simple question about the IPC API

[douglasb78]

Is there a way to list all accounts saved within ArchiSteamFarm so I can loop through them?
(so I can grab the password of each one to interact with Steam) (I'm being cautious about rate limiting.)

• /Api/ASF/ only returns settings related to the card idler and some ASF options.

• /Api/Bot/{Botnames} provides useful information about each account, such as the account name for login, but doesn't return the password that's saved within the config files.

The reason I want to use the IPC API is that I want to keep account names, passwords, all in ASF and generate 2FA tokens using it instead of storing them in plain text and reinvent the wheel.

[JustArchi]

You won't be able to grab password from ASF as it's considered sensitive detail. /Api/Bot/ASF can give you info about registered bots, but you won't find password to them there.

[douglasb78]

hmm I see. It's meant to protect users who put ASF behind a reverse proxy. Exactly what I thought so.
I'll either store them within my application and hash them using a master password that's asked on startup or access the JSON files in the ASF folder. Thanks for the help! :P

[JustArchi]

That among other things. You can still use ASF for generating 2FA tokens and remaining automation (e.g. categorizing bots by nicknames, which are provided in the response), but at the very least you need a dedicated map of sensitive details if you intend to do a full login procedure.

ASF intentionally doesn't expose that detail. It's still possible through malicious intent to e.g. loot the bot, changing master in the process, but without direct access to the account.