zyphr 0.1.37 → 0.1.39

data/docs/AuthUserProfileApi.md

@@ -5,7 +5,6 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 | Method | HTTP request | Description |
 | ------ | ------------ | ----------- |
 | [**delete_end_user**](AuthUserProfileApi.md#delete_end_user) | **DELETE** /auth/users/me | Delete current end user account |
-| [**delete_end_user_by_application**](AuthUserProfileApi.md#delete_end_user_by_application) | **DELETE** /auth/users/{user_id} | Delete an end user (test environment only) |
 | [**get_end_user**](AuthUserProfileApi.md#get_end_user) | **GET** /auth/users/me | Get current end user profile |
 | [**update_end_user**](AuthUserProfileApi.md#update_end_user) | **PATCH** /auth/users/me | Update current end user profile |
 
@@ -81,81 +80,6 @@ This endpoint does not need any parameter.
 - **Accept**: application/json
 
 
-## delete_end_user_by_application
-
-> delete_end_user_by_application(user_id)
-
-Delete an end user (test environment only)
-
-App-credentialed soft-delete for an end user, scoped to the test environment only. Live-mode credentials receive 403 — this is the intentional safety guard against a misconfigured CI runner nuking production users.  Mirrors the self-service `DELETE /auth/users/me` flow: revokes all sessions, soft-deletes the row (status='deleted'), and emits a `user.deleted` webhook with `method='application_admin'`. The audit log row survives (no FK to end_users), so org-history queries still resolve.  Intended for smoke / test-fixture cleanup. Production deletes should continue to use `DELETE /auth/users/me` from the end-user's own session or the dashboard. 
-
-### Examples
-
-```ruby
-require 'time'
-require 'zyphr'
-# setup authorization
-Zyphr.configure do |config|
-  # Configure API key authorization: ApplicationSecret
-  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
-  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
-  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
-
-  # Configure API key authorization: ApplicationPublicKey
-  config.api_key['X-Application-Key'] = 'YOUR API KEY'
-  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
-  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
-end
-
-api_instance = Zyphr::AuthUserProfileApi.new
-user_id = '38400000-8cf0-11bd-b23e-10b96e4ef00d' # String | 
-
-begin
-  # Delete an end user (test environment only)
-  api_instance.delete_end_user_by_application(user_id)
-rescue Zyphr::ApiError => e
-  puts "Error when calling AuthUserProfileApi->delete_end_user_by_application: #{e}"
-end
-```
-
-#### Using the delete_end_user_by_application_with_http_info variant
-
-This returns an Array which contains the response data (`nil` in this case), status code and headers.
-
-> <Array(nil, Integer, Hash)> delete_end_user_by_application_with_http_info(user_id)
-
-```ruby
-begin
-  # Delete an end user (test environment only)
-  data, status_code, headers = api_instance.delete_end_user_by_application_with_http_info(user_id)
-  p status_code # => 2xx
-  p headers # => { ... }
-  p data # => nil
-rescue Zyphr::ApiError => e
-  puts "Error when calling AuthUserProfileApi->delete_end_user_by_application_with_http_info: #{e}"
-end
-```
-
-### Parameters
-
-| Name | Type | Description | Notes |
-| ---- | ---- | ----------- | ----- |
-| **user_id** | **String** |  |  |
-
-### Return type
-
-nil (empty response body)
-
-### Authorization
-
-[ApplicationSecret](../README.md#ApplicationSecret), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
-
-### HTTP request headers
-
-- **Content-Type**: Not defined
-- **Accept**: Not defined
-
-
 ## get_end_user
 
