XboxAuthNet

Microsoft OAuth 2.0 and Xbox Authentication

Features

• Microsoft OAuth Code Flow
• Xbox Authentication
• Xbox Sisu Authentication with Proof-of-Possession

Install

XboxAuthNet

Usage: Microsoft OAuth

Currently only auth code flow is supported.

// Initialize API clientvarhttpClient=newHttpClient();varapiClient=newMicrosoftOAuthCodeApiClient("<CLIENT-ID>","<SCOPES>",httpClient);// replace "SCOPES" to XboxAuth.XboxScope for Xbox Authentication// Authenticate with auth code flowvarcodeFlow=newMicrosoftOAuthCodeFlowBuilder(apiClient).Build();MicrosoftOAuthResponseresult=awaitcodeFlow.Authenticate();// `result.AccessToken` can be used on Xbox Authentication// store `result` variable to refresh token later.// `MicrosoftOAuthResponse` can be serialized (like json)Console.WriteLine(result.AccessToken);Console.WriteLine(result.RefreshToken);

Refresh Microsoft OAuth Token

if(!result.Validate()){varnewResult=awaitapiClient.RefreshToken(result.RefreshToken,CancellationToken.None);Console.WriteLine(newResult.AccessToken);Console.WriteLine(newResult.RefreshToken);}

Usage: Xbox Authentication

There are three Xbox authentication methods. You can find a description of each method here.

Xbox Basic Authentication

varhttpClient=newHttpClient();varxboxAuthClient=newXboxAuthClient(httpClient);varuserToken=awaitxboxAuthClient.RequestUserToken("<microsoft_oauth2_access_token>");varxsts=awaitxboxAuthClient.RequestXsts(userToken.Token,"<relying_party>");Console.WriteLine(xsts.Token);

Xbox Full Authentication

varhttpClient=newHttpClient();varxboxAuthClient=newXboxAuthClient(httpClient);varuserToken=awaitxboxAuthClient.RequestSignedUserToken(newXboxSignedUserTokenRequest{AccessToken="<microsoft_oauth2_access_token>",TokenPrefix=AbstractXboxAuthRequest.XboxTokenPrefix});vardeviceToken=awaitxboxAuthClient.RequestDeviceToken(newXboxDeviceTokenRequest{DeviceType=XboxDeviceTypes.Nintendo,DeviceVersion="0.0.0"});vartitleToken=awaitxboxAuthClient.RequestTitleToken(newXboxTitleTokenRequest{AccessToken="<microsoft_oauth2_access_token>",DeviceToken=deviceToken.Token});varxsts=awaitxboxAuthClient.RequestXsts(newXboxXstsRequest{UserToken=userToken.Token,DeviceToken=deviceToken.Token,TitleToken=titleToken.Token,RelyingParty="<relying_party>"});Console.WriteLine(xsts.Token);

Xbox Sisu Authentication

varhttpClient=newHttpClient();varxboxAuthClient=newXboxAuthClient(httpClient);vardeviceToken=awaitxboxAuthClient.RequestDeviceToken(XboxDeviceTypes.Win32,"0.0.0");varsisuResult=awaitxboxAuthClient.SisuAuth(newXboxSisuAuthRequest{AccessToken="<microsoft_oauth2_access_token>",ClientId=XboxGameTitles.MinecraftJava,DeviceToken=deviceToken.Token,RelyingParty="<relying_party>"});Console.WriteLine(xsts.Token);

Example

Example project

References

These documents explain how Microsoft OAuth 2.0 works.

Microsoft OAuth 2.0

Desktop application calling a web api (XboxAuthNet implements interactive authentication)

This project was made possible thanks to the contributions of various open-source projects. not used any document from NDA developer program

MSAL.NET

xbox-live-api

xboxlive-auth

prismarine-auth