Menu

Authenticated UUID

The Authenticated UUID feature adds an extra layer of security to your Game or Game Center. It ensures that only verified users can access your game by requiring a signed token.

This is useful for integrations where you want to control exactly who can enter and interact with your game.

How it works

When enabled, the uuid parameter in your game URL must be a signed JWT (JSON Web Token).

The token is validated by Flarie to ensure:

  • It is correctly signed
  • It has not been altered
  • It was generated using your secret key

If the token is invalid, the game will not load.

Step 1: Generate a UUID Secret Key

  1. Go to Access Keys in Flarie Studio.
  2. Generate a UUID Secret Key.

Keep this key secure. It is used to sign your tokens.

access_keys

Step 2: Set UUID as Player Identifier

  1. Open your game in Flarie Studio.
  2. Go to Game Settings → Data Collection.
  3. Set Unique Identifier to URL Parameter.

This makes uuid a required parameter in your game URL.

uuid

Step 3: Enable Authenticated UUID

Enable the Authenticated UUID setting in your game.

Once enabled, the uuid must be a signed JWT token.

uuid-2


JWT structure

A valid token contains:


Header

Defines the algorithm used.

{
  "alg": "HS256",
  "typ": "JWT"
}

Payload

Contains the player identifier: 

{
  "uuid": "example-player-uuid"
}

Signature

Created using your UUID Secret Key. 

Example (Node.js)

const jwt = require('jsonwebtoken');

const uuid = 'player-1234-abcd';
const secretKey = 'YOUR_UUID_SECRET_KEY'; // Replace with your actual key

const token = jwt.sign({ uuid: uuid }, secretKey, { algorithm: 'HS256' });

const gameUrl = `https://your-game-url.com?uuid=${token}`;

console.log(gameUrl);

What happens during gameplay

When a player interacts with the game:

  • The token is validated
  • The signature is verified using your secret key
  • Invalid or tampered tokens are rejected

Only users with valid tokens will be able to access and interact with the game.