 > <AuthUserResponse> get_end_user

data/docs/InviteEndUserRequest.md

@@ -0,0 +1,26 @@
+# Zyphr::InviteEndUserRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **email** | **String** |  |  |
+| **name** | **String** |  | [optional] |
+| **metadata** | **Object** |  | [optional] |
+| **send_link** | **String** |  | [optional][default to 'none'] |
+| **redirect_url** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::InviteEndUserRequest.new(
+  email: null,
+  name: null,
+  metadata: null,
+  send_link: null,
+  redirect_url: null
+)
+```
+

data/docs/OAuthProviderName.md

@@ -0,0 +1,15 @@
+# Zyphr::OAuthProviderName
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::OAuthProviderName.new()
+```
+

data/docs/SetEndUserClaimsRequest.md

@@ -0,0 +1,18 @@
+# Zyphr::SetEndUserClaimsRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **claims** | **Object** |  | [optional] |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::SetEndUserClaimsRequest.new(
+  claims: null
+)
+```
+

data/docs/SignInAnonymouslyRequest.md

@@ -7,6 +7,8 @@
 | **device_id** | **String** | Stable per-device identifier supplied by the client. Use a cryptographically-random opaque value persisted to client storage on first run. |  |
 | **name** | **String** | Optional display name. If omitted, the user has no name until conversion. | [optional] |
 | **metadata** | **Hash<String, Object>** |  | [optional] |
+| **organization_id** | **String** | Optional organization to scope the anonymous user into. Must exist in the key's environment. When set, the returned token carries org_id and orgs. | [optional] |
+| **organization_role** | **String** | Optional membership role for the org add. Requires organization_id. Opaque, up to 80 characters. | [optional] |
 
