{
  "info": {
    "_postman_id": "b97486a2-5632-4db0-a4d1-6777b9699ffa",
    "name": "Appcharge Assets Authentication API",
    "description": "Appcharge is a monetization platform for mobile games, providing a direct-to-consumer (D2C) web store, mobile Checkout SDK, and Payment Links so publishers can sell in-game offers outside the app stores. This API covers checkout sessions, refunds, coupons and promo codes, price localization, financial and analytics reporting, web store offers (bundles, daily bonuses, rolling/special offers, progress bars, reward calendars, triggered popups), offer components (products, badges, offer designs), game-portal content, media assets, translations, and player personalization/authentication callbacks. Authentication uses the x-publisher-token header; webhooks are signed with an HMAC-SHA256 signature.\n\nContact Support:\n Name: Appcharge Developer Support",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "createdAt": "2026-07-28T01:02:47.000Z",
    "updatedAt": "2026-07-28T01:02:48.000Z",
    "lastUpdatedBy": "35240",
    "uid": "35240-b97486a2-5632-4db0-a4d1-6777b9699ffa"
  },
  "item": [
    {
      "name": "{YOUR_AUTHENTICATE_PLAYER_ENDPOINT}",
      "item": [
        {
          "name": "Authenticate Player",
          "id": "78ba612d-5c37-4d64-a55f-b51a826d7209",
          "protocolProfileBehavior": {
            "disableBodyPruning": true
          },
          "request": {
            "method": "POST",
            "header": [
              {
                "description": "Publisher token.",
                "key": "x-publisher-token",
                "value": "<string>"
              },
              {
                "description": "The signed payload.",
                "key": "signature",
                "value": "<string>"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              },
              {
                "key": "Accept",
                "value": "application/json"
              }
            ],
            "body": {
              "mode": "raw",
              "raw": "{\n  \"authMethod\": \"userToken\",\n  \"token\": \"<string,null>\",\n  \"date\": \"<dateTime>\",\n  \"appId\": \"<string>\",\n  \"userName\": \"<string,null>\",\n  \"password\": \"<string,null>\",\n  \"otp\": null,\n  \"os\": \"android\",\n  \"utmSource\": \"<string>\",\n  \"utmMedium\": \"<string>\",\n  \"utmCampaign\": \"<string>\",\n  \"sessionId\": \"<string>\",\n  \"playerLocation\": {\n    \"countryCode2\": \"<string>\",\n    \"state\": \"<string>\"\n  }\n}",
              "options": {
                "raw": {
                  "headerFamily": "json",
                  "language": "json"
                }
              }
            },
            "url": {
              "raw": "{{baseUrl}}/:YOUR_AUTHENTICATE_PLAYER_ENDPOINT",
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                ":YOUR_AUTHENTICATE_PLAYER_ENDPOINT"
              ],
              "variable": [
                {
                  "id": "cf4b935a-19d0-4a24-9d2a-b3d7b8b1b439",
                  "key": "YOUR_AUTHENTICATE_PLAYER_ENDPOINT"
                }
              ]
            },
            "description": "<Note> This is a callback API. Appcharge calls this endpoint on your server when specific events occur. </Note> \n\n Notifies your system to authenticate a player in your web store. <br /> <br /> Appcharge calls this endpoint when a player attempts to log in to your web store using one of the configured login methods. Your server identifies the player and responds with either the player data or an authentication error. <br /> <br /> If the response indicates a successful authentication, the player is logged in to the web store."
