Capabilities
VERIFY_GAME_CREDENTIALS
Linking a game account to a master account
Bridge contract
String verifyCredentials(String accountName, String password) throws Exception;Return one of:
| Result | Meaning |
|---|---|
VALID | Account exists, is enabled, and the password matches |
INVALID_CREDENTIALS | Account does not exist or the password does not match |
ACCOUNT_DISABLED | Account exists but its access level disables login |
TEMPORARY_FAILURE | The operation could not be completed |
Use the password format implemented by the target revision:
- aCis 409: bcrypt through
BCrypt.checkPw - Mobius CT_0: SHA-1 digest encoded with Base64
Read the account through a parameterized query. Do not log, persist, or return the supplied plaintext password.
Verification
Connector check submits a non-existent account. The expected result is
INVALID_CREDENTIALS; ACCOUNT_DISABLED is also accepted as a clean
rejection.