weegloo-service-login

Configure end-user sign-up and sign-in for Weegloo Spaces via OAuth providers and ServiceUser roles.

1|2|Updated Feb 20, 2026
One-click install
npx skills add https://github.com/weeglooapi/weegloo-mcp-plugin --skill weegloo-service-login-weeglooapi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: weegloo-service-login
Source: https://github.com/weeglooapi/weegloo-mcp-plugin/tree/main/plugins/weegloo/skills/weegloo-service-login
Command: npx skills add https://github.com/weeglooapi/weegloo-mcp-plugin --skill weegloo-service-login-weeglooapi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Products built on a Weegloo Space often need their own end-user membership system, separate from the Weegloo platform accounts that own the Space. This Skill guides you through setting up ServiceLogin so end-users can sign up and sign in via OAuth providers, receive Bearer Tokens scoped to ACMA/ACDA/Upload, and get role-based permissions through ServiceUserRole and roleOverride. ## Core Features & Use Cases - End-user OAuth sign-up/sign-in: Configure ServiceLogin with Google, GitHub, Facebook, GitLab, LINE, Kakao, or Naver so anyone can become a ServiceUser of the Space. - Token scoping and permissions: Issue Bearer Tokens valid only for ACMA, ACDA, and Upload, with per-member permission resolution via ServiceLogin.sys.defaultRole and ServiceUser.roleOverride, including createdBy ":self" filters for own-data-only access. - App-store-compliant account deletion: Model member withdrawal as an in-app deletion-request ContentType fulfilled by an admin in the console, satisfying Apple and Google store requirements. - Use Case: You are building a members-only community app on Weegloo. Use this Skill to wire Google sign-in, assign a least-privilege default role so members only touch their own posts, and add an in-app account-deletion request flow. ## Quick Start Set up ServiceLogin for my Weegloo Space with Google sign-in and a default member role restricted to each user's own content.

Frequently Asked Questions about weegloo-service-login

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add end-user sign-up to a Weegloo Space product?

Enable ServiceLogin on the Space with one or more OAuth providers such as Google, GitHub, or Kakao. End-users sign up through the provider, and Weegloo returns a Bearer Token identifying them as a ServiceUser for ACMA and ACDA calls.

What is the difference between ServiceLogin and Weegloo User login?

ServiceLogin is for end-users of the product a Space ships, with open sign-up and tokens scoped to ACMA, ACDA, and Upload. Weegloo User login is for Space owners and invited staff, granting access to CMA, Upload, and CDA with no self-registration.

Can a ServiceLogin token call the CMA or CDA APIs?

No. A ServiceLogin Bearer Token works only with ACMA, ACDA, and Upload. CMA requires a Weegloo User session such as a PAT, and CDA public delivery uses a DeliveryAccessToken referencing a SpaceRole.

How do I restrict members to only their own content in Weegloo?

Set createdBy.sys.id to ":self" on the ServiceUserRole's content and media rules, and assign that role as ServiceLogin.sys.defaultRole. For ACDA to honor the filter, the ContentType must also have publishWithAuthor set to true.

Why does ServiceLogin sign-in fail with redirect_uri_mismatch?

The provider console is missing the Redirect URI https://auth.weegloo.com/v1/spaces/{spaceId}/login/oauth2/code/{provider}. Register it manually in the provider console before the first sign-in attempt, substituting your real spaceId and provider.

How do I delete a ServiceUser account for app store compliance?

ServiceUsers can only be deleted from the Weegloo console, so model withdrawal as a request: the member writes an account-deletion-request entry via ACMA, and an admin reviews the queue and deletes the ServiceUser in the console. This satisfies Apple and Google in-app deletion requirements.