          },
          "response": [
            {
              "id": "ba4906cd-4b18-4b51-8ae2-27b8fdc76ac3",
              "name": "New Response",
              "originalRequest": {
                "method": "POST",
                "header": [
                  {
                    "description": "Publisher token.",
                    "key": "x-publisher-token",
                    "value": "<string>"
                  },
                  {
                    "description": "The signed payload.",
                    "key": "signature",
                    "value": "<string>"
                  },
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  },
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"authMethod\": \"userToken\",\n  \"token\": \"<string,null>\",\n  \"date\": \"<dateTime>\",\n  \"appId\": \"<string>\",\n  \"userName\": \"<string,null>\",\n  \"password\": \"<string,null>\",\n  \"otp\": null,\n  \"os\": \"android\",\n  \"utmSource\": \"<string>\",\n  \"utmMedium\": \"<string>\",\n  \"utmCampaign\": \"<string>\",\n  \"sessionId\": \"<string>\",\n  \"playerLocation\": {\n    \"countryCode2\": \"<string>\",\n    \"state\": \"<string>\"\n  }\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/:YOUR_AUTHENTICATE_PLAYER_ENDPOINT",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    ":YOUR_AUTHENTICATE_PLAYER_ENDPOINT"
                  ],
                  "variable": [
                    {
                      "key": "YOUR_AUTHENTICATE_PLAYER_ENDPOINT"
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"status\": \"valid\",\n  \"publisherPlayerId\": \"<string>\",\n  \"playerName\": \"<string>\",\n  \"playerProfileImage\": \"<string>\",\n  \"sessionMetadata\": {},\n  \"publisherErrorMessageType\": \"plainText\",\n  \"publisherErrorMessage\": \"<string>\",\n  \"publisherErrorMessageTitle\": \"<string>\",\n  \"playerOverrideCountry\": \"<string>\"\n}",
              "createdAt": "2026-07-28T01:02:48.000Z",
              "updatedAt": "2026-07-28T01:02:48.000Z",
              "uid": "35240-ba4906cd-4b18-4b51-8ae2-27b8fdc76ac3"
            }
          ],
          "createdAt": "2026-07-28T01:02:48.000Z",
          "updatedAt": "2026-07-28T01:02:48.000Z",
          "uid": "35240-78ba612d-5c37-4d64-a55f-b51a826d7209"
        }
      ],
      "id": "bfabfc41-93af-4298-8b11-a5c6eb868917",
      "createdAt": "2026-07-28T01:02:48.000Z",
      "updatedAt": "2026-07-28T01:02:48.000Z",
      "uid": "35240-bfabfc41-93af-4298-8b11-a5c6eb868917"
    },
    {
      "name": "{YOUR_INITIATE_GAME_AUTH_ENDPOINT}",
      "item": [
        {
          "name": "Initiate Game Auth",
          "id": "17592136-c826-4826-b9e3-c062d3b46662",
          "protocolProfileBehavior": {
            "disableBodyPruning": true
          },
          "request": {
            "method": "POST",
            "header": [
              {
                "description": "Publisher token.",
                "key": "x-publisher-token",
                "value": "<string>"
              },
              {
                "description": "The signed payload.",
                "key": "signature",
                "value": "<string>"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              },
              {
                "key": "Accept",
                "value": "application/json"
              }
            ],
            "body": {
              "mode": "raw",
              "raw": "{\n  \"device\": \"APPCHARGE\",\n  \"date\": \"<dateTime>\"\n}",
              "options": {
                "raw": {
                  "headerFamily": "json",
                  "language": "json"
                }
              }
            },
            "url": {
              "raw": "{{baseUrl}}/:YOUR_INITIATE_GAME_AUTH_ENDPOINT",
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                ":YOUR_INITIATE_GAME_AUTH_ENDPOINT"
              ],
              "variable": [
                {
                  "id": "5e66774c-aa2d-4152-9c85-2a0049f42538",
                  "key": "YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                }
              ]
            },
            "description": "<Warning> This API endpoint is only relevant for the Game Redirect Login method. </Warning> <Note> This is a callback API. Appcharge calls this endpoint on your server when specific events occur. </Note> Notifies your system to initiate an authentication session in your game. <br /> <br /> Appcharge calls this endpoint when a player attempts to log in via [Game Redirect Login](/../../guides/webstore/player-authentication/game-redirect-login/about-game-redirect-login). Your server responds with either the data needed to redirect the player to your game for authentication, or an error."
