Steam Authentication & Integration 1.0.7

Binari0 · Mar 26, 2012

Edit the CSS and put a small font size

J.R. · Mar 27, 2012

Binari0 said:
Edit the CSS and put a small font size

got it thanks

Bios Element · Mar 30, 2012

Soo does this work for anyone else? I can't actually associate Steam accounts with forum accounts, continually getting this error.

Code:

http://example.com/register/steam?redirect=http://example.com/account/steam&openid.ns=http://specs.openid.net/auth/2.0&openid.mode=error&openid.error=realm and return_to do not match

Binari0 · Mar 30, 2012

Dont work in examples domain. Test in your web and worlks fine.

Bios Element · Mar 30, 2012

Binari0 said:
Dont work in examples domain. Test in your web and worlks fine.

Well yes, I did. I simply stripped the actual domain out, but it's currently live at www.bioshub.com and doesn't appear to like me very much.

Morgan · Mar 30, 2012

Binari0 said:
On my forums works fine, but this appers to day in my profile:

Invalid profile data

http://i.minus.com/jbaPZ6uerIHIxM.png

My profile:
http://foros.tecnogaming.com/members/010101.83/

Any ideas?

There seems to be times when Steam fails to provide the data and you get the "invalid profile data". I'm not entirely certain what will need to be done to fix it given that I didn't write the steam cards themselves. Does it happen consistently?

Gurrazor said:
Is there a possibility to require people to associate their steam accounts when they register?

descoteaux said:
Have you investigated using Steam only for authorization when signing up for forums?

Looks like I need to jump back into this and actually get working on this! Sorry but life has distracted me too easily from my todo list.

Bios Element said:
Well yes, I did. I simply stripped the actual domain out, but it's currently live at www.bioshub.com and doesn't appear to like me very much.

That is really wonky. Looking at your URL redirects...I'm noticing that your openid realm is set to "openid.realm=https://bioshub.com" however we are returning to "openid.return_to=http://bioshub.com/register/steam?redirect=http://bioshub.com/" (Sorry for being too lazy to fully decode the url to ascii, it really isn't too necessary). As you notice we're seeing a difference between http and https. So...why is that happening for you? You can look into the _genUrl() function I use for the Controller Public (its a private function for that class):

PHP:

    /**
    * Generates URI to be used
    */
    private function _genUrl() {
        $callbackUri = XenForo_Link::buildPublicLink('full:register/steam', false, array(
            'redirect' => $this->getDynamicRedirect()
        ));
 
        $params = array(
            'openid.ns'        => 'http://specs.openid.net/auth/2.0',
            'openid.mode'      => 'checkid_setup',
            'openid.return_to'  => $callbackUri,
            'openid.realm'      => (!empty($_SERVER['HTTPS']) ? 'https' : 'http') . '://' . $_SERVER['HTTP_HOST'],
            'openid.identity'  => 'http://specs.openid.net/auth/2.0/identifier_select',
            'openid.claimed_id' => 'http://specs.openid.net/auth/2.0/identifier_select'
        );
 
        return self::STEAM_LOGIN . '?' . http_build_query($params, '', '&');
    }

You will notice that I am checking if the request was done via HTTPS. However it wasn't. I've cleared up the logic on the openid.realm line just for clarity, and regardless what your seeing "shouldn't" happen. Looking at your server I noticed your running Cherokee/1.2.101 which I assume is fine but to debug this could you throw the following php file somewhere that it can be run on your site to see what the output is?

PHP:

<?php
    print_r($_SERVER['HTTPS']);

Binari0 · Mar 30, 2012

Morgan said:
There seems to be times when Steam fails to provide the data and you get the "invalid profile data". I'm not entirely certain what will need to be done to fix it given that I didn't write the steam cards themselves. Does it happen consistently?

No.. only one time, in my forum...

Bios Element · Mar 31, 2012

Morgan said:
You will notice that I am checking if the request was done via HTTPS. However it wasn't. I've cleared up the logic on the openid.realm line just for clarity, and regardless what your seeing "shouldn't" happen. Looking at your server I noticed your running Cherokee/1.2.101 which I assume is fine but to debug this could you throw the following php file somewhere that it can be run on your site to see what the output is?

PHP:

<?php print_r($_SERVER['HTTPS']);

http://bioshub.com/test.php

I'll go ahead and double check on the Cherokee side of things, but in concept it shouldn't be touching HTTPS anywhere as I never quite got around to configuring that. (Although perhaps this is a good time to do so...)

lasertits · Mar 31, 2012

I have a quick question - is there a conditional I can use in templates for whether or not their steam is associated? Since I'm using Dark's currently I can do this by checking if their Steam user field has anything in it or not (<xen:if is="!{$visitor.customFields.Steam}">). I noticed this addon has something for notices, but I need a conditional I can use in certain templates, does one exist?

