Roblox currently lacks a developer-friendly and accessible ecosystem for extended tools and services. To address this, I am building an extended API that developers can integrate into their projects, providing a more powerful interface for users to manage their accounts and interact with their data. Base URL: frhd.zengin.workers.dev/api All endpoints require the client's ASR (App Signed Request) token to be present in the Authorization header. POST /api/auth/asr Get ASR (app-signed-request token) from login. DELETE /api/tracks/track_id Hide a track — this action can only be reversed by a moderator. Advise users. DELETE /api/tracks/track_id/races Remove a race — this action is irreversible and prevents the user from creating another race on the track. PATCH /api/user/email Change user email — requires user password in body for authentication to prevent account theft. DELETE /api/user/oa Opt out of OA (Official Author). This project is open-source: https://github.com/freeridercommunity/extended-api
This is awesome! For me, I think I'll find it easier to just use `curl` requests instead of some front-end service, but how do I acquire the ASR?
I think a lot of users would appreciate a quick and easy user interface, or something that adds buttons in-game like Free Rider Lite so they can effortlessly manage their data. I can certainly appreciate that, and I think the devs can have a lot of fun with this and appreciate it. You can get your ASR from the console: PHP: Application.settings.app_signed_request Or via cookies: PHP: await cookieStore.get('frhd_app_sr') It is also returned in the request for the login by password endpoint on Free Rider.
Published a (hopefully) more comprehensive Wiki page on the GitHub repo: https://github.com/freeridercommunity/extended-api/wiki
If you were having issues changing your email or performing any actions on your account, they should now be resolved. Dev notes: Made all responses follow a more consistent structure. Improved code readability and reliability. Added POST /api/auth/asr to get token from login information Useful for makeshift third-party authorization
