Steam Market buy order requires additional confirmation

[a1063815047]

sessionid:
currency: 1
appid: 730
market_hash_name: M4A1-S | Solitude (Factory New)
price_total: 5500
tradefee_tax: 0
quantity: 1
first_name: sadas
last_name: dasdasd
billing_address: asdasdas
billing_address_two:
billing_country: US
billing_city: asdasd
billing_state: MT
billing_postal_code: 59601
save_my_address: 1
confirmation: 13755670579162464311

https://steamcommunity.com/market/createbuyorder/
The payload has a new parameter added: confirmation

[a1063815047]

his causes all buy orders on the market, except for cases, to require confirmation

[a1063815047]

market change
——————————————————
`def create_buy_order(self, market_name: str, price_single_item: str, quantity: int, game: GameOptions,
currency: Currency = Currency.USD) -> dict:

headers = {
    "Referer": f"{SteamUrl.COMMUNITY_URL}/market/listings/{game.app_id}/{urllib.parse.quote(market_name)}"
}

# First request to place the order
data = {
    "sessionid": self._session_id,
    "currency": currency.value,
    "appid": game.app_id,
    "market_hash_name": market_name,
    "price_total": str(Decimal(price_single_item) * Decimal(quantity)),
    "quantity": quantity,
    "confirmation": 0  # initial value is 0
}

response = self._session.post(
    SteamUrl.COMMUNITY_URL + "/market/createbuyorder/",
    data,
    headers=headers
).json()
print("First order response:", response)

# If the order is successful, return immediately
if response.get("success") == 1:
    return response

# If mobile confirmation is required
if response.get("need_confirmation"):
    if not self._steam_guard:
        raise ApiException("Order requires mobile confirmation, but steam_guard info is not provided")

    confirmation_id = response["confirmation"]["confirmation_id"]
    print("Confirmation required, ID:", confirmation_id)

    # Execute mobile confirmation
    confirmation_executor = ConfirmationExecutor(
        self._steam_guard['identity_secret'],
        self.get_steam64id_from_cookies(),
        self._session
    )
    time.sleep(random.uniform(2, 4))
    success = confirmation_executor.confirm_by_id(confirmation_id)
    if not success:
        raise ApiException("Mobile confirmation failed")

    print("✅ Mobile confirmation succeeded, resending request with confirmation ID")

    # Second request, update confirmation to the confirmed ID
    data["confirmation"] = confirmation_id
    time.sleep(random.uniform(2, 4))
    response = self._session.post(
        SteamUrl.COMMUNITY_URL + "/market/createbuyorder/",
        data,
        headers=headers
    ).json()
    print("Second order response:", response)

    if response.get("success") == 1:
        print("✅ Buy order effective")
        return response
    else:
        raise ApiException(f"Order failed after confirmation: {response}")

# Other exceptions
raise ApiException(f"Buy order failed: {response}")

`

confirmation.py add
————————————————
def confirm_by_id(self, confirmation_id: str) -> bool: """ 根据 confirmation_id 确认交易/订单 """ confirmations = self._get_confirmations() for conf in confirmations: print(f"data_confid: {conf.data_confid}, creator_id: {conf.creator_id}") if str(conf.creator_id) == str(confirmation_id): result = self._send_confirmation(conf) print(result) return result.get("success", False) return False

[a1063815047]

def confirm_by_id(self, confirmation_id: str) -> bool:
"""
Confirm a trade/order based on confirmation_id
"""
confirmations = self._get_confirmations()
for conf in confirmations:
print(f"data_confid: {conf.data_confid}, creator_id: {conf.creator_id}")
if str(conf.creator_id) == str(confirmation_id):
result = self._send_confirmation(conf)
print(result)
return result.get("success", False)
return False

[Heroslfb]

For this to work you also need to change confirmation.py more:

add in _get_confirmations :
creator_id = conf['creator_id']

and

class Confirmation:
    def __init__(self, data_confid, nonce, creator_id):
        self.data_confid = data_confid
        self.nonce = nonce
        self.creator_id = creator_id

not sure if it will affect other confirmations but seems like creating trades and selling on steam market works fine

