Guild Wars 2

It’s actually useful for me to have beta characters shown.

Will the build permission unlock equipment on /v2/characters? i.e. equipment would be shown if the key has “build” or “inventories”?

This would be very useful to me as I only need that part and some people don’t like to give the full inventory permission for just that.

I’m seeing the same for most people trying to use my app. My own key works, but nobody elses is.

Name: Dissentient
Tag: DIS
Game Mode: Predominantly WvW; Some PvP; A little PvE (most likely we will be doing more PvE after HoT release)
Home World: Tarnished Coast (NA)
Times: WvW events Monday 8:00 PM EST, Wednesday 8:00 PM EST, Friday 9:00 PM EST (reset), Saturday 11:00 PM EST. PvP Tuesday and Thursday from around 7-8 PM EST. Guild Missions Sundays 8:00 PM EST.
Contact Info: Nabrok.9023 http://www.dissentient.info/

We are a part of the “Cross Guild Initiative”, a collaborative effort between multiple small to mid sized guilds on Tarnished Coast to work together and improve in the WvW game mode.

Wait … that’s active? Did I miss an announcement?

Lawton Campbell.8517:

stress level zero.4907:

Alright no problem.

Any chance of a post being made of your current api road map for the next few months?

We’re mostly using the api-cdi github repo (specifically, the issues for bugs and pull requests for proposed features). I typically tag things with “ready”, “in progress”, “needs deploy” etc to indicate what roughly is being worked on; these can be viewed on a kanban board with waffle.io.

The APIs nearest to ready (aside from /v2/traits, which is currently in beta) are probably the account skin/dye unlocks (which I haven’t drafted a PR for yet — I’m terrible). We’re a bit snagged internally due to a reworking of how scopes work.

In a previous post you mentioned the WvW endpoints might get an upgrade soon, is that still the case?

Lawton Campbell.8517:

I’m not sure why, but for a lot of items there appear to be duplicate item definitions? They appear to be effectively the same but have a different id. No idea why they exist, but players probably have them (since they pop up in my whitelist) so I normally push ’em through.

As a good example: the 1-year and 2-year level 20 birthday scrolls. They’re effectively the same item, but they don’t stack because they have a different id. >_<

There’s another type of scroll that looks identical but doesn’t stack, so I’ve got three stacks of these things in my bank.

A more paranoid person would say it’s a conspiracy to sell bank space!

I noticed that on the security section of the new account page it lists the IP address of every recent API query using one of your keys, along side your game client connections.

There’s a “disconnect” link next to each one. What will that link do for API related IPs?

chaly.7638:

Oh dear…

after some strange issues with the API I did some tests:
- Checked my account and choose an API key
- Called https://api.guildwars2.com/v2/tokeninfo?access_token=<my new API key>
- Got response: {"text":“invalid key”}
- Checked my API key list
- Key deleted
You can reproduce this problem any time.

What should I say.. ermm.. P LS H E L P this is urgent!

Even deactivating the whole API system would help as we are deleting the API keys with our calls..

The “deleted” keys seem to re-appear after some time.

Tsin Tsun Than.6352:

Same problem here, unable to create a new key.

Also, my previous key to http://mygw2.wvwintel.com/ is now missing from my account’s keys.

Seeing the same thing with missing keys, errors, and unable to create a new key.

Lawton Campbell.8517:

Am working on /v2/wvw/objectives right now, though due to the release process the earliest it can be deployed is the patch after next.

Will that include co-ordinates and a last flipped timestamp?

Lawton Campbell.8517:

Should be working again.

The fix to prevent this from happening again should go out with the next release (for real this time maybe).

It’s all right … when I get this error I just put up a message in big red letters saying that it’s broken and it’s all anets fault.

Thanks for getting it fixed!

werdernator.6105:

seems to be the case again.
https://api.guildwars2.com/v2/account returns

{
“text”: “ErrBadData”
}

Yup, ever since the hotfix yesterday.

Lawton Campbell.8517:

smiley.1438:

No, the API can’t do that yet.

Just to note — real-time fine-grain access to character position is never going to be something we can provide. The closest we’d be able to get is which map they’re currently on, not where on the map they currently are.

