@yaelouuu/fortnite-api 9.1.0 → 9.1.2

package/README.md

@@ -158,7 +158,7 @@ if (session.inMatch && session.playlist === "playlist_showdown_cts_solo") {
 }
 ```
 
-Read before building on it: the token must be that player's **own** (verified — any other account's token is `403`); Fortnite kills every other session of an account when the game launches, so mint it from stored device auth (`/oauth/link`, then `/oauth/refresh-device` on `401`); the response is cached 10 s per account and Epic's party state lags the real match by about 1–2 minutes; the custom key is never returned (`hasCustomKey` only) and teammates appear as account ids only.
+Read before building on it: the token flow authenticates as the Fortnite client, not as your application — Epic warns the player accordingly, and if you ship an Epic Account Services application its developer terms do not allow routing your users through it (suited to tools a player runs for themselves, not third-party apps asking other players to log in); the token must be that player's **own** (verified — any other account's token is `403`); Fortnite kills every other session of an account when the game launches, so store the `deviceAuth` that `/oauth/complete` returns and re-authenticate with `/oauth/refresh-device` on `401`; the response is cached 10 s per account and Epic's party state lags the real match by about 1–2 minutes; the custom key is never returned (`hasCustomKey` only) and teammates appear as account ids only.
 
 #### Check Tournament Eligibility
 Verify if a player meets requirements for major tournaments (e.g., 14 tournaments in 180 days):

package/dist/resources/tournaments.d.ts

@@ -274,11 +274,16 @@ export declare class TournamentsResource {
      * Ranked, or a custom-key scrim hosted by anyone. This is the only route to a player's
      * non-tournament matches: Epic exposes no match-history listing. **Custom plan.**
      *
+     * The token flow authenticates as the Fortnite client, not as your application: Epic warns
+     * the player, and Epic Account Services developer terms do not allow routing your users
+     * through it — suited to tools a player runs for themselves, not third-party apps asking
+     * other players to log in.
+     *
      * Requires that player's OWN Fortnite token: it is verified against `accountId` before
      * anything is forwarded (any other account's token returns **403**). Fortnite kills every
      * other session of an account when the game launches, so a token obtained before the
-     * player started playing is dead by the time they play — obtain it from stored device
-     * auth (`/oauth/link` once, then `/oauth/refresh-device` on 401), not a one-off login.
+     * player started playing is dead by the time they play — store the `deviceAuth` that
+     * `/oauth/complete` returns and re-authenticate with `/oauth/refresh-device` on 401.
      *
      * While the player is in a game, `sessionId` is the replay match ID: pass it to the
      * replay endpoints once the match has ended. `playlist` lets you filter (e.g. scrims)

package/dist/resources/tournaments.js

@@ -367,11 +367,16 @@ class TournamentsResource {
      * Ranked, or a custom-key scrim hosted by anyone. This is the only route to a player's
      * non-tournament matches: Epic exposes no match-history listing. **Custom plan.**
      *
+     * The token flow authenticates as the Fortnite client, not as your application: Epic warns
+     * the player, and Epic Account Services developer terms do not allow routing your users
+     * through it — suited to tools a player runs for themselves, not third-party apps asking
+     * other players to log in.
+     *
      * Requires that player's OWN Fortnite token: it is verified against `accountId` before
      * anything is forwarded (any other account's token returns **403**). Fortnite kills every
      * other session of an account when the game launches, so a token obtained before the
-     * player started playing is dead by the time they play — obtain it from stored device
-     * auth (`/oauth/link` once, then `/oauth/refresh-device` on 401), not a one-off login.
+     * player started playing is dead by the time they play — store the `deviceAuth` that
+     * `/oauth/complete` returns and re-authenticate with `/oauth/refresh-device` on 401.
      *
      * While the player is in a game, `sessionId` is the replay match ID: pass it to the
      * replay endpoints once the match has ended. `playlist` lets you filter (e.g. scrims)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaelouuu/fortnite-api",
-  "version": "9.1.0",
+  "version": "9.1.2",
   "description": "SDK for Fortnite API - api-fortnite.com - Author : Yael Brinkert",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",