xbox-webapi-csharp icon indicating copy to clipboard operation
xbox-webapi-csharp copied to clipboard

Can no longer Authenticate

Open GazC opened this issue 1 year ago • 7 comments

Hi,

Seems to be getting 403 Forbidden on attempts at Authentication, both Web & Headless. This appears to be a recent issue as this has only just stopped working recently. Tried with multiple accounts, same result.

Thanks

GazC avatar Dec 09 '23 15:12 GazC

Is this project still maintained? At the very least is there someone around to verify this isnt an issue with my accounts?

The issue exists within the Xbox Authentication Service Users (XASU). The 403 response is useless and does not really contain any information on what the problem is otherwise i would (attemp to) fix it myself.

Thanks

GazC avatar Dec 12 '23 20:12 GazC

No it is not maintained anymore

tuxuser avatar Dec 12 '23 20:12 tuxuser

Try to prefix RPSTicket in XASURequest with d= .. so value is d=...accessToken...

tuxuser avatar Dec 14 '23 07:12 tuxuser

Try to prefix RPSTicket in XASURequest with d= .. so value is d=...accessToken...

Hi,

Thank you for your suggestion. Unfortunately this just results in a 400 Bad Request. Your help is much appreciated however.

Thank You

GazC avatar Dec 14 '23 10:12 GazC

Hi,

An update to this -

I have figured out where the problem lies.

The problem seems to be with the Access Token that is retrieved and is causing the XASURequest to fail with a 403.

Line - [AccessToken = new AccessToken(windowsLiveTokens);] in [AuthenticateAsync()] in [AuthenticationService,cs].

I know this because I have injected a known working Access Token into the XASURequest and everything works correctly.

Any thoughts?

Thanks

GazC avatar Dec 14 '23 18:12 GazC

@tuxuser Found the problem.

Client ID "0000000048093EE3" no longer appears to work. Changing this to a known working Client ID Fixes the issue.

Thanks

GazC avatar Dec 14 '23 18:12 GazC

Nice you figured it out and thx for reporting back.

I will keep this issue open for others to see.

tuxuser avatar Dec 14 '23 19:12 tuxuser