Authentication

Secure and scalable player authentication for Ondara.

All authentication is handled securely on our servers. Passwords are hashed with bcrypt and tokens are signed with RS256. We never store plaintext credentials.

Supported Providers

Anonymous

Available

Quick sign-in without credentials. Perfect for testing or guest play.

Email/Password

Available

Traditional email and password authentication with verification.

Google

Available

Apple

Available

Steam

Available

Authenticate using Steam accounts for PC games.

Custom

Available

Bring your own identity provider with JWT tokens.

Code Examples

1
2
3
4
5
6
7
8
// Anonymous login - creates a new player or returns existing
var player = await Ondara.Auth.LoginAnonymous();

// The player ID persists across sessions
Debug.Log($"Player ID: {player.Id}");

// You can upgrade anonymous accounts later
await Ondara.Auth.LinkEmail("email@example.com", "password");

Account Linking

Players can link multiple auth providers to a single account. This lets them start as anonymous and later add email or social login without losing progress.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
// Link email to existing account
await Ondara.Auth.LinkEmail("email@example.com", "password");

// Link Google account
await Ondara.Auth.LinkGoogle();

// Unlink a provider (must have at least one remaining)
await Ondara.Auth.UnlinkProvider("google");

// Get all linked providers
var providers = Ondara.Auth.CurrentPlayer.Providers;
foreach (var provider in providers)
{
    Debug.Log($"Linked: {provider.Type}");
}

Session Management

Automatic Session Handling

Sessions are automatically refreshed. Players stay logged in across app restarts.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
// Check if player is logged in
if (Ondara.Auth.IsLoggedIn)
{
    var player = Ondara.Auth.CurrentPlayer;
    Debug.Log($"Welcome back, {player.DisplayName}!");
}

// Listen for auth state changes
Ondara.Auth.OnAuthStateChanged += (player) =>
{
    if (player != null)
        Debug.Log("Player logged in");
    else
        Debug.Log("Player logged out");
};

// Logout
await Ondara.Auth.Logout();

Best Practices

Start with Anonymous Auth
Let players try your game immediately, then prompt them to create an account later.
Handle Auth Errors Gracefully
Always wrap auth calls in try/catch and show user-friendly error messages.
Offer Multiple Providers
Different players prefer different login methods. Support at least 2-3 options.

Player Data Cloud Save

Supported Providers

Anonymous

Available

Quick sign-in without credentials. Perfect for testing or guest play.

Email/Password

Available

Traditional email and password authentication with verification.

Google

Available

Apple

Available

Steam

Available

Authenticate using Steam accounts for PC games.

Custom

Available

Bring your own identity provider with JWT tokens.

Code Examples

1
2
3
4
5
6
7
8
// Anonymous login - creates a new player or returns existing
var player = await Ondara.Auth.LoginAnonymous();

// The player ID persists across sessions
Debug.Log($"Player ID: {player.Id}");

// You can upgrade anonymous accounts later
await Ondara.Auth.LinkEmail("email@example.com", "password");

Account Linking

Players can link multiple auth providers to a single account. This lets them start as anonymous and later add email or social login without losing progress.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
// Link email to existing account
await Ondara.Auth.LinkEmail("email@example.com", "password");

// Link Google account
await Ondara.Auth.LinkGoogle();

// Unlink a provider (must have at least one remaining)
await Ondara.Auth.UnlinkProvider("google");

// Get all linked providers
var providers = Ondara.Auth.CurrentPlayer.Providers;
foreach (var provider in providers)
{
    Debug.Log($"Linked: {provider.Type}");
}

Session Management

Automatic Session Handling

Sessions are automatically refreshed. Players stay logged in across app restarts.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
// Check if player is logged in
if (Ondara.Auth.IsLoggedIn)
{
    var player = Ondara.Auth.CurrentPlayer;
    Debug.Log($"Welcome back, {player.DisplayName}!");
}

// Listen for auth state changes
Ondara.Auth.OnAuthStateChanged += (player) =>
{
    if (player != null)
        Debug.Log("Player logged in");
    else
        Debug.Log("Player logged out");
};

// Logout
await Ondara.Auth.Logout();

Best Practices

Start with Anonymous Auth

Let players try your game immediately, then prompt them to create an account later.

Handle Auth Errors Gracefully

Always wrap auth calls in try/catch and show user-friendly error messages.

Offer Multiple Providers

Different players prefer different login methods. Support at least 2-3 options.