steamcommunity 3.45.0 → 3.45.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,152 +1,152 @@
1
- var SteamTotp = require('steam-totp');
2
- var SteamCommunity = require('../index.js');
3
-
4
- var ETwoFactorTokenType = {
5
- None: 0, // No token-based two-factor authentication
6
- ValveMobileApp: 1, // Tokens generated using Valve's special charset (5 digits, alphanumeric)
7
- ThirdParty: 2 // Tokens generated using literally everyone else's standard charset (6 digits, numeric). This is disabled.
8
- };
9
-
10
- SteamCommunity.prototype.enableTwoFactor = function(callback) {
11
- this._verifyMobileAccessToken();
12
-
13
- if (!this.mobileAccessToken) {
14
- callback(new Error('No mobile access token available. Provide one by calling setMobileAppAccessToken()'));
15
- return;
16
- }
17
-
18
- this.httpRequestPost({
19
- uri: "https://api.steampowered.com/ITwoFactorService/AddAuthenticator/v1/?access_token=" + this.mobileAccessToken,
20
- // TODO: Send this as protobuf to more closely mimic official app behavior
21
- form: {
22
- steamid: this.steamID.getSteamID64(),
23
- authenticator_time: Math.floor(Date.now() / 1000),
24
- authenticator_type: ETwoFactorTokenType.ValveMobileApp,
25
- device_identifier: SteamTotp.getDeviceID(this.steamID),
26
- sms_phone_id: '1'
27
- },
28
- json: true
29
- }, (err, response, body) => {
30
- if (err) {
31
- callback(err);
32
- return;
33
- }
34
-
35
- if (!body.response) {
36
- callback(new Error('Malformed response'));
37
- return;
38
- }
39
-
40
- if (body.response.status != 1) {
41
- var error = new Error('Error ' + body.response.status);
42
- error.eresult = body.response.status;
43
- callback(error);
44
- return;
45
- }
46
-
47
- callback(null, body.response);
48
- }, 'steamcommunity');
49
- };
50
-
51
- SteamCommunity.prototype.finalizeTwoFactor = function(secret, activationCode, callback) {
52
- this._verifyMobileAccessToken();
53
-
54
- if (!this.mobileAccessToken) {
55
- callback(new Error('No mobile access token available. Provide one by calling setMobileAppAccessToken()'));
56
- return;
57
- }
58
-
59
- let attemptsLeft = 30;
60
- let diff = 0;
61
-
62
- let finalize = () => {
63
- let code = SteamTotp.generateAuthCode(secret, diff);
64
-
65
- this.httpRequestPost({
66
- uri: 'https://api.steampowered.com/ITwoFactorService/FinalizeAddAuthenticator/v1/?access_token=' + this.mobileAccessToken,
67
- form: {
68
- steamid: this.steamID.getSteamID64(),
69
- authenticator_code: code,
70
- authenticator_time: Math.floor(Date.now() / 1000),
71
- activation_code: activationCode
72
- },
73
- json: true
74
- }, function(err, response, body) {
75
- if (err) {
76
- callback(err);
77
- return;
78
- }
79
-
80
- if (!body.response) {
81
- callback(new Error('Malformed response'));
82
- return;
83
- }
84
-
85
- body = body.response;
86
-
87
- if (body.server_time) {
88
- diff = body.server_time - Math.floor(Date.now() / 1000);
89
- }
90
-
91
- if (body.status == 89) {
92
- callback(new Error('Invalid activation code'));
93
- } else if(body.want_more) {
94
- attemptsLeft--;
95
- diff += 30;
96
-
97
- finalize();
98
- } else if(!body.success) {
99
- callback(new Error('Error ' + body.status));
100
- } else {
101
- callback(null);
102
- }
103
- }, 'steamcommunity');
104
- }
105
-
106
- SteamTotp.getTimeOffset(function(err, offset, latency) {
107
- if (err) {
108
- callback(err);
109
- return;
110
- }
111
-
112
- diff = offset;
113
- finalize();
114
- });
115
- };
116
