POST /userAuth — Generate Authenticated Game Launch URLs

Authenticate a player and receive a signed URL to launch a specific game. Call this endpoint each time a player starts a new gaming session.

Call /userAuth to authenticate a player against a specific game and receive a signed URL that launches that game in their browser. You supply the player’s ID from your system, the game they want to play, and their preferred language. GitSlotPark validates the request and returns a gameURL containing an embedded session token.

Endpoint

POST https://api.gitslotpark.com/userAuth

Replace https://api.gitslotpark.com with the base URL provided to you by GitSlotPark.

Request parameters

apiToken · string · required

Your API token provided by GitSlotPark.

agentID · string · required

Your Partner ID assigned by GitSlotPark.

userID · string · required

The player’s ID in your system.

gameID · string · required

The identifier of the game to launch. Obtain this value from the /gameList endpoint.

language · string · required

The player’s preferred language code. See the supported languages table below.

sign · string · required

HMAC-SHA-256 signature of the concatenated request parameters using your secret key, expressed as an uppercase hex string. For this endpoint the signature input is: agentID + userID + gameID.

Example request

{
  "apiToken": "your_api_token",
  "agentID": "Partner01",
  "userID": "player_12345",
  "gameID": "slot_001",
  "language": "en",
  "sign": "D4E5F6..."
}

Response fields

result · integer · required

Result code. 0 indicates success; any other value indicates an error. See result codes below.

gameURL · string

Authenticated URL to redirect the player to. Present when result is 0. This URL contains an embedded session token that allows the player to start playing immediately.

Example success response

{
  "result": 0,
  "gameURL": "https://games.gitslotpark.com/launch?token=eyJhbGciOi..."
}

Result codes

Code	Meaning
0	Success
1	General error
2	Wrong input parameters
3	Invalid sign
4	Invalid agent
5	User not found
7	Invalid API token

Using the game URL

Redirect the player’s browser directly to gameURL, or embed it as the src of an <iframe> in your front end. Both approaches are supported.

The gameURL contains a session token that expires after a short period. Generate a fresh URL every time a player starts a new session — do not cache or reuse URLs across sessions.

Supported languages

Pass one of the following codes in the language field to set the game interface language for the player.

Language	Code
English	en
French	fr
German	de
Italian	it
Korean	kr
Turkish	tr
Portuguese	pt
Indonesian	id
Spanish	es
Chinese	zh
Ukrainian	uk
Russian	ru