 ## Example
 
@@ -16,7 +18,9 @@ require 'zyphr'
 instance = Zyphr::SignInAnonymouslyRequest.new(
   device_id: null,
   name: null,
-  metadata: null
+  metadata: null,
+  organization_id: null,
+  organization_role: null
 )
 ```
 

data/docs/SignInWithGameCenterRequest.md

@@ -0,0 +1,28 @@
+# Zyphr::SignInWithGameCenterRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **player_id** | **String** | The modern scoped gamePlayerID from GKLocalPlayer (NOT the deprecated legacy playerID). |  |
+| **public_key_url** | **String** | Apple-supplied URL to the public-key certificate. Must be https on an apple.com host; server-side SSRF-guarded before fetch. |  |
+| **signature** | **String** | Base64-encoded RSA signature returned by GameKit. |  |
+| **salt** | **String** | Base64-encoded salt bytes returned by GameKit. |  |
+| **timestamp** | **Float** | Apple-supplied timestamp (epoch milliseconds) returned by GameKit. |  |
+| **bundle_id** | **String** | The iOS bundle identifier the assertion was generated for. Must match a bundle id configured on the application's Game Center provider. |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::SignInWithGameCenterRequest.new(
+  player_id: null,
+  public_key_url: null,
+  signature: null,
+  salt: null,
+  timestamp: null,
+  bundle_id: null
+)
+```
+

data/docs/SignInWithGooglePlayGamesRequest.md

@@ -0,0 +1,18 @@
+# Zyphr::SignInWithGooglePlayGamesRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **server_auth_code** | **String** | The single-use server auth code from GamesSignInClient.requestServerSideAccess (obtained with the game's web/server client id). Zyphr exchanges it server-side; a client-supplied player id is neither accepted nor trusted. |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::SignInWithGooglePlayGamesRequest.new(
+  server_auth_code: null
+)
+```
+

data/docs/UpdateEndUserByApplicationRequest.md

@@ -0,0 +1,26 @@
+# Zyphr::UpdateEndUserByApplicationRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **email** | **String** |  | [optional] |
+| **name** | **String** |  | [optional] |
+| **avatar_url** | **String** |  | [optional] |
+| **metadata** | **Object** |  | [optional] |
+| **status** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::UpdateEndUserByApplicationRequest.new(
+  email: null,
+  name: null,
+  avatar_url: null,
+  metadata: null,
+  status: null
+)
+```
+

data/lib/zyphr/api/auth_o_auth_api.rb

@@ -21,7 +21,7 @@ module Zyphr
     end
     # Disconnect OAuth provider
     # Disconnect an OAuth provider from the current user.
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param [Hash] opts the optional parameters
     # @return [SuccessResult]
     def disconnect_o_auth_provider(provider, opts = {})
@@ -31,7 +31,7 @@ module Zyphr
 
     # Disconnect OAuth provider
     # Disconnect an OAuth provider from the current user.
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param [Hash] opts the optional parameters
     # @return [Array<(SuccessResult, Integer, Hash)>] SuccessResult data, response status code and response headers
     def disconnect_o_auth_provider_with_http_info(provider, opts = {})
@@ -84,7 +84,7 @@ module Zyphr
 
     # Get OAuth authorization URL
     # Generate an OAuth authorization URL for the specified provider.
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param redirect_uri [String] Redirect URI after authorization
     # @param [Hash] opts the optional parameters
     # @return [OAuthAuthorizationUrlResponse]
@@ -95,7 +95,7 @@ module Zyphr
 
     # Get OAuth authorization URL
     # Generate an OAuth authorization URL for the specified provider.
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param redirect_uri [String] Redirect URI after authorization
     # @param [Hash] opts the optional parameters
     # @return [Array<(OAuthAuthorizationUrlResponse, Integer, Hash)>] OAuthAuthorizationUrlResponse data, response status code and response headers
@@ -154,7 +154,7 @@ module Zyphr
 
     # Get OAuth connection info
     # Get OAuth connection info for a specific provider (without tokens). Safe for public key authentication.
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param [Hash] opts the optional parameters
     # @return [OAuthConnectionInfoResponse]
     def get_o_auth_connection_info(provider, opts = {})
@@ -164,7 +164,7 @@ module Zyphr
 
     # Get OAuth connection info
     # Get OAuth connection info for a specific provider (without tokens). Safe for public key authentication.
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param [Hash] opts the optional parameters
     # @return [Array<(OAuthConnectionInfoResponse, Integer, Hash)>] OAuthConnectionInfoResponse data, response status code and response headers
     def get_o_auth_connection_info_with_http_info(provider, opts = {})
@@ -217,7 +217,7 @@ module Zyphr
 
     # Get OAuth provider tokens
     # Get OAuth provider tokens for an end user. Requires secret key authentication (server-side only). This allows developers to access downstream APIs on behalf of their users. 
