v1.0.7 - Fix Steam Session Recovery for Web Refresh Tokens
SteamGuard Web v1.0.7
This patch fixes Steam session recovery for accounts that store a web/client refresh token instead of a mobile refresh token.
Fixed
- Steam session recovery now detects refresh token audience automatically.
- Accounts using
web/clientrefresh tokens no longer fail during automatic confirmation polling. - Backend recovery flow now selects the correct Steam platform type based on the stored token.
Impact
- Fixes repeated polling failures for some accounts after reconnect.
- Restores stable automatic confirmation sync for affected accounts.
- Live codes continue to work as before.
Notes
- This is a backend-only patch.
- No database migrations.
- No environment variable changes.
Full Changelog: v1.0.6...v1.0.7