v3.49.0

• Added acknowledgeTradeProtection() method

Full Changelog: v3.48.8...v3.49.0

v3.48.8

• Fixed corrupted Steam data possibly overwriting inventory item assetids

Full Changelog: v3.48.7...v3.48.8

v3.48.7

• Fixed error 400 when requesting inventories via getUserInventoryContents (by @metzz1 in #354)

Full Changelog: v3.48.6...v3.48.7

v3.48.6

• Added Origin header to all non-GET requests, which fixes some 403 errors
• Fixed malformed sessionid returned in login() callback

Full Changelog: v3.48.4...v3.48.6

v3.48.5

• Fixed receiving "Malformed response" error when fetching a CS2 inventory that has no visible items

Full Changelog: v3.48.4...v3.48.5

v3.48.4

• Reduce Steam redirects by @makss in #341
• Fixes cache_expiration restore for CS2 Items by @benschool in #347

Full Changelog: v3.48.3...v3.48.4

v3.48.3

• Reduced number of requests necessary to get full inventory contents (by @nolddor in #340)

Full Changelog: v3.48.2...v3.48.3

v3.48.2

• Fixed steamID property not being set when using cookies that have a domain attribute

Full Changelog: v3.48.1...v3.48.2

v3.48.1

• Fixed cookie issue caused by differing tokens across different Steam domains

Full Changelog: v3.48.0...v3.48.1

v3.48.0

• BREAKING STEAM CHANGE Mobile confirmation is now required to create a Web API key
  • It is now required to have a Steam Guard Mobile Authenticator in order to create a Web API key
  • getWebApiKey() no longer attempts to register an API key if your account doesn't yet have one
  • getWebApiKey() still works for retrieving your account's existing API key
  • createWebApiKey() has been added to handle creating a new Web API key
     
    Full Changelog: v3.47.1...v3.48.0

Ramifications of This Change

• You now need to enable mobile 2FA to create a Web API key
• You can disable mobile 2FA after your key has been created, and it will keep working
• getWebApiKey() works as before if your account already has a key created, but does not attempt to register a key if you don't yet have one
• If you have a script that prepares new accounts for use (e.g. enables 2FA, sets up profile), then you should call createWebApiKey() as part of that script, after enabling 2FA.
• Any code which consumes getWebApiKey() will work as before, provided you create your API key before attempting to call it