vrchat-api-where-is-authToken.py

#!/usr/bin/env python3

import json
import requests
from requests.auth import HTTPBasicAuth

API    = "https://api.vrchat.cloud/api/1"
APIKEY = "JlE5Jldo5Jibnk5O5hTx6XVqsJu4WJ26"

user = "USERNAME"
pw   = "PASSWORD"

ret = requests.get("{}/auth/user?apiKey={}".format(API, APIKEY),
                   auth=HTTPBasicAuth(user, pw))

print(ret.status_code) # returns 200
print(json.loads(ret.text).keys()) 
# returns ['id', 'username', 'displayName', 'pastDisplayNames', 'hasEmail', 
# 'hasPendingEmail', 'obfuscatedEmail', 'obfuscatedPendingEmail', 'emailVerified', 
# 'hasBirthday', 'unsubscribe', 'friends', 'friendGroupNames', 'blueprints', 
# 'currentAvatarBlueprint', 'events', 'currentAvatar', 'currentAvatarImageUrl', 
# 'currentAvatarAssetUrl', 'currentAvatarThumbnailImageUrl', 'status', 
# 'statusDescription', 'acceptedTOSVersion', 'steamDetails', 'hasLoggedInFromClient', 
# 'homeLocation', 'tags', 'developerType'])

as of July 8, 2018

It seems that authToken is now excluded from the JSON response, so use

authToken = ret.cookies["auth"]

you're crazzy dude! that's real cooking right there!!!