-
117
- SteamCommunity.prototype.disableTwoFactor = function(revocationCode, callback) {
118
- this._verifyMobileAccessToken();
119
-
120
- if (!this.mobileAccessToken) {
121
- callback(new Error('No mobile access token available. Provide one by calling setMobileAppAccessToken()'));
122
- return;
123
- }
124
-
125
- this.httpRequestPost({
126
- uri: 'https://api.steampowered.com/ITwoFactorService/RemoveAuthenticator/v1/?access_token=' + this.mobileAccessToken,
127
- form: {
128
- steamid: this.steamID.getSteamID64(),
129
- revocation_code: revocationCode,
130
- steamguard_scheme: 1
131
- },
132
- json: true
133
- }, function(err, response, body) {
134
- if (err) {
135
- callback(err);
136
- return;
137
- }
138
-
139
- if (!body.response) {
140
- callback(new Error('Malformed response'));
141
- return;
142
- }
143
-
144
- if (!body.response.success) {
145
- callback(new Error('Request failed'));
146
- return;
147
- }
148
-
149
- // success = true means it worked
150
- callback(null);
151
- }, 'steamcommunity');
152
- };
1
+ var SteamTotp = require('steam-totp');
2
+ var SteamCommunity = require('../index.js');
3
+
4
+ var ETwoFactorTokenType = {
5
+ None: 0, // No token-based two-factor authentication
6
+ ValveMobileApp: 1, // Tokens generated using Valve's special charset (5 digits, alphanumeric)
7
+ ThirdParty: 2 // Tokens generated using literally everyone else's standard charset (6 digits, numeric). This is disabled.
8
+ };
9
+
10
+ SteamCommunity.prototype.enableTwoFactor = function(callback) {
11
+ this._verifyMobileAccessToken();
12
+
13
+ if (!this.mobileAccessToken) {
14
+ callback(new Error('No mobile access token available. Provide one by calling setMobileAppAccessToken()'));
15
+ return;
16
+ }
17
+
18
+ this.httpRequestPost({
19
+ uri: "https://api.steampowered.com/ITwoFactorService/AddAuthenticator/v1/?access_token=" + this.mobileAccessToken,
20
+ // TODO: Send this as protobuf to more closely mimic official app behavior
21
+ form: {
22
+ steamid: this.steamID.getSteamID64(),
23
+ authenticator_time: Math.floor(Date.now() / 1000),
24
+ authenticator_type: ETwoFactorTokenType.ValveMobileApp,
25
+ device_identifier: SteamTotp.getDeviceID(this.steamID),
26
+ sms_phone_id: '1'
27
+ },
28
+ json: true
29
+ }, (err, response, body) => {
30
+ if (err) {
31
+ callback(err);
32
+ return;
33
+ }
34
+
35
+ if (!body.response) {
36
+ callback(new Error('Malformed response'));
37
+ return;
38
+ }
39
+
40
+ if (body.response.status != 1) {
41
+ var error = new Error('Error ' + body.response.status);
42
+ error.eresult = body.response.status;
43
+ callback(error);
44
+ return;
45
+ }
46
+
47
+ callback(null, body.response);
48
+ }, 'steamcommunity');
49
+ };
50
+
51
+ SteamCommunity.prototype.finalizeTwoFactor = function(secret, activationCode, callback) {
52
+ this._verifyMobileAccessToken();
53
+
54
+ if (!this.mobileAccessToken) {
55
+ callback(new Error('No mobile access token available. Provide one by calling setMobileAppAccessToken()'));
56
+ return;
57
+ }
58
+
59
+ let attemptsLeft = 30;
60
+ let diff = 0;
61
+
62
+ let finalize = () => {
63
+ let code = SteamTotp.generateAuthCode(secret, diff);
64
+
65
+ this.httpRequestPost({
66
+ uri: 'https://api.steampowered.com/ITwoFactorService/FinalizeAddAuthenticator/v1/?access_token=' + this.mobileAccessToken,
67
+ form: {
68
+ steamid: this.steamID.getSteamID64(),
69
+ authenticator_code: code,
70
+ authenticator_time: Math.floor(Date.now() / 1000),