Thanks, just trying to square some site integration away before potentially switching over to this one.

descoteaux · Apr 2, 2012

Some of my new users have had problems when using Steam Login directly to register for my forum. Once registered, they can sign in through Steam, but they can't sign in through Xenforo's normal login method because they don't have a forum password. Obviously you can't copy their Steam password so is it possible to add a requirement for them create a forum password during the Steam Login registration process? If I'm missing something here, I apologize.

Again, thank you for your work.

lasertits · Apr 2, 2012

descoteaux said:
Some of my new users have had problems when using Steam Login directly to register for my forum. Once registered, they can sign in through Steam, but they can't sign in through Xenforo's normal login method because they don't have a forum password. Obviously you can't copy their Steam password so is it possible to add a requirement for them create a forum password during the Steam Login registration process? If I'm missing something here, I apologize.

Again, thank you for your work.

This is the same case with the other Steam addon by Dark Immortal. If this new one fixed this I'd have even more reason to finally switch over. I just ended up putting up a notice / info in the wiki informing users who created accounts via steam that they'll need to reset their passwords in order to login normally as there isn't any password creation during that process.

Morgan · Apr 2, 2012

descoteaux said:
Some of my new users have had problems when using Steam Login directly to register for my forum. Once registered, they can sign in through Steam, but they can't sign in through Xenforo's normal login method because they don't have a forum password. Obviously you can't copy their Steam password so is it possible to add a requirement for them create a forum password during the Steam Login registration process? If I'm missing something here, I apologize.

Again, thank you for your work.

I could probably just trigger a password reset on registration if you think that would be advantageous. Though it might confuse people if they didn't ask for it and just signed in via Steam. Might be better to provide a mechanism to inform the user they need to use Steam or reset the password.

Morgan · Apr 2, 2012

lasertits said:
I have a quick question - is there a conditional I can use in templates for whether or not their steam is associated? Since I'm using Dark's currently I can do this by checking if their Steam user field has anything in it or not (<xen:if is="!{$visitor.customFields.Steam}">). I noticed this addon has something for notices, but I need a conditional I can use in certain templates, does one exist?

Thanks, just trying to square some site integration away before potentially switching over to this one.

Code:

<xen:if is="{$visitor.steam_auth_id}">Your random stuff here</xen:if>

Hope that helps!

Binari0 · Apr 2, 2012

I think the password you put in your account xenforo is the same as that of steam.

Morgan · Apr 2, 2012

Binari0 said:
I think the password you put in your account xenforo is the same as that of steam.

Given that the purpose of this external authentication is to trust other identity providers to perform authentication, the XenForo forum installation never receives this data and is entirely left up to the identity provider. Your XenForo install merely trusts the result of the Identity Provider. As such you must trust the Identity Provider is secure, however for a forum this is less critical than say a bank. Steam Authentication & Integration simply never receives the password and as such we can't make them the same!

lasertits · Apr 3, 2012

I think if you just add a password field to the account creation form that users see after being redirected back to XF from SteamCommunity, it would work fine. Users would enter a pass as if it were a regular registration and be able to use said pass when logging in normally.

Morgan · Apr 3, 2012

lasertits said:
I think if you just add a password field to the account creation form that users see after being redirected back to XF from SteamCommunity, it would work fine. Users would enter a pass as if it were a regular registration and be able to use said pass when logging in normally.

Not certain how I feel about that. Given the purpose of Steam Authentication is to remove as many steps (or barriers) to registration as possible. Given that your leaning on Steam to be an identity provider that should be their password. Possibly should just make a custom e-mail to send the user explaining it with a password to use...not certain.

lasertits · Apr 3, 2012

Morgan said:
Not certain how I feel about that. Given the purpose of Steam Authentication is to remove as many steps (or barriers) to registration as possible. Given that your leaning on Steam to be an identity provider that should be their password. Possibly should just make a custom e-mail to send the user explaining it with a password to use...not certain.

Hmm, that might work. I'm sure some users will have old outdated emails attached they no longer really check, but perhaps not with the introduction of the recent Steam Guard which requires you to check your email for a code now and then. Perhaps an email + something on-site would be good, not sure what though... a dismissible notice might be the best bet...

Morgan · Apr 3, 2012

Morgan updated Steam Authentication & Integration with a new update entry:

Game notices!

Game notices and Tools now gained a "Steam" section (which will gain more capabilities later).

Read the rest of this update entry...

Morgan · Apr 3, 2012

Morgan updated Steam Authentication & Integration with a new update entry:

Bug Fixes

The following bugs were fixed in 1.0.6 (oops):

Visitors receive error when a notice implementing a Steam Game is defined

Admin phrases not defined for Admin->Tools->Steam->Top 25 Games

Read the rest of this update entry...

Steam Authentication & Integration 1.0.7

Member

Member

Member

Member

Member

Active member

Member

Member

Active member

Member

Active member

Active member

Active member

Member

Active member

Active member

Active member

Active member

Active member

Active member

Similar threads

We value your privacy