Wrong identity secret?

[haveaniceday]

Hi, I almost copy pasted the file from node  steam-community, to confirm all confirmations on steam.

let identitySecret = process.env.IDENTITY_SECRET;

  let confs = await new Promise((resolve, reject) => {
    let time = SteamTotp.time();
    let key = SteamTotp.getConfirmationKey(identitySecret, time, "conf");
    community.getConfirmations(time, key, (err, confs) => {
      if (err) {
        return reject(err);
      }

      resolve(confs);
    });
  });

But I get this error :

Quote

                        callback(new Error(body.message || body.detail || 'Failed to get confirmation list'));
                                 ^

Error: Invalid authenticator

My main concern is that my identity secret isnt right:( If that is the case is there any chance of getting it, without re-enabling steamGuard. I have all the other codes from the enableTwoFactor function.

[Dr. McKay]

Make sure your clock is right.

[haveaniceday]

function getSteamTimeOffset() {
  return new Promise((resolve, reject) => {
    SteamTotp.getTimeOffset((err, offset, latency) => {
      if (err) {
        reject(err); 
      } else {
        resolve(offset);
      }
    });
  });
}
async function doConfirmations(community) {
  let identitySecret = process.env.IDENTITY_SECRET;

  let confs = await new Promise(async (resolve, reject) => {
    let offset = await getSteamTimeOffset();
    console.log(offset);
    let time = SteamTotp.time(offset);
    let key = SteamTotp.getConfirmationKey(identitySecret, time, "conf");
    community.getConfirmations(time, key, (err, confs) => {
      if (err) {
        return reject(err);
      }

      resolve(confs);
    });
  });

I added steamTimeOffset and I still get the same error. This probably means the identity secret is wrong?

[Dr. McKay]

Yeah, that does seem like the identity secret is wrong. It's possible that it's being corrupted when fed into your env var, since secrets can contain special characters that might break in terminal input.

[VidKal]

Is there a way to get this codes again, without the market/trade ban of 15 days? Something like “Move Authenthicator” that sends you a code  to the phone.

If not where should I print the codes so that this cant happen again.

And thanks for the help

[Dr. McKay]

The "move authenticator" feature hasn't been implemented in node, to my knowledge.

[Batya]

can you explain where you place your SHARED SECRET?
I want to open storehouse-steamcommunity.js in the examples folder, but it says "Steam login fail: SteamGuardMobile"

[Dr. McKay]

In that example, put it where it says "sharedSecret".