Skip to content

Instantly share code, notes, and snippets.

View borzaka's full-sized avatar

Attila borzaka

8 followers · 0 following
  • Budapest, HUNGARY
View GitHub Profile
@Whats-A-MattR
Whats-A-MattR / readme.md
Last active November 5, 2025 11:04
Steam Authentication in Better-Auth

Steam Authetication in Better-Auth

Adapted by Better-Auth in a PR

Better-Auth currently does not have a Steam provider. If you've used Steam authentication before, you may understand why. It doesn't exactly comply with OAuth or OIDC standards. For example

  • Steam Authentiation does not respect state.
  • Steam does not require a Client ID or Client Secret, or even require an Application registration with redirect whitelisting.
  • Steam does not have an OIDC endpoint, you must use your own API Key to make requests to the ISteamUser/GetPlayerSummaries/v002/ api once recieving the callback from steam.
  • Steam does not return an email address, as we retrieve the user profile from a 'public' endpoint - as to say we only have access to what would otherwise be visible from the users steamcommunity/profile page.