Remove option to log in to SteamCMD via username + password and instead only use cached logins.
Though SteamCMD login via LXCOMM was added for convenience, potential users are, for good reason, rather skeptical about doing so. As such, if users opt to download mods via LXCOMM, instead require that the user logs in to SteamCMD themselves to prevent any risk of password leakage, requiring only the account's username to log in to the SteamCMD session embedded in LXCOMM. This step could be initiated, for example, in the setup wizard.
This is currently not in consideration for Steam Web API keys given that I'm fairly certain they're wholly useless for any nefarious purposes (though if they are apparently useful for something, please tell me so I can consider alternatives).
As a draft, this issue is very much open to suggestions or comments.
Remove option to log in to SteamCMD via username + password and instead only use cached logins.
Though SteamCMD login via LXCOMM was added for convenience, potential users are, for good reason, rather skeptical about doing so. As such, if users opt to download mods via LXCOMM, instead require that the user logs in to SteamCMD themselves to prevent any risk of password leakage, requiring only the account's username to log in to the SteamCMD session embedded in LXCOMM. This step could be initiated, for example, in the setup wizard.
This is currently not in consideration for Steam Web API keys given that I'm fairly certain they're wholly useless for any nefarious purposes (though if they are apparently useful for something, please tell me so I can consider alternatives).
As a draft, this issue is very much open to suggestions or comments.