Glorious Alpha Two Testers!
Alpha Two Phase III testing has begun! During this phase, our realms will be open every day, and we'll only have downtime for updates and maintenance. We'll keep everyone up-to-date about downtimes in Discord.
If you have Alpha Two, you can download the game launcher here, and we encourage you to join us on our Official Discord Server for the most up to date testing news.
Alpha Two Phase III testing has begun! During this phase, our realms will be open every day, and we'll only have downtime for updates and maintenance. We'll keep everyone up-to-date about downtimes in Discord.
If you have Alpha Two, you can download the game launcher here, and we encourage you to join us on our Official Discord Server for the most up to date testing news.
Curious About Log In Steps
Karkosa
Member, Alpha Two
Since we do not enter our log in credentials each time the game is loaded up, what is occuring on this log in screen that creates a pop up webpage?
It opens from auth.ashesofcreation..., the pop up appears to want to verify human status. This pop up is then auto filled and disappears. The experience is odd. Is the game just streamlining my log in time?
I am confused by the chain of visual events that occur once I load the game. Can anyone please provide some clarity on these steps and what is occurring?
Thank you for your time.
It opens from auth.ashesofcreation..., the pop up appears to want to verify human status. This pop up is then auto filled and disappears. The experience is odd. Is the game just streamlining my log in time?
I am confused by the chain of visual events that occur once I load the game. Can anyone please provide some clarity on these steps and what is occurring?
Thank you for your time.
1
This discussion has been closed.
Comments
1. You don’t type in your login each time because of stored tokens
- The very first time you log in, your credentials (username/password, maybe plus MFA) get exchanged for an authentication token.
- That token (think of it as a digital "hall pass") gets stored securely on your computer.
- As long as it’s valid, the game doesn’t need your password again — it just reuses the token.
2. Why you see a web pop-up (auth.ashesofcreation...)
- Instead of building its own login box, the game client uses a web-based authentication flow.
- The game opens a mini browser window (the pop-up) that talks to the authentication server.
- That server checks: "Do you already have a valid session or refresh token?"
- If yes → it autofills in the background, no login screen is shown.
- If no → you’ll be prompted to log in.
3. What disappears and why
- Once the authentication server confirms you’re good, it sends back an updated access token.
- The pop-up closes automatically, passing that token back to the game client.
- From then on, you’re in the game — no further credentials required.
4. So what’s really happening?
In short, the steps are:
1. Game launches → opens a small built-in web browser.
2. Browser asks the auth server → "Do we already trust this player?"
3. Server checks tokens, maybe performs a bot check.
4. If valid → server issues a fresh token → game gets it → you log in seamlessly.
Basically, you’re watching a standard OAuth/OpenID login flow, just compressed into a few seconds.
Ashes┊Discord
I would agree with you, but then we would both be wrong.
~theonsin