API Fix

For those having issues with the  torn API, getting CORS policy errors (503)

If you have a chrome/firefox extension add https://api.torn.com to the manifest in permissions array

For tampermonkey use GM_xmlhttpRequest instead of a regular xmlhttpRequest

These 2 lines are very important:
// @connect api.torn.com
// @grant GM_xmlhttpRequest
 
 
function getItems(api_key) {
  return new Promise((resolve, reject) => {
     let ret = GM_xmlhttpRequest({
       method: "GET",
       url: `https://api.torn.com/torn/?selections=items&key=${api_key}`,
       onreadystatechange: function (res) {
          if (res.readyState === 4 && res.status === 200) {
             const parsedRes = JSON.parse(res.responseText)
             Items = parsedRes.items
             resolve()
           }
        },
        onerror: function (err) {
           console.log(err)
        }
    })
 }).catch(e => {
    console.log(e)
 });
}



More info here https://github.com/scriptish/scriptish/wiki/GM_xmlhttpRequest

 

 

 

 

 

Failed to load resource: the server responded with a status of 503 ()


forums.php:1 Access to XMLHttpRequest at 'https://api.torn.com/torn/?selections=stocks&key=[...]&_=1548671466740' from origin 'https://www.torn.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Worked for me, try my torn trader or torn sidekick scripts...

I have a program, an executable that runs from my PC, that gathers item market info, current Value prices, that sort of thing. 

I normally run it once a day and it helps me price flowers/plushies and easily view Torn's Value amounts in my trade pricing tool.

But I get the 503.  Anything I can do to make that work?

I'm just pulling https://api.torn.com/torn/?selections=items&key= (plus my API key)

 

Depends on the program, you need to find some way to bypass the cloudflare protection. If by any chance you use nodejs, pm and I'll point you in the right direction :)

I dunno what nodejs is.  I'm not working with javascript, I'm not going through a browser.  Everything worked fine before, but now I just get the 503.

 

Careful. You may end up breaching the TOS if you're making any non api requests such as loading up a torn page automatically with a browser or console http call which is explicitly disallowed.

Nothing is bypassed, the 5-second delay and redirect still happen.

 

Also ... they should have a special page rule for the API. I use Cloudflare on my site too, have a page rule for the API. Seems like lazy configuring to have the API follow the same rules as the regular page.