71
+ activation_code: activationCode
72
+ },
73
+ json: true
74
+ }, function(err, response, body) {
75
+ if (err) {
76
+ callback(err);
77
+ return;
78
+ }
79
+
80
+ if (!body.response) {
81
+ callback(new Error('Malformed response'));
82
+ return;
83
+ }
84
+
85
+ body = body.response;
86
+
87
+ if (body.server_time) {
88
+ diff = body.server_time - Math.floor(Date.now() / 1000);
89
+ }
90
+
91
+ if (body.status == 89) {
92
+ callback(new Error('Invalid activation code'));
93
+ } else if(body.want_more) {
94
+ attemptsLeft--;
95
+ diff += 30;
96
+
97
+ finalize();
98
+ } else if(!body.success) {
99
+ callback(new Error('Error ' + body.status));
100
+ } else {
101
+ callback(null);
102
+ }
103
+ }, 'steamcommunity');
104
+ }
105
+
106
+ SteamTotp.getTimeOffset(function(err, offset, latency) {
107
+ if (err) {
108
+ callback(err);
109
+ return;
110
+ }
111
+
112
+ diff = offset;
113
+ finalize();
114
+ });
115
+ };
116
+
117
+ SteamCommunity.prototype.disableTwoFactor = function(revocationCode, callback) {
118
+ this._verifyMobileAccessToken();
119
+
120
+ if (!this.mobileAccessToken) {
121
+ callback(new Error('No mobile access token available. Provide one by calling setMobileAppAccessToken()'));
122
+ return;
123
+ }
124
+
125
+ this.httpRequestPost({
126
+ uri: 'https://api.steampowered.com/ITwoFactorService/RemoveAuthenticator/v1/?access_token=' + this.mobileAccessToken,
127
+ form: {
128
+ steamid: this.steamID.getSteamID64(),
129
+ revocation_code: revocationCode,
130
+ steamguard_scheme: 1
131
+ },
132
+ json: true
133
+ }, function(err, response, body) {
134
+ if (err) {
135
+ callback(err);
136
+ return;
137
+ }
138
+
139
+ if (!body.response) {
140
+ callback(new Error('Malformed response'));
141
+ return;
142
+ }
143
+
144
+ if (!body.response.success) {
145
+ callback(new Error('Request failed'));
146
+ return;
147
+ }
148
+
149
+ // success = true means it worked
150
+ callback(null);
151
+ }, 'steamcommunity');
152
+ };
@@ -1,118 +1,118 @@
1
- var SteamCommunity = require('../index.js');
2
-
3
- const Helpers = require('./helpers.js');
4
-
5
- SteamCommunity.prototype.getWebApiKey = function(domain, callback) {
6
- var self = this;
7
- this.httpRequest({
8
- "uri": "https://steamcommunity.com/dev/apikey?l=english",
9
- "followRedirect": false
10
- }, function(err, response, body) {
11
- if (err) {
12
- callback(err);
13
- return;
14
- }
15
-
16
- if(body.match(/<h2>Access Denied<\/h2>/)) {
17
- return callback(new Error("Access Denied"));
18
- }
19
-
20
- if(body.match(/You must have a validated email address to create a Steam Web API key./)) {
21
- return callback(new Error("You must have a validated email address to create a Steam Web API key."));
22
- }
23
-
24
- var match = body.match(/<p>Key: ([0-9A-F]+)<\/p>/);
25
- if(match) {
26
- // We already have an API key registered
27
- callback(null, match[1]);
28
- } else {
29
- // We need to register a new API key
30
- self.httpRequestPost('https://steamcommunity.com/dev/registerkey?l=english', {
31
- "form": {
32
- "domain": domain,
33
- "agreeToTerms": "agreed",
34
- "sessionid": self.getSessionID(),
35
- "Submit": "Register"
36
- }
37
- }, function(err, response, body) {
38
- if (err) {
39
- callback(err);
40
- return;
41
- }
42
-
43
- self.getWebApiKey(domain, callback);
44
- }, "steamcommunity");
45
- }
46
- }, "steamcommunity");
47
- };
48
-
49
- /**
50
- * @deprecated No longer works. Will be removed in a future release.
