Colyseus is fully open-source. Please consider donating any amount to support the project ❤️



Authentication

This section covers the configuration and usage of @colyseus/social.

@colyseus/social is an experimental module that provides general-purpose backend services to speed-up your multiplayer game development experience. The API is open for suggestions and improvement.

Tip

If you're looking to implement your own authentication method, see Server API » Authentication

Installation

1. Download and install MongoDB

2. Install the @colyseus/social module.

npm install @colyseus/social
npm install express-jwt

1. Import and expose the Express routes provided by @colyseus/social.

import express from "express";
import socialRoutes from "@colyseus/social/express"

const app = express();
app.use("/", socialRoutes);

app.listen(8080);

Server-side configuration

Environment Variables

• MONGO_URI: MongoDB connection URI
• JWT_SECRET: Secure secret string for authentication.
• FACEBOOK_APP_TOKEN: Facebook App Token ("appid|appsecret")

Server-side API

The @colyseus/social module provides the MongoDB models, and the token validation function available for you to use.

import { User, FriendRequest, verifyToken } from "@colyseus/social";

Implementing onAuth to retrieve the current user

import { User, verifyToken } from "@colyseus/social";

class MyRoom extends Room {

  async onAuth(client, options) {
    // verify token authenticity
    const token = verifyToken(options.token);

    // query the user by its id
    return await User.findById(token._id);
  }

  onJoin(client, options, user) {
    console.log(user.username, "has joined the room!");
  }

}

Hooks

hooks.beforeAuthenticate

The beforeAuthenticate hook is triggered before a user logs in or registers.

import { hooks } from "@colyseus/social";

hooks.beforeAuthenticate((provider, $setOnInsert, $set) => {
    // assign default metadata upon registration
    $setOnInsert.metadata = {
      coins: 100,
      trophies: 0
    };
});

hooks.beforeUserUpdate

The beforeUserUpdate hooks is triggered before a user update his own information through the save() method.

import Filter from "bad-words";
const filter = new Filter();

hooks.beforeUserUpdate((_id, fields) => {
  if (fields['username'] && filter.isProfane(fields['username'])) {
    throw new Error("no_swearing_allowed");
  }
})

Client-side API

Login

• Anonymous
• Email + Password
• Facebook

Anonymous

JavaScript

await client.auth.login();

C#

await client.Auth.Login();

lua

client.auth:login(function(err, auth)
  -- ...
end);

Email + Password

JavaScript

await client.auth.login({
  email: "user@example.com",
  password: "12345"
});

C#

await client.Auth.Login("user@example.com", "12345");

lua

client.auth:login({
  email = "user@example.com",
  password = "12345"
}, function(err, auth)
  -- ...
end)

Facebook

JavaScript

//
// Make sure you have the Facebook SDK installed and configured first
// - https://developers.facebook.com/docs/javascript/quickstart
// - https://developers.facebook.com/docs/facebook-login/web
//

FB.login(function(response) {
  if (response.authResponse) {
    client.auth.login({ accessToken: response.authResponse.accessToken });
  }
}, { scope: 'public_profile,email,user_friends' });

C#

//
// Make sure you have the Facebook SDK installed and configured first
// - https://developers.facebook.com/docs/unity/gettingstarted
// - https://developers.facebook.com/docs/unity/examples#login
//
var perms = new List<string>(){"public_profile", "email", "user_friends"};
FB.LogInWithReadPermissions(perms, AuthCallback);

private void AuthCallback (ILoginResult result) {
    if (FB.IsLoggedIn) {
        client.Auth.Login(Facebook.Unity.AccessToken.CurrentAccessToken);
    }
}

lua

client.auth:facebook_login(function(err, auth)
  pprint(auth)
end)

Update User Data

You can modify the username, displayName, avatarUrl, lang, location, and timezone from the client-side, and then call the save() method.

JavaScript

client.auth.username = "Hello world!"
await client.auth.save();

C#

client.Auth.Username = "Hello world!";
await client.Auth.Save();

lua

client.auth.username = "Hello world!"
client.auth:save()

Logout

JavaScript

client.auth.logout();

C#

client.Auth.Logout();

lua

client.auth:logout();

Get Friends

JavaScript

const friends = await client.auth.getFriends();
friends.forEach(friend => {
  console.log(friend.username);
});

C#

var friends = await client.Auth.GetFriends();
for (var i=0; i<friends.Length; i++)
{
  Debug.Log(friends[i].Username);
}

lua

client.auth:get_friends(function(err, friends)
  for i, friend in pairs(friends) do
    print(friend.username)
  end
end);

Get Online Friends

JavaScript

const friends = await client.auth.getOnlineFriends();
friends.forEach(friend => {
  console.log(friend.username);
});

C#

var friends = await client.Auth.GetOnlineFriends();
for (var i=0; i<friends.Length; i++)
{
  Debug.Log(friends[i].Username);
}

lua

client.auth:get_online_friends(function(err, friends)
  for i, friend in pairs(friends) do
    print(friend.username)
  end
end);

Get Friend Requests

JavaScript

const friends = await client.auth.getFriendRequests();
friends.forEach(friend => {
  console.log(friend.username);
});

C#

var friends = await client.Auth.GetFriendRequests();
for (var i=0; i<friends.Length; i++)
{
  Debug.Log(friends[i].Username);
}

lua

client.auth:get_friend_requests(function(err, friends)
  for i, friend in pairs(friends) do
    print(friend.username)
  end
end);

Accept Friend Request

JavaScript

await client.auth.acceptFriendRequest(friendId);

C#

await client.Auth.AcceptFriendRequest(friendId);

lua

client.auth:accept_friend_request(friend_id)

Decline Friend Request

JavaScript

await client.auth.declineFriendRequest(friendId);

C#

await client.Auth.DeclineFriendRequest(friendId);

lua

client.auth:decline_friend_request(friend_id)

Send Friend Request

JavaScript

await client.auth.sendFriendRequest(friendId);

C#

await client.Auth.SendFriendRequest(friendId);

lua

client.auth:send_friend_request(friend_id)

Block User

JavaScript

await client.auth.blockUser(friendId);

C#

await client.Auth.BlockUser(friendId);

lua

client.auth:block_user(friend_id)

Unblock User

JavaScript

await client.auth.unblockUser(friendId);

C#

await client.Auth.UnblockUser(friendId);

lua

client.auth:unblock_user(friend_id)

---

Colyseus is fully open-source. Please consider donating any amount to support the project ❤️