Speaking of which, it would be very useful to me to have the following information with a low TTL (a minute or less)

• Online status (online/away/offline)
• Character most recently logged in (i.e. if status is online, this is the character they are on now)
• Current map
• Amount of supply carried

Natir.7364:

Are there any plans to have these things be automated where its just mined from the player’s data automatically and they don’t have to get an API key?

Kind of further explanation from my post above but one of the things we do for our WvW is we run the same builds and gear setup for each class to make sure we maximize what we are doing. Sometimes when people keep dying, we figure out they are not running the same gear/build setup but we don’t know and thus cannot help them and show them what they may be doing wrong. It would be so much easier to just look at who is in our guild or just look up their info via their ID and check out their info to see what they are running.

You can do this as of yesterday, but each of your guild members needs to “opt-in” by providing an API key.

Julian.2971:

As a reward for reaching lvl 10 you got a key, so create a new char, spend 9 tomes, get a key, delete char, profit

It’s not reaching level 10, it’s reaching level 10 and then doing the personal story.

The simple solution is for everybody to be good at every class!

Problem solved! You’re welcome.

I’ve never once seen anybody give a crap about how many points somebody else has. Everybody knows they don’t mean anything.

Tman.6349:

Exactly. It never was 4. It was 2. They raised it to 4. Going from 2 to 4 is the opposite of what we’ve asked for for a long time now, and that is zero. Remove the profession dailies and replace with something that doesn’t drastically alter matchups. I thought my short quip was simple enough for anyone who’s seen one of the couple dozen past threads about this. Apologies for being vague, though.

What? It’s not 4 now. It’s still 2. You have 4 options. You can win as either an engineer or elementalist for one win, or you can win as either a ranger or thief for the second win.

You do not have to win as an engineer, an elementalist, a ranger, AND a thief.

To OP: There are no randomized dailies at all in the game. There are some different sets if your account hasn’t reached certain milestones (mostly related to your highest character level), but nothing is random.

Adding a per-player randomized daily would likely be a major undertaking.

Anyway, my own suggestion would be make it earn 1,000 points on [class] instead of having to win. That way, if you win, it’s still done in one match. If you don’t win you can still have it done in 2.

Zodian.6597:

Inculpatus cedo.9234:

Perhaps, this would be better suited in the API sub-forum, where those Devs concerned with this subject read and post more often.

Good luck.

I think this post extends the boundaries of that sub-forum. The api subforum is pretty stagnant anyways.

It’s low-traffic. It is not stagnant. There’s a big difference. Devs read the API forums all the time, just look at the shear number of red posts in there.

My questions there are usually answered very promptly.

Malediktus.9250:

DDCarvalho.2071:

That would be very nice, and would sinergize very well with some already existing spreadsheets to track achievements, like this one

http://www.reddit.com/r/Guildwars2/comments/34z4h7/soi_created_an_enormous_achievement_spreadsheet/

If someone combines this sheet, the API data and some human expertise about the easier/hardest APs to gain, this can be a great way to gain a little AP every day.

Maybe it would also be possible to make a website where people could voluntarily upload their achievement and wardrobe data for other people to inspect. This is also something I always wanted to make or see such a site happen because people ask me all the time for details about my achievements or wardrobe (trust me, being top 10 ranked it happens quite a lot).

I get that sometimes even at my lowly 250(ish) spot.

I miss being able to see how much AP I have in each category like you could in the old interface.

AfterXII.2761:

Slightly unrelated question, do we know the max character limit on API Keys? (Building a database for accounts and need to know for optimizations)

It’s two GUIDs back-to-back, so char(72) will cover it.

You could get fancy and store it in binary if you really want to. I think this would only require 32 bytes, but you have to write code to handle transferring it back and forth.

Pilot.6094:

I noticed that the authenticated account api returns guild ids for not-only guilds the user is a member of, but also guilds that they have been invited to and not accepted. Is this behavior by design? If so is there any chance of getting an additional property to indicate this status?

Note that the leaderboards also include guilds that you are invited to but have not accepted yet when you filter by guild.

