RunicGateway/website
3
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Activity

feat(auth): sign in with Steam (MODULE_API 1.17.0) #218

Merged
whitlocktech merged 2 commits from feat/steam-signin into edge 2026-10-20 15:26:02 +00:00
Conversation 0 Commits 2 Files Changed 30 +14
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 02897030e5 - Show all commits

14
server/test/steamSignin.test.js
View File

@@ -306,6 +306,20 @@ test('the same refusal holds on the mobile bridge (D395)', async () => {
assert.equal(created, null) assert.equal(created, null)
}) })
test('a linked Steam account signs in to the app through the mobile bridge (M9)', async () => {
userIdentities.findByProviderSubject = async () => ({ id: 3, user_id: 7, provider: 'steam' })
mobileBridge.getSession = async () => ({
session_id: 'm2', status: 'pending', redirect_uri: 'runicgateway://sso', state: 'app-state',
expires_at: new Date(Date.now() + 60_000).toISOString(),
})
mobileBridge.issueAuthCode = async () => ({ code: 'one-time-code' })
const tx = ssoState.createTx({ provider: 'steam', mode: 'mobile', mobileSessionId: 'm2' })
const res = mockRes()
await ssoCtrl.callback(steamReq(tx), res)
assert.equal(res.redirectedTo, 'runicgateway://sso?code=one-time-code&state=app-state')
assert.equal(res.cookies[token.COOKIE_NAME], undefined, 'the app gets a code, never a cookie')
})
test('a forged callback (Steam says is_valid:false) is a refused sign-in, not a server error', async () => { test('a forged callback (Steam says is_valid:false) is a refused sign-in, not a server error', async () => {
installSteam({ valid: false }) installSteam({ valid: false })
userIdentities.findByProviderSubject = async () => ({ id: 3, user_id: 7 }) userIdentities.findByProviderSubject = async () => ({ id: 3, user_id: 7 })