How to authenticate XboxLive user in WebApi RRS feed

  • Question

  • I have a working Xbox UWP app via the XboxLive Creators Program, which authenticates an XboxLiveUser using the SignInSilentlyAsync and SignInAsync methods demonstrated in Microsoft's documentation.

    I would like my Xbox application to call my WebApi backend, and have that project authenticate the caller. In other applications, I use OAuth and simply pass in the (previously authenticated) user's tokens, and the WebApi simply validates the token and returns unauthorized when it is not valid. However, I'm not seeing how to do that when called from the Xbox code.

    I have looked at OpenXbox (, and the XAL ( Both of these seem to need an interactive UI to login the user, but from a WebApi context, an interactive login is not possible.

    I feel I'm missing something obvious... Can anyone offer a suggestion on how to do this authentication?


    Wednesday, June 5, 2019 3:15 PM