76.223.59.246
13.248.177.172

https://ap-api2.stable.prod.project-aperion.net/v1/entitlements/sync

POST /v1/entitlements/sync HTTP/1.1
Host: ap-api2.stable.prod.project-aperion.net
Content-Type: application/json
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/604.1.38 (KHTML, like Gecko) Chrome/49.0.2623 Safari/604.1.38 CoherentGT/2.0
Origin: coui://uiresources
Accept: application/json, text/plain, */*
ap-client-token: xxxxxxxxx
ap-client-id: xxxxxx
Accept-Encoding: gzip, deflate
Content-Length: 58

{
   "entitlementIds" : [ "GODFALLDELUXE000" ],
   "platform" : "steam"
}

{
   "entitlements" : [
      {
         "createdAt" : {},
         "id" : "GODFALLDELUXE000",
         "platform" : "steam"
      }
   ],
   "gear" : [],
   "socialBadgeIcon" : null,
   "socialBadgeLabel" : null,
   "vault" : {}
}


Client-Token is base64 encoded

The string contains:
- UserID
- AccountID
- Username (Steam display name)
- Affiliatedata
- Product version
- Session Timespam
- Data declaration (in this case JWT (JSON Web Token))