Skip to content

Add Steam ticket auth for auth=steam HTTP requests#158

Open
Ash-bass wants to merge 1 commit into
gro-ove:masterfrom
Ash-bass:steam-auth-downloads
Open

Add Steam ticket auth for auth=steam HTTP requests#158
Ash-bass wants to merge 1 commit into
gro-ove:masterfrom
Ash-bass:steam-auth-downloads

Conversation

@Ash-bass
Copy link
Copy Markdown

@Ash-bass Ash-bass commented Mar 3, 2026

Adds support for Steam-authenticated HTTP requests. When a URL includes auth=steam, the client sends the user's Steam session ticket in the Authorization header so the server can verify the request. This works for downloads, API calls, and any other HTTP request that goes through the shared web client (e.g. content downloads, server content, metadata fetching).

Changes:

a4f081c:

  • AcManager.Tools/Helpers/SteamTicketProvider.cs (new) obtains Steam session ticket via GetAuthSessionTicket and exposes UrlRequiresSteamTicket() to detect auth=steam in URLs.
  • AcManager.Tools/Helpers/CookieAwareWebClient.cs adds Steam ticket injection in GetWebRequest, setting Authorization: Bearer <hex-ticket> when the URL contains auth=steam.
  • AcManager.Tools/AcManager.Tools.csproj adds compile include for SteamTicketProvider.cs.

@Ash-bass
Copy link
Copy Markdown
Author

Ash-bass commented Mar 4, 2026

The main purpuse of this is locking content download behind and auth, so with the steam ticket, server can verify its legitimacy, and then provide specific content to an user or group of users based on steam id, but ye can be used for multiple things.

P.S: This is my first pull request — please excuse any inconvenience. Feedback is welcome.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant