Showing Posts For MentalFS.2589:
I just took my Mini Queen Jennas on a ride to Lion’s Arch and put them back in the bank, but it’s still showing count = 1 (I’ve waited about 15 minutes).
Gearchecks come to mind. It might be worth a discussion to either include the equipment regardless of the inventories permission (but some people might not want to reveal that, only their names and race/profession) or make an additional permission only for equipment (although we don’t want permission creep with seventy thousand checkboxes on the API key page).
I’m interested to know if you’ve got any non-mini items doing this. My hunch is that it was just some debris from the patch which moved minis from collections into the wardrobe.
I couldn’t find any other items with that problem. Actually I did remove the minis from the old materials section and place them in the bank yesterday, maybe it’s one of those problems that would autofix when I take the items on a ride to another map? I’ll try that later.
What does this ‘in-game rank permission that grants API access’ mean?
I think it’s a permission in the rank system (like guild vault access) that grants the member access to guild information with the API, not the other way around and definately nothing for public access. At least that’s how I understood it.
I’ve noticed that I get wrong counts with some items. At least minis seem to always get count 1, regardless of how many I have stacked.
Out-of-game guild chat is definitely something I want to have, but we haven’t really settled on a protocol for it yet. XMPP, IRC and “something custom with HTTP+SSE” have all been tossed around as potentials but it’s not immediately clear which is most advantageous to implement. As far as interoperability with existing clients, IRC’s probably the winner (though it’s a horrible mess of a protocol).
Go with your own protocol. People are doing chatrooms with Node.js and socket.io ever since it released. WebSockets is a nice TCP/IP wrapper and is supported on all major browsers.
Agreed. IIRC/XMPP are dead. And agree on websockets as well. Clients will pop up everywhere if this api is realized.
I wouldn’t say they’re dead, but I also don’t think they should be forcefully used as a gateway. Most services that offer IRC or XMPP access do that because they use those as their underlying backbone. Twitch and Facebook/Google Talk comes to mind here. But with Facebook/Google you can also see where this leads: Their services moved away from the old backends and they had to build gateways for backward compability. Facebook already ditched that and Google lets the gateway rot until everyone is glad when they pull the plug.
Assuming Guild Wars 2 is not using an XMPP or IRC server internally, it would start out as a gateway, with all the horrible choices about how to represent things in that protocoll. And while one could hope that lots of clients would work out of the box, a lot will have their problems because of some tiny unwritten or hard to find rules between all those RFC, XEP and stuff that’s always copied from other clients implementations.
Ironically, the first thing to do would be to implement a proper API first and then create a gateway around it. So the best choice would be to omit the gateway building part, make an own API with whatever technology that’s preferred and let the community do the rest. If there’s demand, there will be lots of things popping up: libpurple plugins, plugins for other multi chat clients, Jabber transports, IRC gateways/bitlbee plugins and of cause clients that directly use the API.
Is there a way to find out if an item is soulbound? I can see “SoulBindOnUse” when I query the items endpoint, but not if the item was already used or not. I’m also not sure if there’s something like “AccountBindOnUse”, but the same would apply there.
(edited by MentalFS.2589)
Impossible to complete LA Exterminator achievo solo as an engineer since the karka rifle is lost when entering water
I found out that it works when you unequip all kits, also under water.
Would it not be possible to make application developers register a specific key for each app? That would at least avoid some of the security implications of ‘shared’ api keys, and would also give ANet a better way of getting in touch with app developers.
[Basically a description of how OAuth works without the automation]
I don’t think it would be a good idea to try and reinvent OAuth just to be different. It should either be simple or OAuth. The devs also already said that they won’t be doing that when people asked for links to create a key with specific permissions.
This. It is still a hack on top of a hack for a still persistent security issue but this is something that i could work with.
Yo dawg, I heard you like hacks…
Edit: tokeninfo is now active, with name and permissions.
(edited by MentalFS.2589)
Exposing the name was brought up in the github pull request linked by smiley, so the credit goes there.
I do think this would make an easy and pretty safe solution to request, for example, your domain name to be part of the API key name. Still not very user friendly though, but that ship sailed with the introduction of API keys altogether.
I think there was an additional field beyond name that was removed to reduce clutter. The creation date could be useful too, if you really want to ensure that it’s a fresh key.
(edited by MentalFS.2589)
Thanks, I remembered someone mentioning it but it didn’t get the attention that it deserved.
With the introduction of OAuth, many places like TS3 servers or forums used it for authentication, especially WvW-based ones. It was all fine and good until OAuth got replaced for security reasons. Lots of those places did what seems the right thing: Replacing the OAuth flow with prompting the user to enter an API key.
The thing is: While you had to register your OAuth app and tokens where only usable by that app, API keys are reusable. As the API is expanded, a lot of more or less useful apps are seeing the day of light. Users enter their API keys. And those keys can be used everywhere.
So imagine you want to spy on rival WvW world’s forums. You create an app, let’s say one that creates a banner for forum signatures. People use it, enter API keys and voilĂ – tons of reusable API keys from all servers are in your database. You can go sniffing in those forums and even post under a false name.
I’m just leaving this here as a starting point for a discussion, but to me this means that an API key is no proof that the account assiociated with it is actually the user’s account and should not be used as such, especially if it could lead to blocking or even reporting an account based on actions on that platform.
I wonder if they will rename “Backpack Regenerator”, else it would serve as a last hint of the horrors we had to go through.
race:
0 = Asura
1 = Charr
2 = Human
3 = Norn
4 = Sylvari
No new race alphabetically placed before Sylvari confirmed. Conveniently, there are races whose name starts with letters like T…
By the way, I want the same thing with a parrot that sits on my shoulder.
My bad, the hide backpack flag is supposed to quiet him but doesn’t yet. That’s an update coming in a future patch
Noooooooooooo I bought it after I read that it also talks while hidden
I’m very thankful for the new API. Since the values are already cached, could it be possible to enable the all keyword for the prices API? That would be extra sprinkles on top.
I just started chapter 8 before the patch. Since some steps were moved to chapter 7, am I going to skip them?
I just saw a screenshot of an engineer wearing magitech armor and the grenadier backpack. My wallet closed so quickly, I nearly broke a finger.
Anyway I don’t know why it’s more important to see what weapon we are wearing as opposed to dagger vs. sword on other classes, but if so, my suggestion is to just make the actual weapons bigger (and more awesome and steampunky) and get rid of those backpacks.
I’d really like something to catch up on missed living story chapters (or relive them). For example watch the cinematics. Maybe something to cover the stuff that were outside cinematics.
You know, like buying a dvd box of season 1.
I think they added a skill trainer, which wasn’t there until the airship came out, but didn’t add a daily activity NPC. So they probably never will.
I also read here that the gate to Lion’s Arch is bugged, meaning it actually sends you to Lion’s Arch instead of Gendarran Fields.
So as a personal biased wrapup:
Royal Terrace
- Has a shorter/easier way from crafting stations to Black Lion trader
- Looks nicer
Havoc’s Heir airship
- Has daily activity NPC
- Doesn’t look that well on the inside but has a beautiful view/outlook
As my character is a human with noble background, it would be appropiate to “return home” to do crafting and trading. I’m still not sure though. But I doubt they’ll put the airship on sale tomorrow or the day after.
(edited by MentalFS.2589)