RuneScape website log-in screen

  Posted

Google log-in integration for RuneScape

What do you do when a third-party identity provider suddenly updates their services? Quickly update yours!

1 minute read

I helped upgrade the multi-platform Google Log-in integration for both RuneScape and OldSchool RuneScape following the deprecation of many of Google’s ‘plus’ APIs. This involved significantly overhauling aspects of our legacy architecture for pre-existing social network integrations, and the implementation of a new Java web service supporting an OAuth 2.0 client-credentials flow with Google. In the process, I identified a bug with Google’s fledgeling People API. I also facilitated with the secure migration of hundreds of thousands of account credentials. The work was furthermore extracted into a series of libraries to facilitate the creation of arbitrary future social integrations.

I gained experience conducting:

  • Appraisal of our UX flows (website log-in processes)
  • UML Modelling
  • Providing workable solutions in the face of legal/business issues (age-gating account creation to over 13 years of age without knowing the user’s age)
  • Refactoring legacy code, Freemarker templating
  • Using common security patterns, interpreting RFC documents – to prevent OS-level token interception (by hacked 3rd party clients)
  • API-first design (using OAS 3)
  • Deploying a modern web service to cope with high-load (discoverable, monitored)
  • Collaborating with player-support and localisation teams to support the work through to launch

 Creative Commons License