Linking an extra authentication method?

[theo-rapidfire]

I've completed the basic Epic Online Services integration for a mobile game (Android & iOS) and am in the process of streamlining a few flows & improving the overall experience.

---

We currently use the account portal for logging in:
EOSManager.Instance.StartLoginWithLoginTypeAndToken(LoginCredentialType.AccountPortal, null, null, info => ... )

Then do a Connect login:
EOSManager.Instance.StartConnectLoginWithEpicAccount(epicAccountId, connectLoginCallbackInfo => ... )

If the account doesn't exist, show a "create?" prompt, if yes:
EOSManager.Instance.CreateConnectUserWithContinuanceToken(connectLoginCallbackInfo.ContinuanceToken, createUserCallbackInfo => ... )

And then a final Connect login with the new account:
EOSManager.Instance.StartConnectLoginWithEpicAccount(epicAccountId, connectLoginCallbackInfo => ... )

---

In order to link accounts I've made this flow:

public static UniTask<Epic.OnlineServices.Auth.LoginCallbackInfo> LinkAccountAsync()
{
	var auth = EOSManager.Instance.GetEOSAuthInterface();
	var userId = EOSManager.Instance.GetLocalUserId();
	var login = auth.GetLoginStatus(userId);
	if (login != LoginStatus.LoggedIn)
	{
		throw new NotLoggedInException();
	}
	
	var options = new CopyUserAuthTokenOptions();
	var copyResult = auth.CopyUserAuthToken(ref options, userId, out var token);
	if (copyResult != Result.Success || !token.HasValue)
	{
		throw new CopyUserAuthException();
	}

	var tcs = new UniTaskCompletionSource<Epic.OnlineServices.Auth.LoginCallbackInfo>();

	EOSManager.Instance.StartLoginWithLoginTypeAndToken(LoginCredentialType.AccountPortal,
		userId.ToString(), token.Value.AccessToken,
		info => tcs.TrySetResult(info));

	return tcs.Task;
}

This logic appears to work, but I'm not sure this is the intended flow at all, or if there's a better approach. In general I have found very little information on how to link accounts.

However, when adding Apple Sign In, this approach unfortunately fails.
I have a setup where I can successfully sign in with Apple, but I don't get a LocalUserId after logging in. In that case, the auth.GetLoginStatus call will report the user as being logged out.

var auth = EOSManager.Instance.GetEOSConnectInterface();
var userId = EOSManager.Instance.GetProductUserId();
var login = auth.GetLoginStatus(userId);

Changing it to use the EOSConnect interface alleviates this issue, but then I'm unsure how I go about getting an access token.
I've also found a LinkAccount method in the Auth & Connect interfaces, which sounds more like what I need, but I don't know when in the flow I need to handle this, as well as what error scenarios to tackle,

---

At this point I somehow also created diverging accounts as well, so if I sign in using the Account Portal using Apple, I will get a different account than when I use the Sign In With Apple plugin...

[WispyMouse]

Ahoy @theo-rapidfire ! Let's try and untangle this login flow.

Let's start with the "Account Portal" login. That first section of code you shared is correct. Call EOSManager.Instance.StartLoginWithLoginTypeAndToken, passing LoginCredentialType.AccountPortal with no values for the id or token. When that succeeds, you've correctly Auth-logged in. It'll run the callback you provide it.

This should either return Result.Success or Result.InvalidUser.

• If the Auth login returned InvalidUser, you'll need to link the account. See the UILoginMenu.StartLoginWithLoginTypeAndTokenCallback in the samples. It'll call EOSManager.Instance.AuthLinkExternalAccountWIthContinuanceToken, and if that succeeds it'll get back to the main path as if it was successful.
• If the Auth login succeeds, or the above external login works, next you call EOSManager.Instance.StartConnectLoginWithEpicAccount. If that returns success, you're done and have been logged in to connect. If that returns Result.InvalidUser, then you must call EOSManager.Instance.CreateConnectUserWIthContinuanceToken. If that succeeds, then re-run EOSManager.Instance.StartConnectLoginWIthEpicAccount, and if that succeeds you've been connected.

Now that we've got that base line, let's look at the Apple Sign In scenario. Looking to the samples again, UILoginMenu.ConnectAppleId shows a simple example for logging in, using some of our sample code. Create a new PlayEveryWare.EpicOnlineServices.Samples.Apple.EOSSignInWithAppleManager, call RequestTokenAndUsername. Take the result of that and call EOSManager.Instance.StartConnectLoginWIthOptions(ExternalCredentialType.AppleIdToken, token, username).

Does the above all make sense? If it helps spot the problem already, good! Otherwise, can continue digging together.