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param user_id [String] End user ID
     # @param [Hash] opts the optional parameters
     # @return [OAuthTokensResponse]
@@ -228,7 +228,7 @@ module Zyphr
 
     # Get OAuth provider tokens
     # Get OAuth provider tokens for an end user. Requires secret key authentication (server-side only). This allows developers to access downstream APIs on behalf of their users. 
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param user_id [String] End user ID
     # @param [Hash] opts the optional parameters
     # @return [Array<(OAuthTokensResponse, Integer, Hash)>] OAuthTokensResponse data, response status code and response headers
@@ -287,7 +287,7 @@ module Zyphr
 
     # Handle OAuth callback
     # Handle the OAuth callback by exchanging the authorization code for tokens and authenticating the user.
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param o_auth_callback_request [OAuthCallbackRequest] 
     # @param [Hash] opts the optional parameters
     # @return [OAuthCallbackResponse]
@@ -298,7 +298,7 @@ module Zyphr
 
     # Handle OAuth callback
     # Handle the OAuth callback by exchanging the authorization code for tokens and authenticating the user.
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param o_auth_callback_request [OAuthCallbackRequest] 
     # @param [Hash] opts the optional parameters
     # @return [Array<(OAuthCallbackResponse, Integer, Hash)>] OAuthCallbackResponse data, response status code and response headers
@@ -475,7 +475,7 @@ module Zyphr
 
     # Refresh OAuth provider tokens
     # Refresh OAuth provider tokens for an end user. Requires secret key authentication (server-side only). Only supported for providers that support token refresh (e.g., Google, Microsoft). 
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param refresh_o_auth_tokens_request [RefreshOAuthTokensRequest] 
     # @param [Hash] opts the optional parameters
     # @return [OAuthTokensRefreshResponse]
@@ -486,7 +486,7 @@ module Zyphr
 
     # Refresh OAuth provider tokens
     # Refresh OAuth provider tokens for an end user. Requires secret key authentication (server-side only). Only supported for providers that support token refresh (e.g., Google, Microsoft). 
-    # @param provider [String] OAuth provider name
+    # @param provider [OAuthProviderName] OAuth provider name
     # @param refresh_o_auth_tokens_request [RefreshOAuthTokensRequest] 
     # @param [Hash] opts the optional parameters
     # @return [Array<(OAuthTokensRefreshResponse, Integer, Hash)>] OAuthTokensRefreshResponse data, response status code and response headers

data/lib/zyphr/api/auth_registration_api.rb

@@ -156,7 +156,7 @@ module Zyphr
     end
 
     # Sign in anonymously
-    # Issue an end-user identity to a device without email, password, OAuth, or any other credential. Idempotent per (application, environment, device_id): repeated calls with the same device_id return the same user but a fresh token pair. Prior sessions for the user remain valid until natural expiry.  Anonymous users do not count toward MAU quota until their first authenticated request after sign-in (excluding /v1/auth/refresh).  Convert an anonymous user to a full account via POST /v1/auth/users/convert. 
+    # Issue an end-user identity to a device without email, password, OAuth, or any other credential. Idempotent per (application, environment, device_id): repeated calls with the same device_id return the same user but a fresh token pair. Prior sessions for the user remain valid until natural expiry.  Anonymous users do not count toward MAU quota until their first authenticated request after sign-in (excluding /v1/auth/refresh).  Convert an anonymous user to a full account via POST /v1/auth/users/convert.  Pass an optional `organization_id` to create the anonymous user directly in an organization; the returned access token then carries `org_id` (and `orgs`), matching the org-scoped register/login flow. 
     # @param sign_in_anonymously_request [SignInAnonymouslyRequest] 
     # @param [Hash] opts the optional parameters
     # @return [AuthResultResponse]
@@ -166,7 +166,7 @@ module Zyphr
     end
 
     # Sign in anonymously
-    # Issue an end-user identity to a device without email, password, OAuth, or any other credential. Idempotent per (application, environment, device_id): repeated calls with the same device_id return the same user but a fresh token pair. Prior sessions for the user remain valid until natural expiry.  Anonymous users do not count toward MAU quota until their first authenticated request after sign-in (excluding /v1/auth/refresh).  Convert an anonymous user to a full account via POST /v1/auth/users/convert. 
