Authentication about axie-graphql-documentation

[ShaneMaglangit]

You may use the following operation.

{
    "operationName": "CreateAccessToken",
    "variables": {
        "email": "email",
        "password": "password"
    },
    "query": "mutation CreateAccessToken($email: String!, $password: String!) {\n  createAccessToken(email: $email, password: $password) {\n    result\n    accessToken\n    __typename\n  }\n}\n"
}

To use this operation, you would also need to have a captcha-token on your header for this to work.

[mreaugusto]

How do we get the captcha-token?

[ShaneMaglangit]

I haven't worked with the authenticated queries for this endpoint. However, I assume that there are two ways to get the auth token:

Either through the CreateAccessToken operation which would require a captch token. Captcha are designed for human interaction so you're most likely not going to be able to do this programmatically without beating the Captcha itself.

A more plausible way is to have the user log in on their Ronin account and get the token that should be stored in the memory of their browsers. You'd just have to sign in with a random message with the private key using this.