Dr. McKay Posted April 30 Report Posted April 30 Seems like a backend change that access token refreshes for SteamClient tokens are authenticated now. I've updated the docs to reflect it: https://github.com/DoctorMcKay/node-steam-session?tab=readme-ov-file#refreshaccesstoken Quote
Valvoja Posted Thursday at 07:34 PM Report Posted Thursday at 07:34 PM On 4/30/2025 at 11:47 PM, Dr. McKay said: Seems like a backend change that access token refreshes for SteamClient tokens are authenticated now. I've updated the docs to reflect it: https://github.com/DoctorMcKay/node-steam-session?tab=readme-ov-file#refreshaccesstoken According to the docs the CM must be authenticated. What does this mean? Does it mean only a valid Steam client (Steam Desktop Client) can be used? Can it be spoofed? I also tried to use k_EAuthTokenPlatformType_MobileApp but for some reason I get EResult 5 (k_EResultInvalidPassword) when I try to log in using the refresh token. Works when I switch back to SteamClient but then I can't refresh the token Quote
Dr. McKay Posted Friday at 10:14 PM Report Posted Friday at 10:14 PM It means you need to have an established connection to a CM (the same servers the Steam client logs into) in order to refresh the token. You can use steam-user to do this if you want. What do you mean by "log in using the refresh token"? Quote
Valvoja Posted Saturday at 12:42 PM Report Posted Saturday at 12:42 PM 14 hours ago, Dr. McKay said: It means you need to have an established connection to a CM (the same servers the Steam client logs into) in order to refresh the token. You can use steam-user to do this if you want. What do you mean by "log in using the refresh token"? Ah I thought that was a given since the refresh request is sent using the CM connection anyway 🤔 And I meant that I am logging in using the token with CMsgClientLogon Quote
Dr. McKay Posted 16 hours ago Report Posted 16 hours ago steam-session performs the login over an unauthenticated CM connection, but the refresh request now requires the CM connection to be authenticated (you previously sent CMsgClientLogon). Once you're logged on you can send the Authentication.GenerateAccessTokenForApp#1 unified message. Quote
zhangdashan Posted 3 hours ago Report Posted 3 hours ago 12 hours ago, Dr. McKay said: steam-session 通过未经身份验证的 CM 连接执行登录，但现在刷新请求需要对 CM 连接进行身份验证（您之前已发送 CMsgClientLogon）。登录后，您可以发送 Authentication.GenerateAccessTokenForApp#1 统一消息。 Can you provide a demonstration? Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.