Support new snapchat protocol

[Munksgaard]

I'm getting 400: Bad request when trying to login to snapchat. Any chance this can be fixed?

[lucasad]

Have you tried changing User Agents? Also, you should try changing the login path and host, they may have removed the old one.

[FiReBlUe45]

With the example I can not login. I tried to simply remove "user agent" it does not work. an idea?

[lucasad]

I believe they may have changed the protocol, if anyone wants to reverse engineer it again and get it working, feel free to submit a PR

[FiReBlUe45]

Tomorrow I look if I have the skills to do so

[lucasad]

It could be as easy as using mitm proxy to observe the various api calls made by the android/ios app.

[FiReBlUe45]

using Fiddler 4

requete for login:
POST https://feelinsonice-hrd.appspot.com/loq/login HTTP/1.1
Accept-Language: fr;q=1, en;q=0.9
Accept-Locale: fr_FR
User-Agent: Snapchat/9.5.0.4 Beta (GT-I9505G; Android 5.0.1#150315#21; gzip)
X-Snapchat-Client-Auth-Token: Bearer e............gwTqL_tU3_X5GU1P_KicAoaG55cq8Rxk
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 532
Host: feelinsonice-hrd.appspot.com
Connection: Keep-Alive
Accept-Encoding: gzip

application_id=com.snapchat.android&dsig=26df682e838c60b63af1&dtoken1i=00001%3AGDdGzMF4S7iqPFds%2BO7%2Bwy7g3C4J5sZOlZw8%2F81gBYqkdpZTr%2B%2FlU5ubiZFFOyJV&height=1920&max_video_height=1920&max_video_width=1080&password=PASSWORD&ptoken=APA91b....YXIlBtNG0dNMys-hIg&req_token=93060754c291....c59b46514d1c513bb&timestamp=1428830007247&username=USERNAME&width=1080

[FiReBlUe45]

but url is different : http://img11.hostingpics.net/pics/391410reddd.png

[Munksgaard]

411ccbf is an attempt to fix this. At least I'm not getting 400s any more. Can anyone try it out to see if it works for them?

[FiReBlUe45]

128 + console.log(data);
and my response is :
{"message":"Oh no! Your login temporarily failed, so please try again later. If
your login continues to fail, please visit https://support.snapchat.com/a/failed
-login :)","status":-103,"logged":false}

another adjustment must be changed

Snapchat via the application in the request header, there is the variable X-Snapchat-Client-Auth-Token, which does not exist in the node-Snapchat

[Munksgaard]

@Copois Is there any way you could get the base64 encoded version of the X-Snapchat-Client-Auth-Token (or some other enconding)?

[FiReBlUe45]

X-Snapchat-Client-Auth-Token: Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6IjczNzY1ZWM3ZWQxYjYwMjBlZGJmOTY2ZmQ5ODcyZWU2ODY5Y2VmNDcifQ.eyJpc3MiOiJhY2NvdW50cy5nb29nbGUuY29tIiwic3ViIjoiMTEyNzI3MTk4MTQxMDYxMjc4ODg0IiwiYXpwIjoiNjk0ODkzOTc5MzI5LXFnMGkwdTg4dDBobThrNmsxbWJyYm5zdWoxMDFoNzN2LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tIiwiZW1haWwiOiJjb3BvaXMucEBnbWFpbC5jb20iLCJlbWFpbF92ZXJpZmllZCI6dHJ1ZSwiYXVkIjoiNjk0ODkzOTc5MzI5LWw1OWYzcGhsNDJldDljbHBvbzI5NmQ4cmFxb2xqbDZwLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tIiwiaWF0IjoxNDI5MjA1ODExLCJleHAiOjE0MjkyMDk0MTF9.el4HYviIrlm6Xci37j9s-CDS61MwDPkb80Jpoi3-cS4LLGohyefQiRdzA19AFAOleQeVyd07kims7q7MuU2U_t43dSskK6eSdT3KPO88XU8K23HeLlkU0oN_tnYcmh5xhCoN6GzTBDkPGAAVmNDQYHWrcetyoKHXtXdxJOd-4jA

You also want the contents of the body?

[FiReBlUe45]

with X-Snapchat-Client-Auth-Token I have an answer, i see

edit : the answers have changed, I look
edit2: login ok

[FiReBlUe45]

X-Snapchat-Client-Auth-Token is not fixed
a new is Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6IjczNzY1ZWM3ZWQxYjYwMjBlZGJmOTY2ZmQ5ODcyZWU2ODY5Y2VmNDcifQ.eyJpc3MiOiJhY2NvdW50cy5nb29nbGUuY29tIiwic3ViIjoiMTEyNzI3MTk4MTQxMDYxMjc4ODg0IiwiYXpwIjoiNjk0ODkzOTc5MzI5LXFnMGkwdTg4dDBobThrNmsxbWJyYm5zdWoxMDFoNzN2LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tIiwiZW1haWwiOiJjb3BvaXMucEBnbWFpbC5jb20iLCJlbWFpbF92ZXJpZmllZCI6dHJ1ZSwiYXVkIjoiNjk0ODkzOTc5MzI5LWw1OWYzcGhsNDJldDljbHBvbzI5NmQ4cmFxb2xqbDZwLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tIiwiaWF0IjoxNDI5MjExMDc5LCJleHAiOjE0MjkyMTQ2Nzl9.dPzb5IWcqXvNit6I3f1yx6dAL_3A_1imLs5yQr3Ht_xQoNK7kdtJRFdgqsqp_xCPtfNAcLoMSjlojIgHH2IZXIoEmJDUWb9Gd8Iu6H0lyKzvv5AAcxxNnSHcpJn12esnUss67jsOPawfKgq1uYM1qFJ01vqyqqxVoUIth4GGNQU'

[FiReBlUe45]

I do not know how it is generated. I look tomorrow.
JSON structure is complicated
i must see if getBlob = function(username, auth_token, id, cb) if correct
because statusCode 401

[FiReBlUe45]

for generate token https://github.com/mgp25/Snap-API/blob/master/src/snapchat.php line123