          },
          "response": [
            {
              "id": "e23ac90b-742f-405c-97db-475f9d87874a",
              "name": "OK",
              "originalRequest": {
                "method": "POST",
                "header": [
                  {
                    "description": "Publisher token.",
                    "key": "x-publisher-token",
                    "value": "<string>"
                  },
                  {
                    "description": "The signed payload.",
                    "key": "signature",
                    "value": "<string>"
                  },
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  },
                  {
                    "key": "Accept",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"device\": \"APPCHARGE\",\n  \"date\": \"<dateTime>\"\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/:YOUR_INITIATE_GAME_AUTH_ENDPOINT",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    ":YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                  ],
                  "variable": [
                    {
                      "key": "YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                    }
                  ]
                }
              },
              "status": "OK",
              "code": 200,
              "_postman_previewlanguage": "json",
              "header": [
                {
                  "key": "Content-Type",
                  "value": "application/json"
                }
              ],
              "cookie": [],
              "responseTime": null,
              "body": "{\n  \"deepLink\": \"<string>\",\n  \"accessToken\": \"<string>\",\n  \"desktopAutoRedirect\": false\n}",
              "createdAt": "2026-07-28T01:02:48.000Z",
              "updatedAt": "2026-07-28T01:02:48.000Z",
              "uid": "35240-e23ac90b-742f-405c-97db-475f9d87874a"
            },
            {
              "id": "f009eab8-c3b8-430d-88bb-6e247ee1c29c",
              "name": "Invalid signature",
              "originalRequest": {
                "method": "POST",
                "header": [
                  {
                    "description": "Publisher token.",
                    "key": "x-publisher-token",
                    "value": "<string>"
                  },
                  {
                    "description": "The signed payload.",
                    "key": "signature",
                    "value": "<string>"
                  },
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"device\": \"APPCHARGE\",\n  \"date\": \"<dateTime>\"\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/:YOUR_INITIATE_GAME_AUTH_ENDPOINT",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    ":YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                  ],
                  "variable": [
                    {
                      "key": "YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                    }
                  ]
                }
              },
              "status": "Bad Request",
              "code": 400,
              "_postman_previewlanguage": "text",
              "header": [],
              "cookie": [],
              "responseTime": null,
              "body": null,
              "createdAt": "2026-07-28T01:02:48.000Z",
              "updatedAt": "2026-07-28T01:02:48.000Z",
              "uid": "35240-f009eab8-c3b8-430d-88bb-6e247ee1c29c"
            },
            {
              "id": "c4e47b0f-8dc2-46aa-b619-4f679f77b3ca",
              "name": "Unauthorized",
              "originalRequest": {
                "method": "POST",
                "header": [
                  {
                    "description": "Publisher token.",
                    "key": "x-publisher-token",
                    "value": "<string>"
                  },
                  {
                    "description": "The signed payload.",
                    "key": "signature",
                    "value": "<string>"
                  },
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"device\": \"APPCHARGE\",\n  \"date\": \"<dateTime>\"\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/:YOUR_INITIATE_GAME_AUTH_ENDPOINT",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    ":YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                  ],
                  "variable": [
                    {
                      "key": "YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                    }
                  ]
                }
              },
              "status": "Unauthorized",
              "code": 401,
              "_postman_previewlanguage": "text",
              "header": [],
              "cookie": [],
              "responseTime": null,
              "body": null,
              "createdAt": "2026-07-28T01:02:48.000Z",
              "updatedAt": "2026-07-28T01:02:48.000Z",
              "uid": "35240-c4e47b0f-8dc2-46aa-b619-4f679f77b3ca"
            },
            {
              "id": "32cd3c23-70af-4128-9a88-2c4b28d78622",
              "name": "Parameters not correct",
              "originalRequest": {
                "method": "POST",
                "header": [
                  {
                    "description": "Publisher token.",
                    "key": "x-publisher-token",
                    "value": "<string>"
                  },
                  {
                    "description": "The signed payload.",
                    "key": "signature",
                    "value": "<string>"
                  },
                  {
                    "key": "Content-Type",
                    "value": "application/json"
                  }
                ],
                "body": {
                  "mode": "raw",
                  "raw": "{\n  \"device\": \"APPCHARGE\",\n  \"date\": \"<dateTime>\"\n}",
                  "options": {
                    "raw": {
                      "headerFamily": "json",
                      "language": "json"
                    }
                  }
                },
                "url": {
                  "raw": "{{baseUrl}}/:YOUR_INITIATE_GAME_AUTH_ENDPOINT",
                  "host": [
                    "{{baseUrl}}"
                  ],
                  "path": [
                    ":YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                  ],
                  "variable": [
                    {
                      "key": "YOUR_INITIATE_GAME_AUTH_ENDPOINT"
                    }
                  ]
                }
              },
              "status": "Forbidden",
              "code": 403,
              "_postman_previewlanguage": "text",
              "header": [],
              "cookie": [],
              "responseTime": null,
              "body": null,
              "createdAt": "2026-07-28T01:02:48.000Z",
              "updatedAt": "2026-07-28T01:02:48.000Z",
              "uid": "35240-32cd3c23-70af-4128-9a88-2c4b28d78622"
            }
          ],
          "createdAt": "2026-07-28T01:02:48.000Z",
          "updatedAt": "2026-07-28T01:02:48.000Z",
          "uid": "35240-17592136-c826-4826-b9e3-c062d3b46662"
        }
      ],
      "id": "fb5f7468-a0f1-4135-9ef7-bbd948df2b5e",
      "createdAt": "2026-07-28T01:02:48.000Z",
      "updatedAt": "2026-07-28T01:02:48.000Z",
      "uid": "35240-fb5f7468-a0f1-4135-9ef7-bbd948df2b5e"
    }
  ],
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://api.appcharge.com"
    }
  ]
}