actions yourself or trust players to do it correctly.		If you want to allow players to perform actions on your CLOT (such as adding themselves, removing themselves, forming teams, etc.), using this authentication system is recommended. However, it's possible to create a CLOT without authentication if you perform these kinds of actions yourself or trust players to do it correctly.
Line 14:		Line 14:
	# Verify that both querystring parameters are present ('''token''' and '''clotpass''').		# Verify that both querystring parameters are present ('''token''' and '''clotpass''').
	# Verify that the '''token''' in the querystring contains only numerical digits.		# Verify that the '''token''' in the querystring contains only numerical digits.
	# Call ~~Warzone~~'s [[Validate invite token API]] with the '''token''' from the querystring.		# Call War.app's [[Validate invite token API]] with the '''token''' from the querystring.
	# Verify that the Validate Token API returns a '''clotpass''' field.		# Verify that the Validate Token API returns a '''clotpass''' field.
	# Verify the '''clotpass''' in the querystring exactly matches the '''clotpass''' returned from the Validate Token API.		# Verify the '''clotpass''' in the querystring exactly matches the '''clotpass''' returned from the Validate Token API.
Line 26:		Line 26:
	It's important to redirect, both on success and failure, so that the clotpass isn't ever displayed in the user's address bar. You don't want them to copy a URL with it and share it publicly without realizing it contains information they want to keep to themselves. Redirecting ensures they don't accidentally share it.		It's important to redirect, both on success and failure, so that the clotpass isn't ever displayed in the user's address bar. You don't want them to copy a URL with it and share it publicly without realizing it contains information they want to keep to themselves. Redirecting ensures they don't accidentally share it.

	=== Step 2: Register your log-in page with ~~Warzone~~ ===		=== Step 2: Register your log-in page with War.app ===

	# Visit the following page in your browser: https://www.~~warzone~~.~~com~~/CLOT/Config		# Visit the following page in your browser: https://www.war.app/CLOT/Config
	# Type in the URL to your log-in page into the text box under CLOT Redirect Url (http://example.com/login in this example)		# Type in the URL to your log-in page into the text box under CLOT Redirect Url (http://example.com/login in this example)
	# Click Save		# Click Save

	=== Step 3: Link to ~~Warzone~~'s authentication page from your website ===		=== Step 3: Link to War.app's authentication page from your website ===

	# Visit, once again, the following page in your browser: https://www.~~warzone~~.~~com~~/CLOT/Config		# Visit, once again, the following page in your browser: https://www.war.app/CLOT/Config
	# Copy your CLOT Authentication URL from this page		# Copy your CLOT Authentication URL from this page
	# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.		# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.

	Players who click your Sign In link will be redirected back to your login page with their token and clotpass added. This CLOT Authentication URL is also suitable for sharing on the ~~Warzone~~ forums or anywhere else you'd like to attract players.		Players who click your Sign In link will be redirected back to your login page with their token and clotpass added. This CLOT Authentication URL is also suitable for sharing on the War.app forums or anywhere else you'd like to attract players.

	== Optional: State parameter ==		== Optional: State parameter ==
Line 46:		Line 46:
	For example, say you wanted to run two ladders from the same site, a 1v1 ladder and a 2v2 ladder. You may wish to provide a link that directly joins a player to your 1v1 ladder. However, your log-in page wouldn't know which ladder to join the player to.		For example, say you wanted to run two ladders from the same site, a 1v1 ladder and a 2v2 ladder. You may wish to provide a link that directly joins a player to your 1v1 ladder. However, your log-in page wouldn't know which ladder to join the player to.

	To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.~~warzone~~.~~com~~/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.		To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.war.app/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.

	[[Category:CLOT]]		[[Category:CLOT]]

← Older revision		Revision as of 03:39, 13 November 2017
Line 1:		Line 1:

	This page describes how [[CLOT]] creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are on ~~WarLight~~.~~net~~.		This page describes how [[CLOT]] creators can authenticate players on their website. This means that when a player comes to your CLOT website, you can find out who they are on warzone.com.