+    # Issue an end-user identity to a device without email, password, OAuth, or any other credential. Idempotent per (application, environment, device_id): repeated calls with the same device_id return the same user but a fresh token pair. Prior sessions for the user remain valid until natural expiry.  Anonymous users do not count toward MAU quota until their first authenticated request after sign-in (excluding /v1/auth/refresh).  Convert an anonymous user to a full account via POST /v1/auth/users/convert.  Pass an optional `organization_id` to create the anonymous user directly in an organization; the returned access token then carries `org_id` (and `orgs`), matching the org-scoped register/login flow. 
     # @param sign_in_anonymously_request [SignInAnonymouslyRequest] 
     # @param [Hash] opts the optional parameters
     # @return [Array<(AuthResultResponse, Integer, Hash)>] AuthResultResponse data, response status code and response headers
@@ -222,5 +222,141 @@ module Zyphr
       end
       return data, status_code, headers
     end
+
+    # Sign in with Apple Game Center
+    # Exchange an Apple Game Center identity-verification assertion for a Zyphr end-user session. Zyphr independently re-verifies the assertion server-side (Apple certificate chain, RSA-SHA256 signature, timestamp freshness, single-use replay guard, and bundle-id binding) before provisioning-or-looking-up the user and minting tokens. The user is keyed on the modern scoped `playerId` (gamePlayerID).  ## Producing the assertion (Integration)  The assertion is produced **on-device by the iOS app** — there is no server-side way to mint it. The app calls GameKit's `GKLocalPlayer.fetchItems(forIdentityVerificationSignature:)`, which returns `publicKeyURL`, `signature`, `salt`, and `timestamp`; combine those with the local player's `gamePlayerID` and the app's bundle identifier and submit them here.  Two integration shapes are supported:   - **client-direct** — the iOS app holds the Zyphr application public     key and calls this endpoint itself.   - **backend-relayed** — the app forwards the fetched assertion fields     to the customer's own backend, which relays them to this endpoint;     the app never holds Zyphr keys. (This is the common shape for games.)  On any verification failure the response is a single opaque `401` `invalid_assertion` — the specific control that failed is never disclosed. 
+    # @param sign_in_with_game_center_request [SignInWithGameCenterRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [AuthResultResponse]
+    def sign_in_with_game_center(sign_in_with_game_center_request, opts = {})
+      data, _status_code, _headers = sign_in_with_game_center_with_http_info(sign_in_with_game_center_request, opts)
+      data
+    end
+
+    # Sign in with Apple Game Center
+    # Exchange an Apple Game Center identity-verification assertion for a Zyphr end-user session. Zyphr independently re-verifies the assertion server-side (Apple certificate chain, RSA-SHA256 signature, timestamp freshness, single-use replay guard, and bundle-id binding) before provisioning-or-looking-up the user and minting tokens. The user is keyed on the modern scoped &#x60;playerId&#x60; (gamePlayerID).  ## Producing the assertion (Integration)  The assertion is produced **on-device by the iOS app** — there is no server-side way to mint it. The app calls GameKit&#39;s &#x60;GKLocalPlayer.fetchItems(forIdentityVerificationSignature:)&#x60;, which returns &#x60;publicKeyURL&#x60;, &#x60;signature&#x60;, &#x60;salt&#x60;, and &#x60;timestamp&#x60;; combine those with the local player&#39;s &#x60;gamePlayerID&#x60; and the app&#39;s bundle identifier and submit them here.  Two integration shapes are supported:   - **client-direct** — the iOS app holds the Zyphr application public     key and calls this endpoint itself.   - **backend-relayed** — the app forwards the fetched assertion fields     to the customer&#39;s own backend, which relays them to this endpoint;     the app never holds Zyphr keys. (This is the common shape for games.)  On any verification failure the response is a single opaque &#x60;401&#x60; &#x60;invalid_assertion&#x60; — the specific control that failed is never disclosed. 
+    # @param sign_in_with_game_center_request [SignInWithGameCenterRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(AuthResultResponse, Integer, Hash)>] AuthResultResponse data, response status code and response headers
+    def sign_in_with_game_center_with_http_info(sign_in_with_game_center_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AuthRegistrationApi.sign_in_with_game_center ...'
+      end
+      # verify the required parameter 'sign_in_with_game_center_request' is set
+      if @api_client.config.client_side_validation && sign_in_with_game_center_request.nil?
+        fail ArgumentError, "Missing the required parameter 'sign_in_with_game_center_request' when calling AuthRegistrationApi.sign_in_with_game_center"
+      end
+      # resource path
+      local_var_path = '/auth/game-center'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(sign_in_with_game_center_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'AuthResultResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApplicationPublicKey']
