Is it possible to get your web api oauth token with a limited account?

[timgfx]

I already found the answer; mobile headers/cookies. Now my question is whether you need anything else besides that?

 

What I am doing right now isn't working, it still tells me that my account is restricted etc etc.

 

Cookies I set for steamcommunity.com:

 

mobileClientVersion=0 (2.1.3)

mobileClient=android

Steam_Language

 

And headers:

X-Requested-With: 'com.valvesoftware.android.steam',

Referer: 'https://steamcommunity.com/mobilelogin?oauth_client_id=DE45CD61&oauth_scope=read_profile%20write_profile%20read_client%20write_client',

User-Agent: 'Mozilla/5.0 (Linux; U; Android 4.1.1; en-us; Google Nexus 4 - 4.1.1 - API 16 - 768x1280 Build/JRO03S) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30',

Accept: 'text/javascript, text/html, application/xml, text/xml, */*'

 

These are both taken from node-steamcommunity. What I'm doing is registering an account, and trying to activate 2fa. But I am not able to get the oauth token because I can't access /chat. I tried using the values above in all my requests and still it doesn't work. I can't find anything else I would have to add in node-steamcommunity. The only real difference is that I am registering instead of logging in, could that be the problem or am I missing something?

Edited April 2, 2018 by timgfx

[Dr. McKay]

You also need to submit these in your login request.

[timgfx]

You also need to submit these in your login request.

The thing is that I'm not logging in. I'm registering, then going to /edit?welcomed=1, grabbing a new sessionid there and doing some other things with the account. It works perfectly fine, I got all the cookies I need afaik so I don't really see what is different from logging in or relogging. Any ideas?

 

Edit: Including those when registering changed nothing.

Edited April 2, 2018 by timgfx

[Dr. McKay]

You probably need to register then login again.