search

Bungie-net / api

Resources for the Bungie.net API
Other
1.22k stars 92 forks source link

User.GetCredentialTypesForTargetAccount Requires OAuth #1769

Open Aryathel opened 1 year ago

Aryathel commented 1 year ago

The User.GetCredentialTypesForTargetAccount endpoint has nothing in its specification showing a requirement for OAuth tokens to hit the endpoint, but still returns a 99: WebAuthRequried error when calling without one. Also, even when calling with a bearer token, I am still getting this error.

Aryathel commented 1 year ago

It turns out that the second part of this was a result of making the request to https://bungie.net/Platform/... rather than https://www.bungie.net/Platform.... Somehow during the bungie.net's redirection to www.bungie.net, it loses the supplied credentials. The request does work when using OAuth credentials with www.bungie.net. However, it still is the case that OAuth is required and this endpoint has nothing stating that OAuth is required.

Aryathel commented 1 year ago

This also applies to the GroupV2.RecoverGroupForFounder endpoint. It has no information about requiring OAuth in the docs/spec, but does require it.