• orgrinrt@lemmy.world
    link
    fedilink
    arrow-up
    6
    ·
    edit-2
    1 year ago

    The obvious solution would be to take some token as an argument to the api calls that is private to the user, which would signify a consent to share also the hidden data.

    I think there already is a token like this for steam item trading, in case your profile is private?

    I.e if you don’t provide that argument, share only public stuff to the caller. If you do, it’s a explicit choice by you, since you are required to provide your credentials in some form of a token.

    • EssentialCoffee@midwest.social
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      They’re likely talking about using some of the key swapping sites. They only let you join if your profile is public so that you don’t get keys for games you already have.

      I had a bunch of keys to give away recently and was trying to find ways to do so in ways they wouldn’t be botted away (at least not easily), but everywhere to do so either required access to my steam profile or some other process to give them away, so they might just sit with me until they expire.