[tadius]

And if you don't have function get_steam64id_from_cookies, add it to market.py class SteamMarket:
@login_required def get_steam64id_from_cookies(self): cookies = self._session.cookies.get_dict('steamcommunity.com') steam_id = cookies.get('steamLoginSecure').split('%7C%7C')[0] return steam_id

[Proborder]

market change —————————————————— `def create_buy_order(self, market_name: str, price_single_item: str, quantity: int, game: GameOptions, currency: Currency = Currency.USD) -> dict:

headers = {
    "Referer": f"{SteamUrl.COMMUNITY_URL}/market/listings/{game.app_id}/{urllib.parse.quote(market_name)}"
}

# First request to place the order
data = {
    "sessionid": self._session_id,
    "currency": currency.value,
    "appid": game.app_id,
    "market_hash_name": market_name,
    "price_total": str(Decimal(price_single_item) * Decimal(quantity)),
    "quantity": quantity,
    "confirmation": 0  # initial value is 0
}

response = self._session.post(
    SteamUrl.COMMUNITY_URL + "/market/createbuyorder/",
    data,
    headers=headers
).json()
print("First order response:", response)

# If the order is successful, return immediately
if response.get("success") == 1:
    return response

# If mobile confirmation is required
if response.get("need_confirmation"):
    if not self._steam_guard:
        raise ApiException("Order requires mobile confirmation, but steam_guard info is not provided")

    confirmation_id = response["confirmation"]["confirmation_id"]
    print("Confirmation required, ID:", confirmation_id)

    # Execute mobile confirmation
    confirmation_executor = ConfirmationExecutor(
        self._steam_guard['identity_secret'],
        self.get_steam64id_from_cookies(),
        self._session
    )
    time.sleep(random.uniform(2, 4))
    success = confirmation_executor.confirm_by_id(confirmation_id)
    if not success:
        raise ApiException("Mobile confirmation failed")

    print("✅ Mobile confirmation succeeded, resending request with confirmation ID")

    # Second request, update confirmation to the confirmed ID
    data["confirmation"] = confirmation_id
    time.sleep(random.uniform(2, 4))
    response = self._session.post(
        SteamUrl.COMMUNITY_URL + "/market/createbuyorder/",
        data,
        headers=headers
    ).json()
    print("Second order response:", response)

    if response.get("success") == 1:
        print("✅ Buy order effective")
        return response
    else:
        raise ApiException(f"Order failed after confirmation: {response}")

# Other exceptions
raise ApiException(f"Buy order failed: {response}")

`

confirmation.py add ———————————————— def confirm_by_id(self, confirmation_id: str) -> bool: """ 根据 confirmation_id 确认交易/订单 """ confirmations = self._get_confirmations() for conf in confirmations: print(f"data_confid: {conf.data_confid}, creator_id: {conf.creator_id}") if str(conf.creator_id) == str(confirmation_id): result = self._send_confirmation(conf) print(result) return result.get("success", False) return False

Will it work well if we remove these delays time.sleep(random.uniform(2, 4))?

[FipsFlip]

For this to work you also need to change confirmation.py more:

add in _get_confirmations : creator_id = conf['creator_id']

and

class Confirmation:
    def __init__(self, data_confid, nonce, creator_id):
        self.data_confid = data_confid
        self.nonce = nonce
        self.creator_id = creator_id

not sure if it will affect other confirmations but seems like creating trades and selling on steam market works fine

could @Heroslfb / @a1063815047 / someone please show an example of this fix?
I guess i mess up the indents in def confirm_by_id() and dont get how / where to implement the creator_id

Thanks in advance!

[Heroslfb]

@FipsFlip

    def confirm_by_id(self, confirmation_id: str) -> bool:
        # Confirm a trade/order based on confirmation_id
        confirmations = self._get_confirmations()
        for conf in confirmations:
            if str(conf.creator_id) == str(confirmation_id):
                result = self._send_confirmation(conf)
                print(f'confirm_by_id result:{result}')
                return result.get("success", False)
        return False