@xboxreplay/xboxlive-auth

Xbox Live - Auth

Simple Xbox Live authentication module.

Installation

$ npm install @xboxreplay/xboxlive-auth

Clone

$ git clone [e-mail]:XboxReplay/xboxlive-auth.git

Build

$ npm run build

Usage

import XboxLiveAuth from '@xboxreplay/xboxlive-auth';

XboxLiveAuth.authenticate('[e-mail]', '*********')
    .then(console.info)
    .catch(console.error);

Sample response

{
    "userHash": "1890318589445465111",
    "XSTSToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhIjoiYiJ9.iMrN7XT_jCcRXWKwUo_JPWeRO75dBOGTzerAO"
}

Sample call

curl 'https://profile.xboxlive.com/users/gt(Zeny%20IC)/profile/settings'
    -H 'Authorization: XBL3.0 x={userHash};{XSTSToken}'
    -H 'x-xbl-contract-version: 2'

Arguments

• email {string}
• password {string}
• options {Object?}
  • XSTSRelyingParty {string?} - Default: http://xboxlive.com

What's a "XSTSRelyingParty"?

The "XSTSRelyingParty" is a domain configured by Microsoft and / or its partners to create a XSTS token which is intended to be used for a targeted service. For instance, if you use http://beam.pro/ you will be able to interact with the private Mixer.com API. A partial list can be found here: https://title.mgt.xboxlive.com/titles/default/endpoints?type=4.

What about 2FA (Two-factor authentication)?

2FA, or guidelines update detection, are not supported by this module (yet) which may cause some issues if you try to run this code in a production environment. As said, it's a simple one! Feel free to open a pull request if you have a workaround.