From 0533c9328ef99555ad17c3c61573cce5481f35ac Mon Sep 17 00:00:00 2001 From: Rossen Georgiev Date: Fri, 13 May 2016 04:09:11 +0100 Subject: [PATCH] webauth: limit the domains where cookies are used --- steam/webauth.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/steam/webauth.py b/steam/webauth.py index 5511c11..164f1d3 100644 --- a/steam/webauth.py +++ b/steam/webauth.py @@ -2,7 +2,7 @@ """ This module simplifies the process of obtaining an authenticated session for steam websites. After authentication is complete, a :class:`requests.Session` is created containing the auth cookies. -The session can be used to access ``steamcommunity.com`` and ``steampowered.com``. +The session can be used to access ``steamcommunity.com``, ``store.steampowered.com``, and ``help.steampowered.com``. Example usage: @@ -162,7 +162,7 @@ class WebAuth(object): self.steamid = SteamID(data['steamid']) - for domain in ['.steampowered.com', '.steamcommunity.com']: + for domain in ['store.steampowered.com', 'help.steampowered.com', 'steamcommunity.com']: self.session.cookies.set('steamLogin', '%s||%s' % (data['steamid'], data['token']), domain=domain, secure=False) self.session.cookies.set('steamLoginSecure', '%s||%s' % (data['steamid'], data['token_secure']),