Unified login across applications

A payment provider system comprising:

• a non-transitory memory storing instructions;
• and
• a processor configured to execute the instructions to cause the payment provider system to:
• determine that a user is authenticated, based on user credentials of the user, for accessing a first application on a user device,
• provide an access token to the user device, wherein the access token is generated based on the user being authenticated for accessing the first application, wherein the access token allows access of one or more resources of the payment provider system by the first application;
• determine that the user has consented to a unified login across a plurality of applications on the user device;
• based on a determination that the user has consented to the unified login across the plurality of applications on the user device and after the access token has been sent to the user device, generate a refresh token that is different from the access token, wherein the refresh token is associated with user authentication credentials of the user and defines an authorization scope of subsequent transactions;
• provide the refresh token to the user device;
• and
• based on a request from a second application of the plurality of applications to access the one or more resources of the payment provider system, authenticate the user for accessing the one or more resources of the payment provider system by the second application based on the request comprising the refresh token and being within the authorization scope associated with the refresh token.

A non-transitory machine-readable medium having instructions stored thereon, the instructions executable to cause performance of operations comprising:

• determining that a user is authenticated, based on user credentials of the user, for accessing a merchant application on a user device;
• providing an access token to the user device, wherein the access token is generated based on the user being authenticated for accessing the merchant application, wherein the access token facilitates processing of transactions by a payment provider system for the transactions initiated by the merchant application;
• determining that the user has consented to a unified login across a plurality of merchant applications, including the merchant application, on the user device;
• providing a refresh token to the user device after the access token has been provided to the user device, wherein the refresh token is generated after the access token was generated and is based on the user consenting to the unified login, wherein the refresh token is associated with user authentication credentials of the user and defines an authorization scope of subsequent transactions;
• receiving a request for a subsequent transaction, the request comprising the refresh token;
• and
• based on a determination that the subsequent transaction is within the authorization scope associated with the refresh token, authenticating the user for the subsequent transaction.