XWMS OAuth Login

How OAuth and external sign-in providers work with XWMS.

OAuth Login

XWMS supports login through XWMS itself and external providers such as Google, Microsoft, Discord, GitHub, and Facebook.

User flow

1. The user starts sign-in.
2. XWMS verifies the provider and configuration.
3. The user completes provider authentication.
4. XWMS links or resolves the provider identity.
5. XWMS still applies its own account rules, including email verification and anti-abuse checks when required.

Provider identity

Provider sign-in is matched by provider identity id. Do not rely only on provider email, because provider email can change or differ from the XWMS account email.

Integration advice

Use XWMS routes and supported SDK examples instead of building your own provider callbacks unless your integration has a specific backend requirement.