Thanks for finding status.json, I hadn't seen that before. Does anyone know of a way to find current transactions remaining without actually posting a new auction or bidding on something? That would be useful.
Here are all the various URLs I know about, just so everyone is on the same page (I didn't add status.json from above yet)
I've been working with the takeMail.json all day. Based on what I've watched while using the wowamory.com site, ive concluded that you can only claim money remotely and can only see items in your mail box that you could possibly relist.
what is odd is that wowarmory doesn't supply a auc id when it does its call -9223372036854775808 is the value I get when I omit it in my post data, including it doesn't get you mail that is not just money however.
Post to URL: https://us.battle.net/login/en/login.xml
accountName: <account name>
Afterwards, I do a get request to http://www.wowarmory.com/auctionhouse/index.xml, which should build the correct cookies. To validate a successful login, check the cookies for (perl regular expression):
Note: I do a match in the cookies for the 'auction_sk' code, as it appears to be passing this param 'sk' around during POSTs, but currently it does not seem to be needed for a successful response.
To List all Characters:
Get URL request: http://www.wowarmory.com/vault/character-select.xml
XML response should be easily queried by xpath (ex.):
Note: The first name listed (I believe) is the default character.
To Switch the Default Character:
Originally Posted by dozens
does anyone know the url to select a different primary toon?
Post to URL: http://www.wowarmory.com/vault/character-select-submit.json
browse: GET https://us.battle.net/wow/en/vault/character/auction/horde/
bid_auction: POST https://us.battle.net/wow/en/vault/character/auction/horde/bid
cancel_auction: POST https://us.battle.net/wow/en/vault/character/auction/horde/cancel
create_auction: POST https://us.battle.net/wow/en/vault/character/auction/horde/createAuction
deposit (ticket request): POST https://us.battle.net/wow/en/vault/character/auction/horde/deposit
money: POST https://us.battle.net/wow/en/vault/character/auction/horde/money
my_auctions: GET https://us.battle.net/wow/en/vault/character/auction/horde/auctions
my_bids: GET https://us.battle.net/wow/en/vault/character/auction/horde/bids
Keep in mind that the "horde" portion of the URL is dynamic and can be "horde", "alliance", or "neutral".
So far I've found that the bid, cancel, create, deposit (ticket request) and money requests all return native JSON.
I still haven't found a way to get the browse, "my auctions", or "my bids" requests to return anything but HTML.
Also, upon looking at this I got the idea that since all of the POST requests returned JSON that maybe any POST request would, but sending POST instead of GET to the browse URL still results in HTML.
There is an additional key required now (other than the auction id (auc) and amount to bid (money)) that is "xtoken". The value of this key is taken from the cookie "xstoken" that is set during login.
These new "xtoken" and "xstoken" keys are used for several of the operations. There seems to be some confusion with them, for example in the POST request for bidding on an auction, the "xtoken" value is taken from the cookie "xstoken" (note the "s").
In the cancel operation, the "xtoken" value comes from the "xtoken" cookie, same with the create operation.
In the deposit operation when creating a new auction, there is also a new key "sk", which is derived from the "xstoken" cookie.