+
+      new_options = opts.merge(
+        :operation => :"AuthRegistrationApi.sign_in_with_game_center",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AuthRegistrationApi#sign_in_with_game_center\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Sign in with Google Play Games Services
+    # Exchange a Google Play Games Services (GPGS) **server auth code** for a Zyphr end-user session. Unlike Game Center (which submits an Apple-signed assertion), GPGS is verified by Google: Zyphr exchanges the single-use server auth code at Google's OAuth2 token endpoint, then calls the Play Games REST API (`players/me`) server-side to obtain the trusted, tamper-proof `playerId`. The user is provisioned-or-looked-up on that server-fetched `playerId` and tokens are minted.  ## Producing the server auth code (Integration)  The server auth code is obtained **on-device by the Android app** — there is no server-side way to mint it. The app calls `GamesSignInClient.requestServerSideAccess(serverClientId, …)` using the Google Cloud **web (server) client id** configured for the game, which returns a single-use auth code string. Submit that string here as `serverAuthCode`.  The **backend-relayed** shape is the common one: the app forwards the auth code to the customer's own backend, which relays it to this endpoint; the app never holds Zyphr keys.  ## Security  The `playerId` is derived **only** from Zyphr's own server-side call to Google after the token exchange — a client-supplied player id is never accepted or trusted. On any verification failure the response is a single opaque `401` `invalid_auth_code`; the specific control that failed is never disclosed. 
+    # @param sign_in_with_google_play_games_request [SignInWithGooglePlayGamesRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [AuthResultResponse]
+    def sign_in_with_google_play_games(sign_in_with_google_play_games_request, opts = {})
+      data, _status_code, _headers = sign_in_with_google_play_games_with_http_info(sign_in_with_google_play_games_request, opts)
+      data
+    end
+
+    # Sign in with Google Play Games Services
+    # Exchange a Google Play Games Services (GPGS) **server auth code** for a Zyphr end-user session. Unlike Game Center (which submits an Apple-signed assertion), GPGS is verified by Google: Zyphr exchanges the single-use server auth code at Google&#39;s OAuth2 token endpoint, then calls the Play Games REST API (&#x60;players/me&#x60;) server-side to obtain the trusted, tamper-proof &#x60;playerId&#x60;. The user is provisioned-or-looked-up on that server-fetched &#x60;playerId&#x60; and tokens are minted.  ## Producing the server auth code (Integration)  The server auth code is obtained **on-device by the Android app** — there is no server-side way to mint it. The app calls &#x60;GamesSignInClient.requestServerSideAccess(serverClientId, …)&#x60; using the Google Cloud **web (server) client id** configured for the game, which returns a single-use auth code string. Submit that string here as &#x60;serverAuthCode&#x60;.  The **backend-relayed** shape is the common one: the app forwards the auth code to the customer&#39;s own backend, which relays it to this endpoint; the app never holds Zyphr keys.  ## Security  The &#x60;playerId&#x60; is derived **only** from Zyphr&#39;s own server-side call to Google after the token exchange — a client-supplied player id is never accepted or trusted. On any verification failure the response is a single opaque &#x60;401&#x60; &#x60;invalid_auth_code&#x60;; the specific control that failed is never disclosed. 
+    # @param sign_in_with_google_play_games_request [SignInWithGooglePlayGamesRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(AuthResultResponse, Integer, Hash)>] AuthResultResponse data, response status code and response headers
+    def sign_in_with_google_play_games_with_http_info(sign_in_with_google_play_games_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AuthRegistrationApi.sign_in_with_google_play_games ...'
+      end
+      # verify the required parameter 'sign_in_with_google_play_games_request' is set
+      if @api_client.config.client_side_validation && sign_in_with_google_play_games_request.nil?
+        fail ArgumentError, "Missing the required parameter 'sign_in_with_google_play_games_request' when calling AuthRegistrationApi.sign_in_with_google_play_games"
+      end
+      # resource path
+      local_var_path = '/auth/google-play-games'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(sign_in_with_google_play_games_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'AuthResultResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApplicationPublicKey']
+
+      new_options = opts.merge(
+        :operation => :"AuthRegistrationApi.sign_in_with_google_play_games",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AuthRegistrationApi#sign_in_with_google_play_games\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
   end
 end