Any guild member can see the roster in-game, therefore any guild members API key should be able to fetch the roster.

The rule of thumb is, if you can see it in the game you should be able to see it on the API.

One thing you are missing is online status, i.e. online/offline, representing/not representing, away/not away.

I don’t suppose it would be possible to put up a temporary oauth2 endpoint that would allow us to get api keys for everybody we have a token for?

It would just make it a bit easier on my 830+ users …

For story mode you can tell if you’ve done it.

If you’re just interested in the achievement, check if you have the PvP track for the dungeon available and that it has no timer. If you do, you’ve done story mode. Note that if you don’t have it you may still have done it, just before the PvP reward track patch.

Per character you can tell simply by visiting the dungeon entrance and seeing if you have an explorable mode option or not.

Unfortunately there’s no way to tell which explorable paths you have or have not done.

Yes, I was in the stress test and I received a portal.

Wrong forum. Unfortunately General Discussion is probably the closest one to what you want.

The conversation OP is talking about happened before the Guild Halls CDI.

The idea was, we get rid of the current worlds. You form alliances with other guilds, and then new worlds are created by combining alliances together to form worlds which all have roughly the same population. If an alliance is large enough to form a world all by itself, or at least the majority of it, that world could be named after the alliance.

We would play in those worlds for several weeks in a pre-season using ELO rankings, which are then used to seed the season. When the season is completed we would reset and our alliances be assigned new worlds.

There are a few things that would need to be worked out with this …

• How do you handle people who are in multiple guilds?
• How about people not in a guild at all?
• How is the active member count of an alliance determined for population balance purposes?

I don’t think those are insurmountable problems though, and I think in general it’s a good idea.

Nothing in that link answers this question …

If you were in the previous beta do you still need to find this item?

Remfin.4892:

I’m not looking to change anyone’s mind (I understand exactly the phishing concern), but API keys don’t do anything remotely like “auth”; they do nothing to let you verify a user on a repeat visit.

Now I need to be Yet Another Website With A Username And Password (And I Need To Store Them Securely, Oh And It Needs To Be Able To Send Emails Too)

First time visit is no longer a hybrid sign-in/sign-up link, but “no entry allowed; create and verify an account before preceding.”

Like I said, not trying to change your mind, but that is why I asked the questions about auth, and that’s why the new thing won’t substitute for that.

Yes, this occurred to me also. Isn’t the main source of compromised accounts from people using the same credentials on 3rd party sites such as forums?

Even if I do store the passwords securely (which I will of course), I am not going to be purchasing an SSL certificate.

When will API keys become active?

When will OAuth2 become inactive?

Will there be an overlap for a transitional period? (please don’t shut off OAuth2 before API keys are ready)

Will /v2/account still return the same information, but with the API key added as a parameter instead of using OAuth2?

Is there anything preventing somebody sharing a key and allowing people not them to use it?

kyubiko.8014:

Additionally, if they mass-whisper as I suspect, then it is my theory that one could adjust the spam filter you already have on Map chat to catch too-frequent whispered messages. For instance, five in the span of one second. I doubt any legitimate player would be hindered by this particular filter.

There are some legitimate reasons for mass whispering. For example I’ll whisper every guild member who is not repping just before Guild Missions start. It’s probably not 5/second, but it’s pretty fast.

Lawton Campbell.8517:

Nabrok.9023:

Lawton Campbell.8517:

keneanung.3071:

Since the “Applications” tab is now visible in the account settings, is the OAuth implementation now considered “stable” or are we still in “beta”?

Beta. We may actually be transitioning away from OAuth2 to an API key style system; I’ll keep you updated as we figure out stuff :|

OAuth2 is working well for me.

If you transition, does that mean the 500+ people who have signed in through my app so far will have to re-authorize through some other method? Preferably you could continue to support both methods?

We haven’t figured out a timeline or migration strategy for existing applications yet, but it’s definitely possible that all your users will have to re-authorize. I know this is a big deal and a massive pain, and for that I apologize. I’ll keep you updated on our current status.

My main concern is that it will be a more complicated process than go to my website → they click login → login on gw2 website → redirect back to my website. It’s actually very simple for users to do and all I’ve had to do is allay a few fears about security.

