Authentication with Account Public Service

Authorization Header

For the first service request, /account/api/oauth/token, requires an Authorization header to determine which game an authentication token should be generate for. The value passed in the header is formatted as client_id:secret and then encoded in Base64.

Client Name	Client ID	Secret
fortnitePCGameClient	ec684b8c687f479fadea3cb2ad83f5c6	e1f31c211f28413186262d37a13fc84d
fortniteIOSGameClient	3446cd72694c4a4485d81b77adbb2141	9209d4a5e25a457fb9b07489d313b41a
fortniteAndroidGameClient	3f69e56c7649492c8cc29f1af08a8a12	b51ee9cb12234f50a69efa67ef53812e
fortniteCNGameClient	efe3cbb938804c74b20e109d0efc1548	6e31bdbae6a44f258474733db74f39ba
KairosPC	5b685653b9904c1d92495ee8859dcb00	7Q2mcmneyuvPmoRYfwM7gfErA6iUjhXr
Kairos iOS	61d2f70175e84a6bba80a5089e597e1c	FbiZv3wbiKpvVKrAeMxiR6WhxZWVbrvA
Kairos Android	0716a69cb8b2422fbb2a8b0879501471	cGthdfG68tyE7M3ZHMu3sXUBwqhibKFp
launcherAppClient2	34a02cf8f4414e29b15921876da36f9a	daafbccc737745039dffe53d94fc76cf
androidPortal	38dbfc3196024d5980386a37b7c792bb	a6280b87-e45e-409b-9681-8f15eb7dbcf5
launcherServiceClient	f3e80378aed4462498774a7951cd263f	Unknown
utClient	1252412dc7704a9690f6ea4611bc81ee	Unknown
wexIOSGameClient	ec813099a59f48d4a338f1901c1609db	72f6db62-0e3e-4439-97df-ee21f7b0ae94
utDedicatedServerEpicTrusted	ad8def9ae6b84360b6c9b358aba06262	Unknown
utDedicatedServerEpicHosted	e0aca23dfb7348d6bad648bbe175a6e6	Unknown
Google (YouTube)	fa39ae1203b5438280f515f38a50f08e	1564071012329

Grant Types

Grant types are used to determine what type of authentication request is being sent. The most used and useful grant types are exchange_code, refresh_token and client_credentials.

List of grant types:

• password, takes username & password (deprecated)
• external_auth, takes external auth type (defaults to internal) and an external auth token
• device_auth, takes account id, device id & secret
• authorization_code, takes a code
• exchange_code, takes an exchange code
• refresh_token, takes a refresh token
• otp, takes a two factor auth challenge
• client_credentials