encrypt steam accounts

Author: chescos

.env.example

@@ -2,6 +2,8 @@ NODE_ENV=development
 WEB_PORT=3000
 SOCKET_PORT=8080
 
+APP_KEY=
+
 DATABASE_URL=postgres://app:secret@localhost:5432/app
 DATABASE_DEBUG=true
 DATABASE_SSL=false

.gitignore

@@ -52,3 +52,5 @@ jspm_packages
 
 # Yarn Integrity file
 .yarn-integrity
+
+tmp/

config/default.js

@@ -5,6 +5,7 @@ const { env } = process;
 
 module.exports = {
   env: env.NODE_ENV || 'development',
+  appKey: env.APP_KEY,
   webPort: env.WEB_PORT || 3000,
   socketPort: env.SOCKET_PORT || 8080,
 
@@ -22,5 +23,12 @@ module.exports = {
 
   steam: {
     apiKey: env.STEAM_API_KEY,
+    accounts: [
+      {
+        username: 'chesc0s42',
+        password: '2ad4faa6fcff3674c2775a244d78ed6c:725afb94b0f9bb95114b81bc',
+        sharedSecret: '14a5daf4e431ac30b61b3414aa06127c:69cbb6c0535619cd57100ba1cfff4da462e8e19e1a5eda78ee15c829',
+      },
+    ],
   },
 };

modules/Encryption.js

@@ -0,0 +1,30 @@
+const crypto = require('crypto');
+const config = require('config');
+
+const key = config.get('appKey');
+const algorithm = 'aes-256-ctr';
+const ivLength = 16;
+
+class Encryption {
+  static encrypt(text) {
+    const iv = crypto.randomBytes(ivLength);
+    const cipher = crypto.createCipheriv(algorithm, Buffer.from(key), iv);
+    let encrypted = cipher.update(text);
+    encrypted = Buffer.concat([encrypted, cipher.final()]);
+
+    return `${iv.toString('hex')}:${encrypted.toString('hex')}`;
+  }
+
+  static decrypt(text) {
+    const textParts = text.split(':');
+    const iv = Buffer.from(textParts.shift(), 'hex');
+    const encryptedText = Buffer.from(textParts.join(':'), 'hex');
+    const decipher = crypto.createDecipheriv(algorithm, Buffer.from(key), iv);
+    let decrypted = decipher.update(encryptedText);
+    decrypted = Buffer.concat([decrypted, decipher.final()]);
+
+    return decrypted.toString();
+  }
+}
+
+module.exports = Encryption;

modules/Inspector.js

@@ -1,16 +1,25 @@
+const config = require('config');
 const SteamUser = require('steam-user');
 const GlobalOffensive = require('globaloffensive');
 const SteamTotp = require('steam-totp');
 const _ = require('lodash');
 const logger = require('./Logger');
+const Encryption = require('./Encryption');
 
-// TODO: Add this to a config or to a database and encrypt it.
-const accounts = [];
+const accounts = config.get('steam.accounts').map((account) => ({
+  username: account.username,
+  password: Encryption.decrypt(account.password),
+  sharedSecret: Encryption.decrypt(account.sharedSecret),
+}));
 
 const clients = [];
 
 accounts.forEach((account) => {
-  const client = new SteamUser();
+  const client = new SteamUser({
+    // This is necessary for `ownsApp` to work.
+    enablePicsCache: true,
+  });
+
   const csgo = new GlobalOffensive(client);
 
   client.logOn({
@@ -25,6 +34,23 @@ accounts.forEach((account) => {
     client.gamesPlayed(730, true);
   });
 
+  client.on('appOwnershipCached', () => {
+    // If the account does not own CS:GO yet, claim the free license first.
+    // This is necessary to connect to the game coordinator via `gamesPlayed`,
+    // and `gamesPlayed` is necessary to inspect skins.
+    if (!client.ownsApp(730)) {
+      client.requestFreeLicense(730, (err) => {
+        if (err) {
+          logger.warn('Failed to acquire lisence for CS:GO');
+          logger.error(err);
+        } else {
+          logger.info('Successfully acquired license for CS:GO');
+          client.gamesPlayed(730, true);
+        }
+      });
+    }
+  });
+
   client.on('error', (e) => {
     // Some error occurred during logon
     logger.error('Client error');

package-lock.json

@@ -15,6 +15,7 @@
     "colors": "^1.4.0",
     "commander": "^5.1.0",
     "config": "^3.3.1",
+    "crypto": "^1.0.1",
     "dotenv": "^8.2.0",
     "express": "^4.17.1",
     "express-validator": "^6.6.0",