jiriks74/dztui
1
0
Fork 0
mirror of https://github.com/aclist/dztui.git synced 2025-06-29 12:28:58 +02:00
Code Issues Wiki Activity Actions

docs: update API info

Browse source
This commit is contained in:
aclist 2024-07-14 22:24:48 +09:00
parent 87deb89b82
commit 5a45e20cbe
3 changed files with 17 additions and 11 deletions
docs/kb_sections
dzg007.adoc

14
docs/kb_sections/dzg007.adoc
View file

@ -1,17 +1,17 @@
[[DZG-007,DZG-007]]
== DZG-007: Why do I need a Steam API key? Is it safe?
== DZG-007: Why do I need a Steam Web API key? Is it safe?
Last updated: {d}
In order to provide a server browser showing a searchable list of all available servers, DZGUI utilizes the Steam API.
In order to provide a server browser showing a searchable list of all available servers, DZGUI utilizes the Steam Web API.
Actual connections and queries to individual servers are performed directly between the computer and the DayZ server.
DZGUI gets its server information directly from the most authoritative source: Steam. It does this by letting the user be solely in control of their own API key and the application in an authenticated way. Users explicitly get permission to use an API key instead of scraping DayZ server info from third-party sites.
DZGUI gets its server information directly from the most authoritative source: Steam. It does this by letting the user be solely in control of their own API key and the application in an authenticated way. Users explicitly get permission to use a Web API key instead of scraping DayZ server info from third-party sites.
Everything that happens between DZGUI and Steam takes place solely on the user's computer, and no information gets sent back to the developer. DZGUI does not scrape third party DayZ APIs without permission.
Everything that happens between DZGUI and the Steam Web API endpoint takes place solely on the user's computer, using a GET request (fetch server list), and no information gets sent back to the developer. DZGUI does not scrape third party DayZ APIs without permission.
There is some misconception that a Steam API key could be used to gain information about a user's account or control their account. Not only is this not possible, but the API key is used solely by the user on their own computer and is protected by Steam Guard.
There is some misconception that a Steam Web API key could be used to gain information about a user's account or control their account. Not only is this not possible, but the Web API key is used solely by the user on their own computer and is protected by Steam Guard.
A Steam API key is the most strict way of getting authentic, reliable, and consistent server information in a zero-trust model.
A Steam Web API key is the most strict way of getting authentic, reliable, and consistent server information in a zero-trust model.
You are responsible for the creation, storage, management, and revocation of your API key.
You are responsible for the creation, storage, management, and revocation of your Web API key.