discordApiAuthLocationMetadata
| Domain | background |
| Kind | endpoint |
| doc_id | — |
| Path | discord.com/api/auth/location-metadata |
| Sends | — |
| Reads | consent_required, country_code, minimum_age, promotional_email_opt_in.required, promotional_email_opt_in.pre_checked |
| Called from | runs/inspect/20261030T222341_sourcedandsoldtothehighestbidder/script1.js:208 app_store_parental_revocation, runs/inspect/20261030T222341_sourcedandsoldtothehighestbidder/script1036.js:1 parse, runs/inspect/20261030T222341_sourcedandsoldtothehighestbidder/script1221.js:2 anonymous, runs/inspect/20261028T074137_sourcedandsoldtothehighestbidder/script1245.js:2 anonymous |
| rea | ev_065e7ad37dcb5911d240f9de7d6e2882220c5a8d7c025d92b46a23de59cf297c |
Seen 3 time(s) in 3 run(s).
| Action | Our step | Times | Status | Took | After step start | Errors |
|---|---|---|---|---|---|---|
| inspect | step 3: goto /login | 1 | 200 | 321 ms | 5482 ms | — |
| inspect | step 1: goto /login | 1 | 200 | 385 ms | 6572 ms | — |
| inspect | step 1: goto /channels/@me | 1 | 200 | 688 ms | 10902 ms | — |
What it sent and what came back (the newest 3 from our runs)
Read from each run's own recording (rule 73), secrets and signed link tokens taken out. Kept in ~/.logCli/rea/clientFacts.json, so it stays after the run is pruned.
runs/inspect/20261030T222341_sourcedandsoldtothehighestbidder, step 1: goto /channels/@me: 200, 688 ms
Sent:
nullAnswered:
{
"consent_required": false,
"country_code": "VN",
"minimum_age": null,
"promotional_email_opt_in": {
"required": true,
"pre_checked": false
}
}runs/inspect/20261028T074137_sourcedandsoldtothehighestbidder, step 1: goto /login: 200, 385 ms
Sent:
nullAnswered:
{
"consent_required": false,
"country_code": "VN",
"minimum_age": null,
"promotional_email_opt_in": {
"required": true,
"pre_checked": false
}
}runs/inspect/20261028T062914_sourcedandsoldtothehighestbidder, step 3: goto /login: 200, 321 ms
Sent:
nullAnswered:
{
"consent_required": false,
"country_code": "VN",
"minimum_age": null,
"promotional_email_opt_in": {
"required": true,
"pre_checked": false
}
}What it does
Tells the login page where the request comes from (country, consent needed), so it shows the right consent and age text.
What our machine does with it
Read only as a recording: the account has no proxy (like Reddit), so this is this machine's own exit.
What can go wrong
The account carries on whatever it answers; a failure here changes nothing for our steps.