Авторизация через Steam

[php] super simple steam login [gamebanana] [tutorials]

This tutorial will teach you a simple way to create your own functioning Sign in with Steam button on your website. This tutorial only requires you to use two 3rd party PHP classes which I will link in this tutorial. Now, let’s get on with the tutorial!

The “Sign in with Steam” button is extremely useful for user authentication on websites. It is also extremely simple to use. However, before we write code of our own, you will need to download a couple of PHP files that we will be using to make our system. We will be using Jessecar96’s (Creator of Scrap.TF) SteamAuth PHP class and a PHP class that it uses to interface with OpenID authentication. Go ahead and download/clone this repository. Next, in your server or wherever you are building this system at, create an /includes/ directory and place the SteamAuth folder that we just downloaded/cloned into it. Now, let’s make a simple index.php file that has a link that leads to a login.php file:

<?php
    require_once("./includes/init.php");
?>
<!DOCTYPE html>
<html lang="en">
    <head></head>
    <body>
        <?php
            if($logged_in)
            {
                echo "Hello, " . $_SESSION["username"] . "!";
            }
            else
            {
                echo "<a href="./login.php">Sign in with Steam</a>";
            }
        ?>
    </body>
</html>

Now that is all for the index file. As you can see We will have different content depending on whether the user is logged in or not.

Let’s move on to the login file.

<?php

    require_once("./includes/init.php");

    if(!$auth->IsUserLoggedIn())
    {
        header("Location: ".$auth->GetLoginURL());
    }
    else
    {
        session_start();
        $api_key = "YOUR_STEAM_API_KEY";
        $json = json_decode(file_get_contents("http://api.steampowered.com/ISteamUser/GetPlayerSummaries/v0002/?key=".$api_key."&steamids=".$auth->SteamID), true);

        $steamid = $_SESSION["steamid"] = $json['response']['players'][0]['steamid'];
        $username = $_SESSION["username"] = htmlspecialchars($json['response']['players'][0]['personaname']);
        $avatar = $_SESSION["avatar"] = $json['response']['players'][0]['avatarfull'];

        header("Location: /");
    }

?>

This all is rather simple. First, it includes the SteamAuth class we downloaded (which also includes openid.php), then it checks whether the user is logged in via Steam. If they aren’t then it redirects them to the Steam login page which looks like this:

Похожее: Личный кабинет Эвотора: правила регистрации, инструкции по авторизации и использования

Авторизация через Steam

Note that it says that the site will only be able to retrieve public data on the user. This method does not reveal your login username or your password.

Once the user is logged in, Steam will redirect them back to the login page where it will make a request to the Steam API with your API key and their SteamID to retrieve and store their SteamID, username, and avatar in a session and then redirect them to the document root, which would be our index fille.

Lastly, we need to initialize the SteamAuth class. This is done with a simple file we will name init.php which will also go in the /includes/ directory:

<?php

    require("SteamAuth/SteamAuth.class.php");

    $auth = new SteamAuth();
    $auth->SetOnLoginCallback(function($steamid){
        return true;
    });
    $auth->SetOnLoginFailedCallback(function(){
        return true;
    });
    $auth->Init();

?>

Next we can make a logout.php file which will then log the user out:

<?php

    require_once("./includes/init.php");
    session_unset();
    session_destroy();
    $auth->LogOut();

    header("Location: /");

?>

That wraps up this tutorial! You go way more complicated with your login system by using cookies to keep the user logged in or storing the data in a database.

I hope you enjoyed this tutorial!

You can view a mirror of this tutorial here in case the format gets messed up.