If, for example, they have to find an API code and enter it somewhere on my site, I can see that that will cause problems for some people.

As things have seemed pretty stable the past 2.5 weeks, I have been trying to push for getting more of my registered users “linked”. Currently it’s at about 25%. If things are going to change I’ll hold off on that, but please know that I’m very happy with the way things are working now.

I do have offline scope in my tokens for my users, so if migration is necessary hopefully I could use that in a transitional period without having those users take additional steps themselves?

Lawton Campbell.8517:

keneanung.3071:

Since the “Applications” tab is now visible in the account settings, is the OAuth implementation now considered “stable” or are we still in “beta”?

Beta. We may actually be transitioning away from OAuth2 to an API key style system; I’ll keep you updated as we figure out stuff :|

OAuth2 is working well for me.

If you transition, does that mean the 500+ people who have signed in through my app so far will have to re-authorize through some other method? Preferably you could continue to support both methods?

MarkPhilips.5169:

- no blue/green stuff

It amuses me that some PvP players seem to think there’s some mysterious use for blues and greens in PvE. There isn’t.

Salvaging for luck is the only use for most of it, and luck is as useful to PvP players as it is to PvE players.

If you don’t care about the luck, just sell it either on TP if it’s light armor and actually worth something or to a vendor if it’s not. Just like PvE players do.

werdernator.6105:

Also: what would the response look like if i try to get an access-token with a refresh-token when the account-owner removed that application from his list?

The response should have error set to “invalid_grant”.

Lawton Campbell.8517:

Nabrok.9023:

While we’re talking about timers … how about the time of the next score tick?

Yeah, that’d be really useful too.

I really need to sit down and draft an initial proposal for the /v2/wvw endpoints.

Nabrok.9023:

That would be great, but I agree that the authenticated endpoints are more important. I unleashed my app on the world today and it seems to have been well received. If you happen to play on TC you’ll see it in action if you use the server voice comms.

That is awesome. Are you guys using Mumble or TS?

Mumble. We have a bot that sends a text message when an unregistered user logs in with a link to a website. When they click the link it checks a couple things like their username is formatted correctly and gives a landing page with a brief description.

They click a button there to authenticate, and if they’re on TC the mumble bot is sent a signal and register the person.

Unfortunately, at the moment the bot host is having some connectivity issues with the mumble server. Typical … the bots been running for months (it does other stuff as well) with no problems.

Lawton Campbell.8517:

Nabrok.9023:

Bloodlust doesn’t appear to be a part of the new map? So I guess that part would not be useful anymore … at least until we see how you plan on reusing alpine.

You know as much as I do at this point, I’ve read on reddit there’ll be some kind of rotation? So it makes sense to ensure that the format works for both the new and old maps.

Hah, that’s kind of funny. I think the most recent info is that it will replace alpine completely with alpine coming back for tournaments in some capacity.

The new map has some kind of timed event thing; it’d be really nice to include the timer in the response as well so the countdown could be displayed.

While we’re talking about timers … how about the time of the next score tick?

I want the objective coordinates to one day be in the API. I really want to gut how the WvW endpoints work and make the /v2/wvw endpoints much more usable, but the authenticated endpoints are currently eating up all my time.

That would be great, but I agree that the authenticated endpoints are more important. I unleashed my app on the world today and it seems to have been well received. If you happen to play on TC you’ll see it in action if you use the server voice comms.

Looking forward to the guild list being added, there’s some cool stuff I could do with that.

Bloodlust doesn’t appear to be a part of the new map? So I guess that part would not be useful anymore … at least until we see how you plan on reusing alpine.

Honestly, I’m not looking forward to grabbing the icons (I still haven’t updated mine from the old blue color) and figuring out co-ordinates for all the objectives again. Any chance that stuff could at least be documented, if not part of the API itself?

Although I have been considering dropping the actual map and going for a more abstract display that clearly shows supply lines.

Oh … as sentries are gonna get a buff and become more important, any chance those could be added to the API?