51
- * @param {function} callback
52
- */
53
- SteamCommunity.prototype.getWebApiOauthToken = function(callback) {
54
- if (this.oAuthToken) {
55
- return callback(null, this.oAuthToken);
56
- }
57
-
58
- callback(new Error('This operation requires an OAuth token, which is no longer issued by Steam.'));
59
- };
60
-
61
- /**
62
- * Sets an access_token generated by steam-session using EAuthTokenPlatformType.MobileApp.
63
- * Required for some operations such as 2FA enabling and disabling.
64
- * This will throw an Error if the provided token is not valid, was not generated for the MobileApp platform, is expired,
65
- * or does not belong to the logged-in user account.
66
- *
67
- * @param {string} token
68
- */
69
- SteamCommunity.prototype.setMobileAppAccessToken = function(token) {
70
- if (!this.steamID) {
71
- throw new Error('Log on to steamcommunity before setting a mobile app access token');
72
- }
73
-
74
- let decodedToken = Helpers.decodeJwt(token);
75
-
76
- if (!decodedToken.iss || !decodedToken.sub || !decodedToken.aud || !decodedToken.exp) {
77
- throw new Error('Provided value is not a valid Steam access token');
78
- }
79
-
80
- if (decodedToken.iss == 'steam') {
81
- throw new Error('Provided token is a refresh token, not an access token');
82
- }
83
-
84
- if (decodedToken.sub != this.steamID.getSteamID64()) {
85
- throw new Error(`Provided token belongs to account ${decodedToken.sub}, but we are logged into ${this.steamID.getSteamID64()}`);
86
- }
87
-
88
- if (decodedToken.exp < Math.floor(Date.now() / 1000)) {
89
- throw new Error('Provided token is expired');
90
- }
91
-
92
- if ((decodedToken.aud || []).indexOf('mobile') == -1) {
93
- throw new Error('Provided token is not valid for MobileApp platform type');
94
- }
95
-
96
- this.mobileAccessToken = token;
97
- };
98
-
99
- /**
100
- * Verifies that the mobile access token we already have set is still valid for current login.
101
- *
102
- * @private
103
- */
104
- SteamCommunity.prototype._verifyMobileAccessToken = function() {
105
- if (!this.mobileAccessToken) {
106
- // No access token, so nothing to do here.
107
- return;
108
- }
109
-
110
- let decodedToken = Helpers.decodeJwt(this.mobileAccessToken);
111
-
112
- let isTokenInvalid = decodedToken.sub != this.steamID.getSteamID64() // SteamID doesn't match
113
- || decodedToken.exp < Math.floor(Date.now() / 1000); // Token is expired
114
-
115
- if (isTokenInvalid) {
116
- delete this.mobileAccessToken;
117
- }
118
- };
1
+ var SteamCommunity = require('../index.js');
2
+
3
+ const Helpers = require('./helpers.js');
4
+
5
+ SteamCommunity.prototype.getWebApiKey = function(domain, callback) {
6
+ var self = this;
7
+ this.httpRequest({
8
+ "uri": "https://steamcommunity.com/dev/apikey?l=english",
9
+ "followRedirect": false
10
+ }, function(err, response, body) {
11
+ if (err) {
12
+ callback(err);
13
+ return;
14
+ }
15
+
16
+ if(body.match(/<h2>Access Denied<\/h2>/)) {
17
+ return callback(new Error("Access Denied"));
18
+ }
19
+
20
+ if(body.match(/You must have a validated email address to create a Steam Web API key./)) {
21
+ return callback(new Error("You must have a validated email address to create a Steam Web API key."));
22
+ }
23
+
24
+ var match = body.match(/<p>Key: ([0-9A-F]+)<\/p>/);
25
+ if(match) {
26
+ // We already have an API key registered
27
+ callback(null, match[1]);
28
+ } else {
29
+ // We need to register a new API key
30
+ self.httpRequestPost('https://steamcommunity.com/dev/registerkey?l=english', {
31
+ "form": {
32
+ "domain": domain,
33
+ "agreeToTerms": "agreed",
34
+ "sessionid": self.getSessionID(),
35
+ "Submit": "Register"
36
+ }
37
+ }, function(err, response, body) {
38
+ if (err) {
39
+ callback(err);
40
+ return;
41
+ }
42
+
43
+ self.getWebApiKey(domain, callback);
44
+ }, "steamcommunity");
45
+ }
46
+ }, "steamcommunity");
47
+ };
48
+
49
+ /**
50
+ * @deprecated No longer works. Will be removed in a future release.
