Skport Auto Claim

Token Expiry

• ACCOUNT_TOKEN lasts weeks/months (much longer than old session tokens)
• When expired, user re-visits the URL above and updates via /setup-endfield

Auth Pipeline

Before each attendance request, the service runs a 4-step auth pipeline:

ACCOUNT_TOKEN
  → 1. getOAuthCode()    POST gryphline.com/user/oauth2/v2/grant
  → 2. getCred()         POST zonai.skport.com/generate_cred_by_code
  → 3. getSignToken()    GET  zonai.skport.com/web/v1/auth/refresh
  → 4. getPlayerBindings()  GET  zonai.skport.com/api/v1/game/player/binding
  → 5. sendAttendance() per role

Step 1: Get OAuth Code

const payload = { token: accountToken, appCode: "6eb76d4e13aa36e6", type: 0 };
// POST https://as.gryphline.com/user/oauth2/v2/grant
// Returns: { status: 0, data: { code: "..." } }

Step 2: Generate Cred

const payload = { kind: 1, code: oauthCode };
// POST https://zonai.skport.com/web/v1/user/auth/generate_cred_by_code
// Returns: { code: 0, data: { cred: "..." } }

Step 3: Get Sign Token

// GET https://zonai.skport.com/web/v1/auth/refresh
// Headers: cred, platform, vname, timestamp, sk-language
// Returns: { code: 0, data: { token: "..." } }

Step 4: Get Player Bindings (Auto-Detect Roles)

// GET https://zonai.skport.com/api/v1/game/player/binding
// Headers: cred, platform, vname, timestamp, sk-language, sign
// Returns game roles like "3_{roleId}_{serverId}" for all regions

Signing (HMAC-SHA256 + MD5)

function computeSign(path: string, body: string, timestamp: string, signToken: string): string {
    const headerObj = { platform: "3", timestamp, dId: "", vName: "1.0.0" };
    const signString = path + body + timestamp + JSON.stringify(headerObj);
    const hmacHex = crypto.createHmac("sha256", signToken).update(signString).digest("hex");
    return crypto.createHash("md5").update(hmacHex).digest("hex");
}

Daily Check-in API

POST https://zonai.skport.com/web/v1/game/endfield/attendance

Response Codes

Service Implementation Pattern

export class EndfieldService {
    constructor(options: { accountToken: string; language?: string }) {}

    async claim(): Promise<EndfieldClaimResult> {
        // 1. Run auth pipeline (OAuth → cred → signToken)
        // 2. Get player bindings (auto-detect all game roles)
        // 3. Send attendance for each role
        // 4. Return aggregated results
    }
}

Database Schema

interface IEndfieldData {
    accountToken: string; // ACCOUNT_TOKEN from web-api.skport.com
    accountName: string;
    lastClaim?: Date;
    lastClaimResult?: string;
}