Watashi.7208:

Hammer stinks as a weapon…why weren’t we giving a choice of weapons…also I hate being chained…to much of that

Did you look in your inventory? We were also given a mace and axe.

Lawton Campbell.8517:

Nabrok.9023:

Looks like the same issue I am having, which was already reported here … https://github.com/arenanet/api-cdi/issues/19

Hopefully there is a fix today (it didn’t take them long the last time a similar issue came up).

Should be fixed now

Thanks! I noticed that the account scope now includes “list of guilds” in the description. Is that something currently available?

Eastborn.6089:

I am trying to request data from the /v2/account endpoint but when i authorize myself it still gives me the following response, anyone knows what i am doing wrong?

from: http://159.253.7.156/GW2/

Show Spoiler

hide spoiler

Request URL
https://api.guildwars2.com/v2/account?access_token=5EC19845-F2B0-4CE3-BBC6-CEEB45D36471&callback=_hellojs_5e9umrjo 

General
Remote Address:64.25.47.16:443
Request URL:https://api.guildwars2.com/v2/account?access_token=AD0C7E66-5544-4756-B6DF-9A8E05C7C11B&callback=_hellojs_bcrvai9
Request Method:GET
Status Code:400 Bad Request

Response Headers
view source
Access-Control-Allow-Origin:*
Content-Length:21
Content-Type:application/json; charset=utf-8
Date:Mon, 23 Mar 2015 13:06:11 GMT
Server:Microsoft-IIS/7.5
X-Content-Type-Options:nosniff

Request Headers
view source
Accept:*/*
Accept-Encoding:gzip, deflate, sdch
Accept-Language:en-US,en;q=0.8,nl;q=0.6
Cache-Control:no-cache
Connection:keep-alive
Cookie:_ga=GA1.2.15426245.1425416427; s=7F2F3BB0-27F2-407E-8644-6219444E1E42; __utmt_UA-18978290-1=1; __utma=159804514.15426245.1425416427.1427113213.1427115017.7; __utmb=159804514.16.10.1427115017; __utmc=159804514; __utmz=159804514.1427115017.7.6.utmcsr=159.253.7.156|utmccn=(referral)|utmcmd=referral|utmcct=/GW2/
DNT:1
Host:api.guildwars2.com
Pragma:no-cache
Referer:http://159.253.7.156/GW2/
User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36

Query String Parameters
view source
view URL encoded
access_token:AD0C7E66-5544-4756-B6DF-9A8E05C7C11B
callback:_hellojs_bcrvai9

ps: sorry for my bad English and programming skills, im still new to those things

Looks like the same issue I am having, which was already reported here … https://github.com/arenanet/api-cdi/issues/19

Hopefully there is a fix today (it didn’t take them long the last time a similar issue came up).

When I make requests on /v2/account I’m getting the {"text":"ErrBadData"} response again.

This is happening if I use my own client_id or the gw2_api_demo one.

EnemyCrusher.7324:

Sytherek.7689:

Lawton Campbell.8517:

It’s definitely something I’m working on. If you’re technically-minded, there’s a pull request on Github that details our plans for the initial release of an API endpoint that will allow the creation of sites that can access your character data.

What about privacy?

Will I be able to set a per-character flag saying I don’t want my character exposed by the API?

Why? If my understanding is correct, only you will be able to see your characters anyway.

You would give your permission to a website or app that would then allow it to pull the character data. After you have done that, it may just present it back to you, but it could also store it and make it publicly available. If you also give it the offline permission it will even be able to keep its records up to date.

You will be able to revoke permissions at any time, of course.

Just hit the reset to default button …

Wrong forum. Try under general discussion.

Pat Cavit.9234:

Nabrok.9023:

Any news on this yet?

Got held up waiting for some translations and ironing out some issues. Those went in yesterday so barring any other excitement hopefully will be shipped next week. Ended up being more work than we anticipated to bang it into shape.

Great, thanks for the update!

Pat Cavit.9234:

We’re hoping to get the UI for registering & managing applications ready by next week. Sorry about that, there just wasn’t time to get it to where we’re happy with it and we wanted to get the authenticated API endpoint active sooner rather than later.

Any news on this yet?