Dr. McKay Posted April 30 Report Posted April 30 Seems like a backend change that access token refreshes for SteamClient tokens are authenticated now. I've updated the docs to reflect it: https://github.com/DoctorMcKay/node-steam-session?tab=readme-ov-file#refreshaccesstoken Quote
Valvoja Posted May 8 Report Posted May 8 On 4/30/2025 at 11:47 PM, Dr. McKay said: Seems like a backend change that access token refreshes for SteamClient tokens are authenticated now. I've updated the docs to reflect it: https://github.com/DoctorMcKay/node-steam-session?tab=readme-ov-file#refreshaccesstoken According to the docs the CM must be authenticated. What does this mean? Does it mean only a valid Steam client (Steam Desktop Client) can be used? Can it be spoofed? I also tried to use k_EAuthTokenPlatformType_MobileApp but for some reason I get EResult 5 (k_EResultInvalidPassword) when I try to log in using the refresh token. Works when I switch back to SteamClient but then I can't refresh the token Quote
Dr. McKay Posted May 9 Report Posted May 9 It means you need to have an established connection to a CM (the same servers the Steam client logs into) in order to refresh the token. You can use steam-user to do this if you want. What do you mean by "log in using the refresh token"? Quote
Valvoja Posted May 10 Report Posted May 10 14 hours ago, Dr. McKay said: It means you need to have an established connection to a CM (the same servers the Steam client logs into) in order to refresh the token. You can use steam-user to do this if you want. What do you mean by "log in using the refresh token"? Ah I thought that was a given since the refresh request is sent using the CM connection anyway 🤔 And I meant that I am logging in using the token with CMsgClientLogon Quote
Dr. McKay Posted May 12 Report Posted May 12 steam-session performs the login over an unauthenticated CM connection, but the refresh request now requires the CM connection to be authenticated (you previously sent CMsgClientLogon). Once you're logged on you can send the Authentication.GenerateAccessTokenForApp#1 unified message. Quote
zhangdashan Posted May 13 Report Posted May 13 12 hours ago, Dr. McKay said: steam-session 通过未经身份验证的 CM 连接执行登录，但现在刷新请求需要对 CM 连接进行身份验证（您之前已发送 CMsgClientLogon）。登录后，您可以发送 Authentication.GenerateAccessTokenForApp#1 统一消息。 Can you provide a demonstration? Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.