51
+ * @param {function} callback
52
+ */
53
+ SteamCommunity.prototype.getWebApiOauthToken = function(callback) {
54
+ if (this.oAuthToken) {
55
+ return callback(null, this.oAuthToken);
56
+ }
57
+
58
+ callback(new Error('This operation requires an OAuth token, which is no longer issued by Steam.'));
59
+ };
60
+
61
+ /**
62
+ * Sets an access_token generated by steam-session using EAuthTokenPlatformType.MobileApp.
63
+ * Required for some operations such as 2FA enabling and disabling.
64
+ * This will throw an Error if the provided token is not valid, was not generated for the MobileApp platform, is expired,
65
+ * or does not belong to the logged-in user account.
66
+ *
67
+ * @param {string} token
68
+ */
69
+ SteamCommunity.prototype.setMobileAppAccessToken = function(token) {
70
+ if (!this.steamID) {
71
+ throw new Error('Log on to steamcommunity before setting a mobile app access token');
72
+ }
73
+
74
+ let decodedToken = Helpers.decodeJwt(token);
75
+
76
+ if (!decodedToken.iss || !decodedToken.sub || !decodedToken.aud || !decodedToken.exp) {
77
+ throw new Error('Provided value is not a valid Steam access token');
78
+ }
79
+
80
+ if (decodedToken.iss == 'steam') {
81
+ throw new Error('Provided token is a refresh token, not an access token');
82
+ }
83
+
84
+ if (decodedToken.sub != this.steamID.getSteamID64()) {
85
+ throw new Error(`Provided token belongs to account ${decodedToken.sub}, but we are logged into ${this.steamID.getSteamID64()}`);
86
+ }
87
+
88
+ if (decodedToken.exp < Math.floor(Date.now() / 1000)) {
89
+ throw new Error('Provided token is expired');
90
+ }
91
+
92
+ if ((decodedToken.aud || []).indexOf('mobile') == -1) {
93
+ throw new Error('Provided token is not valid for MobileApp platform type');
94
+ }
95
+
96
+ this.mobileAccessToken = token;
97
+ };
98
+
99
+ /**
100
+ * Verifies that the mobile access token we already have set is still valid for current login.
101
+ *
102
+ * @private
103
+ */
104
+ SteamCommunity.prototype._verifyMobileAccessToken = function() {
105
+ if (!this.mobileAccessToken) {
106
+ // No access token, so nothing to do here.
107
+ return;
108
+ }
109
+
110
+ let decodedToken = Helpers.decodeJwt(this.mobileAccessToken);
111
+
112
+ let isTokenInvalid = decodedToken.sub != this.steamID.getSteamID64() // SteamID doesn't match
113
+ || decodedToken.exp < Math.floor(Date.now() / 1000); // Token is expired
114
+
115
+ if (isTokenInvalid) {
116
+ delete this.mobileAccessToken;
117
+ }
118
+ };