supertokens-core icon indicating copy to clipboard operation
supertokens-core copied to clipboard

Log in with Steam

Open gegtor opened this issue 1 year ago • 2 comments

🚀 Feature

Allow for logging in with Steam or add generic OpenID 2.0 support which Valve uses I was ready to adopt SuperTokens for my gaming application but currently it's a no go because it lacks Steam support

gegtor avatar Oct 11 '23 13:10 gegtor

We already do have generic OAuth 2.0 + OIDC provider support: https://supertokens.com/docs/thirdparty/common-customizations/sign-in-and-up/custom-providers

But im keeping this issue open cause we don't have steam in built (however it would be very easy to add it via the generic provider anyway)

rishabhpoddar avatar Oct 11 '23 13:10 rishabhpoddar

OAuth2 is not what is needed for Steam IIRC (the original issue title mentioned "OpenID 2.0", and for some reason the original message was edited to strike that out?).

I remember seeing this discussed as a feature request on other projects in the past too, it seems to be one of the login methods you see requested that has additional friction to support due to Valve not adopting modern standards.


Here we go: https://github.com/ory/kratos/issues/3631

I found out that - to my surprise - they don't use Open ID Connect to offer "login with Steam", but the older Open ID 2.0 protocol.

Additional Context

Steam Open ID 2.0 for websites (on the same page: linking from game clients): https://partner.steamgames.com/doc/features/auth#website

Open ID 2.0 Authentication spec: https://openid.net/specs/openid-authentication-2_0.html


Casdoor seems to list an OAuth2 Steam provider: https://casdoor.org/docs/provider/oauth/Steam/

They make no mention of Open ID 2.0 there, and I've not tried it myself. If it does provide the equivalent functionality you're wanting it might help as additional reference.

polarathene avatar Jul 08 '24 03:07 polarathene