Rust Player Track — Pair Helper 作者: Rust Player Track
Pair Rust servers with rustplayertrack.app bridges Facepunch's Rust+ login to your dashboard.
扩展元数据
屏幕截图
关于此扩展
The Rust Player Track Pair Helper bridges Facepunch's Rust+ Steam login flow into the rustplayertrack.app dashboard so you can pair Rust game servers from any modern browser.
Two production hosts. One development host. That's it.
The extension does not:
Two scoped capabilities it does use, and why:
Why does this exist?
Facepunch's Rust+ Steam sign-in is designed for their mobile app and only delivers credentials via a mobile-only API (ReactNativeWebView.postMessage). This extension supplies that API on a normal browser, capturing the credentials Facepunch's own page hands to it.
Source + license
MIT-licensed. The unminified source bundle, with build instructions that reproduce the submitted package, is provided to reviewers via AMO's source code upload. Also available on request to support@rustplayertrack.app.
Two production hosts. One development host. That's it.
companion-rust.facepunch.com— to capture the SteamID and AuthToken Facepunch's sign-in page produces.rustplayertrack.app(and its preview subdomains) — to hand those values back to your dashboard tab.http://localhost:5173/*— development-only. The maintainer's local Vite dev server runs on this port; the entry exists so the same extension build can be loaded against a local copy of rustplayertrack.app during development. Not reachable from your machine unless you happen to be running our dev server on the same host.
The extension does not:
- Store credentials. Ever. Heap-only flow, no extension storage, no localStorage, no IndexedDB, no cookies.
- Request broad permissions — no all_urls, no cookies, no storage, no webRequest.
Two scoped capabilities it does use, and why:
- A background script that acts purely as a message relay: it re-broadcasts the captured pairing message from the Facepunch tab to your open rustplayertrack.app tab (content scripts cannot message each other directly). Event-driven, no state, no network requests of its own.
- The
tabspermission, solely so that relay can find your open rustplayertrack.app tab by URL (tabs.query + tabs.sendMessage against rustplayertrack.app/localhost patterns only). It never enumerates, reads, or modifies any other tab.
Why does this exist?
Facepunch's Rust+ Steam sign-in is designed for their mobile app and only delivers credentials via a mobile-only API (ReactNativeWebView.postMessage). This extension supplies that API on a normal browser, capturing the credentials Facepunch's own page hands to it.
Source + license
MIT-licensed. The unminified source bundle, with build instructions that reproduce the submitted package, is provided to reviewers via AMO's source code upload. Also available on request to support@rustplayertrack.app.
评分 0(1 位用户)
权限与数据
必要权限:
- 获取浏览器标签页
- 访问您用于 rustplayertrack.app 域名的网站的数据
- 访问您在 companion-rust.facepunch.com 的数据
- 访问您在 rustplayertrack.app 的数据
- 访问您在 localhost:5173 的数据
可选权限:
- 访问您用于 rustplayertrack.app 域名的网站的数据
- 访问您在 companion-rust.facepunch.com 的数据
- 访问您在 rustplayertrack.app 的数据
- 访问您在 localhost:5173 的数据
根据开发者所述,必要的数据收集:
- 身份验证信息
更多信息