Skip to content

10.7.0 | Endpoints, Security, Fixes

Latest
Latest

Choose a tag to compare

View all tags
@RiisDev RiisDev released this 24 Sep 12:46
· 2 commits to main since this release
10.7.0
68de118

Full Changelog: 10.6.1...10.7.0

New Endpoints

New endpoint categories, based on the community docs at valdocs.prometheuz.me, thanks @PrometheuzzZ for maintaining that:

  • Premier - player/roster info, seasons, conferences, roster customization
  • Esports - upcoming matches, match results
  • Mailbox - mailbox, mail, delete mail
  • Goldstars - goldstar/commendation data
  • Activities - activity lookup, shared join links

Also filled in gaps in existing endpoint groups:

  • Party: StartSoloExperienceAsync, DisablePartyCodeAsync, GeneratePartyCodeAsync, JoinPartyByCodeAsync
  • Store: FetchAllOwnedItemsAsync, CreateOrderAsync, FetchOrderAsync, gift eligibility checks, FetchAgentStorefrontAsync
  • Contract: ActivateContractAsync
  • PVP: player interventions, report tokens, avoid list, match replay info
  • Chat: party/pregame/current-game chat info lookups

Bug Fixes

  • GetCurrentGameLoadoutsAsync was hitting the exact same URL as GetCurrentGameMatchAsync, now correctly hits .../loadouts
  • DeclinePartyAsync was silently POSTing to the same endpoint as RequestPartyAsync, missing a required requestId entirely, fixed
  • Fixed a couple of Riot TOS compliance issues and driver-auth edge cases

Security

Fixed a real vulnerability - our HTTP clients disabled TLS certificate validation for every remote call, not just the local Riot Client's self-signed loopback connection. Remote calls (auth.riotgames.com, pd./glz. hosts, etc.) are now fully validated end-to-end; only genuine loopback connections still skip chain checks, since the local client's cert is legitimately self-signed and always will be.

Cleaned up client/disposal handling while in there: ValorantNet is now IDisposable, AuthUtil.BuildClient() is the single place client settings live, and auth no longer leaks its HttpClient/handler on failure paths.

Data Tables

  • Added an Accolade enum + AccoladeIdToAccolade dictionary for goldstars/commendations
  • Added missing maps (Summit/Plummet, Gauntlet, the 5 Skirmish duel maps) and the Warden weapon
  • Fixed Bandit's weapon ID being stored uppercase - silently never matched real (lowercase) data
  • Fixed the "Free Agents" currency, which Riot renamed to "Agent Tokens"

Docs

Full pass over the C# docs site - fixed a bunch of stale/broken code samples, documented everything above, cleaned up data.

Contributors

PrometheuzzZ
Assets 3
Loading