Getting 'Invalid POST response from OpenID provider' error

[nikitosoz8]

Hi,

When I do steam.authenticate(req) (provided that req.query has a data returned from steam), I get an error "Invalid POST response from OpenID provider". Could not find anything that might caused the issue and how to resolve it.

[LeeviHalme]

Hi!

Could you please provide more details to this issue:

• Are you sure you are passing the whole response to the authenticate() function? Could you maybe give a code sample of your implementation of the callback route?
• Are there any conflicting dependencies? Could you provide a list of dependencies from your package.json?

I have tested with the latest version of the package (v.1.2.4) and couldn't reproduce this issue.

[nikitosoz8]

Hi!

Could you please provide more details to this issue:

• Are you sure you are passing the whole response to the authenticate() function? Could you maybe give a code sample of your implementation of the callback route?
• Are there any conflicting dependencies? Could you provide a list of dependencies from your package.json?

I have tested with the latest version of the package (v.1.2.4) and couldn't reproduce this issue.

Hi,

Route file:

const SteamAuth = require('node-steam-openid');

const steam = new SteamAuth({
realm: 'https://redacted.com',
returnUrl: 'https://redacted.com/auth/service/steam/fallback',
apiKey: ${process.env.STEAM_API_KEY}
})

router.post('/sessions/iframe/service/steam/verify', async (req, res) => {
try {
const user = await steam.authenticate(req);
} catch (err) {
console.error(err)
}

Frontend fallback page:

const verifyFaceitAuth = async () => {
try {
const queryString = searchParams.toString()
const response = await fetch(${envAPI}/v1/cs2/auth/setup/sessions/iframe/service/steam/verify?${queryString}, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
},
body: JSON.stringify({ id: request_id })
})

const verifySteamAuth = async () => {
try {
const queryString = searchParams.toString()
const response = await fetch(${envAPI}/v1/cs2/auth/setup/sessions/iframe/service/steam/verify?${queryString}, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
},
body: JSON.stringify({ id: request_id })
})

And I always get an error.

package.json:
"dependencies": {
"axios": "^1.7.7",
"body-parser": "^1.20.3",
"crypto": "^1.0.1",
"express": "^4.21.0",
"express-rate-limit": "^7.4.0",
"firebase-admin": "^12.4.0",
"form-data": "^4.0.1",
"fs": "^0.0.1-security",
"jsonwebtoken": "^9.0.2",
"multer": "^1.4.5-lts.1",
"node-cron": "^3.0.3",
"node-fetch": "^3.3.2",
"node-steam-openid": "^1.2.3",
"nodemon": "^3.1.4",
"openid": "^2.0.12",
"path": "^0.12.7",
"pusher": "^5.2.0",
"querystring": "^0.2.1",
"socket.io": "^4.8.1",
"url": "^0.11.4"
}