	If you want to allow players to perform actions on your CLOT (such as adding themselves, removing themselves, forming teams, etc.), using this authentication system is recommended. However, it's possible to create a CLOT without authentication if you perform these kinds of actions yourself or trust players to do it correctly.		If you want to allow players to perform actions on your CLOT (such as adding themselves, removing themselves, forming teams, etc.), using this authentication system is recommended. However, it's possible to create a CLOT without authentication if you perform these kinds of actions yourself or trust players to do it correctly.
Line 14:		Line 14:
	# Verify that both querystring parameters are present ('''token''' and '''clotpass''').		# Verify that both querystring parameters are present ('''token''' and '''clotpass''').
	# Verify that the '''token''' in the querystring contains only numerical digits.		# Verify that the '''token''' in the querystring contains only numerical digits.
	# Call ~~WarLight~~'s [[Validate invite token API]] with the '''token''' from the querystring.		# Call Warzone's [[Validate invite token API]] with the '''token''' from the querystring.
	# Verify that the Validate Token API returns a '''clotpass''' field.		# Verify that the Validate Token API returns a '''clotpass''' field.
	# Verify the '''clotpass''' in the querystring exactly matches the '''clotpass''' returned from the Validate Token API.		# Verify the '''clotpass''' in the querystring exactly matches the '''clotpass''' returned from the Validate Token API.
Line 26:		Line 26:
	It's important to redirect, both on success and failure, so that the clotpass isn't ever displayed in the user's address bar. You don't want them to copy a URL with it and share it publicly without realizing it contains information they want to keep to themselves. Redirecting ensures they don't accidentally share it.		It's important to redirect, both on success and failure, so that the clotpass isn't ever displayed in the user's address bar. You don't want them to copy a URL with it and share it publicly without realizing it contains information they want to keep to themselves. Redirecting ensures they don't accidentally share it.

	=== Step 2: Register your log-in page with ~~WarLight~~ ===		=== Step 2: Register your log-in page with Warzone ===

	# Visit the following page in your browser: https://www.~~warlight~~.~~net~~/CLOT/Config		# Visit the following page in your browser: https://www.warzone.com/CLOT/Config
	# Type in the URL to your log-in page into the text box under CLOT Redirect Url (http://example.com/login in this example)		# Type in the URL to your log-in page into the text box under CLOT Redirect Url (http://example.com/login in this example)
	# Click Save		# Click Save

	=== Step 3: Link to ~~WarLight~~'s authentication page from your website ===		=== Step 3: Link to Warzone's authentication page from your website ===

	# Visit, once again, the following page in your browser: https://www.~~warlight~~.~~net~~/CLOT/Config		# Visit, once again, the following page in your browser: https://www.warzone.com/CLOT/Config
	# Copy your CLOT Authentication URL from this page		# Copy your CLOT Authentication URL from this page
	# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.		# Provide a "Sign In" link on your website that points at your CLOT Authentication URL.

	Players who click your Sign In link will be redirected back to your login page with their token and clotpass added. This CLOT Authentcation URL is also suitable for sharing on the ~~WarLight~~ forums or anywhere else you'd like to attract players.		Players who click your Sign In link will be redirected back to your login page with their token and clotpass added. This CLOT Authentcation URL is also suitable for sharing on the Warzone forums or anywhere else you'd like to attract players.

	== Optional: State parameter ==		== Optional: State parameter ==
Line 46:		Line 46:
	For example, say you wanted to run two ladders from the same site, a 1v1 ladder and a 2v2 ladder. You may wish to provide a link that directly joins a player to your 1v1 ladder. However, your log-in page wouldn't know which ladder to join the player to.		For example, say you wanted to run two ladders from the same site, a 1v1 ladder and a 2v2 ladder. You may wish to provide a link that directly joins a player to your 1v1 ladder. However, your log-in page wouldn't know which ladder to join the player to.

	To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.~~warlight~~.~~net~~/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.		To fix this, append &state=1v1 to the end of your CLOT Authentication URL. For example, https://www.warzone.com/CLOT/Auth?p=1234567&state=1v1. Once the player is redirected, your log-in page will be called with this state, for example: http://example.com/login?token=12345&clotpass=asdfg&state=1v1. Your code can look for this '''state''' parameter and parse its meaning.

	[[:Category:CLOT]]		[[:Category:CLOT]]