@jasonl
It seems most reasonable to open up the same API so that it can be called from s2sdispatcher.
It would be helpful if the client's login method could be used within s2sdispatcher.
Alternatively, you just need a way to use this request from within the script.

{
		"service": "authenticationV2",
		"operation": "AUTHENTICATE",
		"data": {
			"externalId": "{external_id}",
			"authenticationToken": "",
			"authenticationType": "Anonymous",
			"forceCreate": false,
			"compressResponses": true,
			"profileId": "{profile_id}",
			"anonymousId": "",
			"gameId": "00000",
			"releasePlatform": "IOS",
			"gameVersion": "1.6.0",
			"clientLibVersion": "6.0.0",
			"clientLib": "csharp-unity",
			"countryCode": "KR",
			"languageCode": "ko",
			"timeZoneOffset": -8
		}
	}

hi. @johnh @paul-winterhalder

Currently, BrainCloud does not provide a way to retrieve a list of users who possess a specific item.
We need to fetch inventory data for users who own the item based on its defId.
This is similar to the FIND_USERS_BY_USER_SUMMARY function.
We need the ability to search based on inventory fields and recent login activity (while avoiding a full database scan).
I believe this is a feature the system itself should support.
I want to avoid the redundant approach of storing data in "custom entries" every time a purchase is made.

We are developing our service using BrainCloud's S2S capabilities.
The client-side application does not include the BrainCloud SDK.

This is because we already have our own authentication system.
When creating users via S2S, we use the "External Auth Create" method and subsequently handle operations based on the profileId.

Therefore, to maintain a structure where existing user information is updated through the client's login process, the server must directly call the client authentication dispatcher API.

In the S2S setup, there is an issue where authentication calls can only be used to issue sessions via the s2sdispatcher. Consequently, the server is manually invoking authentication using the client-side API.

I consider this flow to be abnormal.

After all, even though the integration is S2S-based, the client login API still needs to be called once.

However, the issue is that without calling the client authentication, there is no way within the S2S setup to update the last login time and certain other information you mentioned.

I believe this is a common issue that can arise when adopting and using Brain Cloud within an existing system, much like in our case.

In summary, the user has created an external account in BrainCloud via the server using sysCreateUserExternalAuth.
We issue a token to the user based on our internal authentication system, signing it using the BrainCloudProfileId.
Consequently, authentication via the BrainCloud client is no longer required.
However, without client-side authentication, there is no mechanism to update information.
We need to find a solution to address this gap.

I would like to update the information for this section via S2S.

hi. @johnh @paul-winterhalder

I would like to request a function that allows for the forced update of a user's login time within the BrainCloud "User" tab.
Currently, the standard login function appears to be the only option, but I need to update the last login time via an S2S (Server-to-Server) call without actually performing the login process.

Is there no solution for this issue? Sending PDFs via email is very inconvenient. I would appreciate it if you could raise its priority.

Inventory Stream

1. state detection (modify/delete/add)
2. detail detection (low priority) – Can be queried initially via state detection

Also, regarding the stream, if possible, please configure it to filter and transmit only the necessary data rather than collecting everything.

hi. @paul-winterhalder
thank you for the feedback.

how real-time is the brainCloud stream?
For example, does the stream trigger immediately upon the purchase of a virtual item?
(I actually need this specific functionality.)

feture request : Stream HTTP Webhook
For companies that do not operate Kafka, its utility is somewhat limited.
I would appreciate it if you could also consider this aspect in the future.

hi. braincloud team.
These are the features I think should be additionally supported in the stream.

1. User purchase of virtual items

• while paid purchases can be verified via CompletedOrder, there are no events for virtual item purchases.

2. Detect user inventory

• need to detect and receive changes related to inventory additions, modifications, and deletions. Tracking inventory changes is useful for monitoring the flow of items duplicated due to bugs and for developing internal recovery policies for each service.

3. custom entrties

• we need a way to detect functionality based on custom entities.
  Specifically, when developing features not natively supported by BrainCloud using custom entities, we require a method to track changes (e.g., MongoDB CDC).

@johnh
It looks good.
Once this issue is resolved, it will make BrainCloud's marketplace even more powerful.

hi. @Paul-Winterhalder
yes, permissions to call specific scripts and access control for Services and Operations regarding the generally provided functions are required.
For example, there may be management tools that call specific scripts and use certain functions (CloudData...),
and there may be administrators who only manage items.
If possible, each API Key should be a function with permissions tailored to the situation.

Let me give you an example. A company utilizes a mix of office and remote work. While the internal network can be protected to some extent by IP ranges, it is difficult to identify specific IPs because multiple operators work from home. Therefore, it is currently somewhat difficult to handle this situation using only IPs.

@johnh
I believe it is correct to view the content I presented as B.
Ultimately, this is because you must consume currency and specific prerequisite items to purchase the item.
Let me take the hat you mentioned as an example. To purchase the 'Deluxe Hat Rack,' you need currency,
John's Hat, and Mark's Hat. If we apply this, to obtain a 1-enhancement item, you can process the purchase of two normal items and the deduction of currency as a single transaction. While situation A might be necessary in some cases, wouldn't it be possible to utilize it if you open up the possibility of it being optional?

I believe C is appropriate for GetCatalogItemsPage. I expect there will be various scenarios, such as retrieving information about the item or querying it. I believe that processing whether a purchase is possible based on the downloaded prerequisites to be displayed in the UI is entirely the role of the service developer.

@johnh
In the case of Cash Products, unlike ItemCatalog, there might be insufficient purchase satisfaction at the stage where the paid item is delivered after a successful in-app payment. In this case, it seems possible to verify the conditions in advance. The goal was to minimize the complexity of implementing this via scripts. This is because handling a single transaction within BrainCloud eliminates the burden of handling failure cases.

We had only one step in mind. Consuming items I own while purchasing items (free/paid)
(enhancement materials, etc.)
If it is introduced to CashProduct as well, it seems it should be used in the way it was developed.

hi.

customers require access control for API Keys.
A feature is needed to restrict the range of APIs that can be called on an API Key basis.
In MyServers, there is no way to handle this other than using IP addresses.

@johnh
I apologize for the late reply. I have reviewed the details you mentioned.
If the item purchase matches the mockup photo above, it appears to be quite useful.
'Helmet Equipment Enhancement Ticket'

Requires a specific item, consumes currency
These needs can be fully resolved with a single transaction.
I expect that if this feature is included for paid products as well, their utility will increase in the future.

hi. @Paul-Winterhalder @JasonL
Will there be any updates regarding this?
I asked about the same issue at https://forums.getbraincloud.com/topic/342/newuser-detection-issue/2.

hi. @Paul-Winterhalder
https://builder.docs.braincloudservers.com/#a4b146d3-03a2-497a-a0a1-b85ef005123d
I have verified that it works on the Portal Console web.
Could you please update the builder API payload?
It needs to be added to the deployment automation API.
Thank you.