Dr. McKay

As far as I'm aware, the old webchat endpoints do still work, and I never removed the code from steamcommunity. You could try using it. That said, using steam-user just to go online and do nothing else is pretty lightweight. It's just a single connection getting held open, and sending heartbeat packets every 9 seconds or so. I use Charles Proxy to intercept app requests. If your phone is rooted, research how to add a root certificate to the system store. Then you can MITM whatever you want, as long as the app doesn't implement cert pinning (Steam doesn't, last I checked).

Why not just use steam-user to go online? To analyze the calls an Android app makes, you need a rooted phone. Android 7 (I think) made it to where apps need to explicitly opt-in to allowing user-entered roots for secure connections, which few apps do.

Just use SteamUser.EPersonaState.Online

If you're using steam-user and your account has email-based Steam Guard enabled, when you run the bot and Steam prompts for a code, the module will automatically prompt you to enter the code. Once you do and hit enter, it will proceed with the login. You can post group announcements using steamcommunity, but discussion forums are not supported and are unlikely to ever be, due to spam concerns.

Yes, and yes.

Assuming your clock is correct, this will tell you how many seconds are left until the code will change: let secondsRemaining = 30 - (Math.floor(Date.now() / 1000) % 30); But note that once a code changes, you still have another 30 seconds to use it before it comes invalid.

I assume a "nodejs bot" is a steam-user bot? https://github.com/DoctorMcKay/node-steam-user#websession

You want to use the rememberPassword log on option.

I don't think you can request profile data for arbitrary users without you being friends with them (or being in the same group chat) via steam-user.

No, those are the same exact URL.

Rocket League is 252950, not 252590.

No, that isn't normal. Just running const SteamUser = require('steam-user') runs at around 60 MB for me.

The user event will be emitted anytime Steam sends a persona state notification, which happens automatically for all your friends whenever their states change, provided you're marked as online.

Get your friends list from myFriends and check each of their statuses in users.

If you're using steam-user, rememberPassword is the only option you can use. There are no cookies.

Assuming you're using steam-user, look into rememberPassword. But be warned, it's not foolproof. It breaks sometimes.

If you're specifying a custom dataDirectory, then it's not going to get saved to appdata.

There's no reason anything should have changed. v3 hasn't been touched in months. Incidentally, I suggest that you update to v4.

It's in their persona_state_flags. You can see the available flags here. So, you'd want to check if (user.persona_state_flags & SteamUser.EPersonaStateFlag.ClientTypeMobile)

No, there is no such function as declineConfirmationForOffer. If you want to accept a given offer by ID, you'll need to first retrieve it using getOffer.

You need to research how asynchronous code works in JavaScript.

Before calling webLogOn, you need to check if client.steamID is set. If it isn't, then you aren't connected and you'll need to reconnect first.

In what way?

No.

For most free games other than TF2, you need to request a license before you can play it.