Dr. McKay

If you pass a language to the constructor, then item descriptions (including name) will be set. tradable is false if you don't have a language set because an item's tradability is part of its description, which isn't loaded if there's no language set. It would probably be a good idea if I deleted those properties for items that don't have descriptions available, I guess.

403 usually means your IP got temporarily blocked. You need to tone down the requests you make, especially to inventories. And don't use the confirmation checker.

This is a known issue. I haven't gotten around to adding proper support for showcases yet.

They're the same thing.

Asset IDs generally won't change if an item is just sitting in your inventory. They will change (for Valve games) if they are "changed" somehow (e.g. renamed in-game) or if they're traded away. Note that in some circumstances, a trade offer can be sent and accepted, but the actual item exchange might fail and Steam might roll back the trade. If this happens, some (but not necessarily all) of the items in the trade will have their IDs change.

You need to use community.setCookies() to log SteamCommunity into Steam.

No problem at all. It's definitely possible that they disabled the old webchat endpoints (I haven't checked to see if they work in a long while). If they have, I would seriously recommend just using steam-user. As mentioned earlier, it's rather lightweight if all you're doing is logging on and setting yourself to online.

It doesn't look like you ever logged in.

As far as I'm aware, the old webchat endpoints do still work, and I never removed the code from steamcommunity. You could try using it. That said, using steam-user just to go online and do nothing else is pretty lightweight. It's just a single connection getting held open, and sending heartbeat packets every 9 seconds or so. I use Charles Proxy to intercept app requests. If your phone is rooted, research how to add a root certificate to the system store. Then you can MITM whatever you want, as long as the app doesn't implement cert pinning (Steam doesn't, last I checked).

Why not just use steam-user to go online? To analyze the calls an Android app makes, you need a rooted phone. Android 7 (I think) made it to where apps need to explicitly opt-in to allowing user-entered roots for secure connections, which few apps do.

Just use SteamUser.EPersonaState.Online

If you're using steam-user and your account has email-based Steam Guard enabled, when you run the bot and Steam prompts for a code, the module will automatically prompt you to enter the code. Once you do and hit enter, it will proceed with the login. You can post group announcements using steamcommunity, but discussion forums are not supported and are unlikely to ever be, due to spam concerns.

Yes, and yes.

Assuming your clock is correct, this will tell you how many seconds are left until the code will change: let secondsRemaining = 30 - (Math.floor(Date.now() / 1000) % 30); But note that once a code changes, you still have another 30 seconds to use it before it comes invalid.

I assume a "nodejs bot" is a steam-user bot? https://github.com/DoctorMcKay/node-steam-user#websession

You want to use the rememberPassword log on option.

I don't think you can request profile data for arbitrary users without you being friends with them (or being in the same group chat) via steam-user.

No, those are the same exact URL.

Rocket League is 252950, not 252590.

No, that isn't normal. Just running const SteamUser = require('steam-user') runs at around 60 MB for me.

The user event will be emitted anytime Steam sends a persona state notification, which happens automatically for all your friends whenever their states change, provided you're marked as online.

Get your friends list from myFriends and check each of their statuses in users.

If you're using steam-user, rememberPassword is the only option you can use. There are no cookies.

Assuming you're using steam-user, look into rememberPassword. But be warned, it's not foolproof. It breaks sometimes.

If you're specifying a custom dataDirectory, then it's not going to get saved to appdata.