#!/usr/bin/python3 import sys import os import base64 import json import datetime import pytz import m3u8 # Add parent directory to path for o11 import sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__)))) import o11 from bs4 import BeautifulSoup from pywidevine.cdm import Cdm from pywidevine.device import Device from pywidevine.pssh import PSSH # Parse command line parameters user = o11.parse_params(sys.argv, 'user') password = o11.parse_params(sys.argv, 'password') device = o11.parse_params(sys.argv, 'device') pin = o11.parse_params(sys.argv, 'pin') id = o11.parse_params(sys.argv, 'id') action = o11.parse_params(sys.argv, 'action') bind = o11.parse_params(sys.argv, 'bind') proxy = o11.parse_params(sys.argv, 'proxy') doh = o11.parse_params(sys.argv, 'doh') worker = o11.parse_params(sys.argv, 'worker') cdm = o11.parse_params(sys.argv, 'cdm') drm = o11.parse_params(sys.argv, 'drm') kid = o11.parse_params(sys.argv, 'kid') pssh = o11.parse_params(sys.argv, 'pssh') challenge = o11.parse_params(sys.argv, 'challenge') heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl') heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams') # Session setup o11Session = o11.session(bind=bind, proxy=proxy, worker=worker) req = o11Session.get_session() if doh != "": o11.dns(doh) if challenge == "cert": challenge = "CAQ=" # Configuration WVD_PATH = './WVD.wvd' authFile = '/AppleTV_token.txt' SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__)) USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36' REGION = 'us' headers = { 'accept': '*/*', 'origin': 'https://tv.apple.com', 'referer': 'https://tv.apple.com/', 'user-agent': USER_AGENT, } token = '' dev_token = '' def get_auth(): try: with open(SCRIPT_DIR + authFile, 'r') as f: return f.read().strip() except: return None def save_auth(tok): with open(SCRIPT_DIR + authFile, 'w') as f: f.write(tok) def login(): global token print("logging in...", file=sys.stderr) tok = get_auth() if not tok: print("No token found. Please add AppleTV media-user-token to auth file.", file=sys.stderr) print("Login to tv.apple.com and copy 'media-user-token' cookie value", file=sys.stderr) save_auth('') sys.exit(1) token = tok print("logged in successfully", file=sys.stderr) return tok def get_token(): global token if token: return token return login() def get_lic_pssh_server_uri(url): response = req.get(url, headers={'user-agent': USER_AGENT}) try: playlist = m3u8.loads(response.text) inner_manifest_url = playlist.playlists[0].uri response = req.get(inner_manifest_url, headers={'user-agent': USER_AGENT}) lic_pssh_server_uri = response.text.split('urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed')[-1].split(',URI="')[1].split('"')[0] if len(lic_pssh_server_uri) == 0: return url, None return url, lic_pssh_server_uri except: return url, None def do_cdm_internal(challenge_b64, lic_pssh_server_uri, lic_server_params): pssh_b64 = lic_pssh_server_uri.split(',')[-1] lic_headers = { 'accept': 'application/json', 'authorization': 'Bearer ' + dev_token, 'content-type': 'application/json', 'origin': 'https://tv.apple.com', 'referer': 'https://tv.apple.com/', 'user-agent': USER_AGENT, 'x-apple-music-user-token': token, 'x-apple-renewal': 'true', } json_data = { 'streaming-request': { 'version': 1, 'streaming-keys': [{ 'challenge': challenge_b64, 'uri': lic_pssh_server_uri, 'key-system': 'com.widevine.alpha', 'id': 0, 'lease-action': 'start', **lic_server_params }], }, } response = req.post('https://linear.tv.apple.com/v1/hls/streaming-key-delivery', headers=lic_headers, json=json_data) try: data = response.json() return data['streaming-response']['streaming-keys'][0]['license'] except: return None def do_cdm_external(lic_pssh_server_uri, lic_server_params): try: pssh_b64 = lic_pssh_server_uri.split(',')[-1] pssh_obj = PSSH(pssh_b64) device_obj = Device.load(WVD_PATH) cdm_obj = Cdm.from_device(device_obj) session_id = cdm_obj.open() challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj) lic_headers = { 'accept': 'application/json', 'authorization': 'Bearer ' + dev_token, 'content-type': 'application/json', 'origin': 'https://tv.apple.com', 'referer': 'https://tv.apple.com/', 'user-agent': USER_AGENT, 'x-apple-music-user-token': token, 'x-apple-renewal': 'true', } json_data = { 'streaming-request': { 'version': 1, 'streaming-keys': [{ 'challenge': base64.b64encode(challenge_data).decode('utf-8'), 'uri': lic_pssh_server_uri, 'key-system': 'com.widevine.alpha', 'id': 0, 'lease-action': 'start', **lic_server_params }], }, } licence = req.post('https://linear.tv.apple.com/v1/hls/streaming-key-delivery', headers=lic_headers, json=json_data) data = licence.json() cdm_obj.parse_license(session_id, base64.b64decode(data['streaming-response']['streaming-keys'][0]['license'].encode('utf-8'))) keys = [] for key in cdm_obj.get_keys(session_id): if key.type != 'SIGNING': keys.append(f"{key.kid.hex}:{key.key.hex()}") cdm_obj.close(session_id) return keys except Exception as e: print(f'CDM external failed: {e}', file=sys.stderr) return None def do_action(): global dev_token get_token() if action == "login": login() sys.exit() if action == "channels": output = {'Channels': []} cookies = {'media-user-token': token} ch_headers = { 'accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'user-agent': USER_AGENT, } response = req.get(f'https://tv.apple.com/{REGION.lower()}/channel/mls-season-pass/tvs.sbd.7000', cookies=cookies, headers=ch_headers) try: soup = BeautifulSoup(response.content, features='lxml') script_tag = soup.find('script', {'id': 'serialized-server-data'}) data = json.loads(script_tag.text) dev_token = data[0]['data']['configureParams']['developerToken'] shelves = data[-1]['data']['shelves'] for s in shelves: for e in s.get('items', []): if (((e.get('playButtonAction') or {}).get('intent') or {}).get('item') or {}).get('airingType') == 'Live': title = e.get('title', {}).get('text', 'Unknown') channel = { 'Name': title, 'Mode': 'live', 'SessionManifest': True, 'ManifestScript': f"id={json.dumps(e)}", 'CdmType': 'widevine', 'UseCdm': True, 'Cdm': f"id={json.dumps(e)}", 'Video': 'best', 'OnDemand': True, 'SpeedUp': True, } output['Channels'].append(channel) print(json.dumps(output, indent=2)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "events": output = {'Events': []} print(json.dumps(output, indent=2)) elif action == "heartbeat": sys.exit() elif action == "manifest": try: stream_data = json.loads(id) asset = stream_data['playButtonAction']['intent']['item']['playables'][0]['assets'] video_url = asset['hlsUrl'] video_url, lic_pssh_server_uri = get_lic_pssh_server_uri(video_url) output = { "Cdn": [{"Name": "default", "ManifestUrl": video_url}], "ManifestUrl": video_url, "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}}, "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000}, "LicPsshServerUri": lic_pssh_server_uri, "LicServerParams": asset.get('fpsKeyServerQueryParameters', {}) } print(json.dumps(output)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "internal": try: stream_data = json.loads(id) asset = stream_data['playButtonAction']['intent']['item']['playables'][0]['assets'] video_url = asset['hlsUrl'] lic_server_params = asset.get('fpsKeyServerQueryParameters', {}) _, lic_pssh_server_uri = get_lic_pssh_server_uri(video_url) if lic_pssh_server_uri: result = do_cdm_internal(challenge, lic_pssh_server_uri, lic_server_params) if result: print(result) else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "external": try: stream_data = json.loads(id) asset = stream_data['playButtonAction']['intent']['item']['playables'][0]['assets'] video_url = asset['hlsUrl'] lic_server_params = asset.get('fpsKeyServerQueryParameters', {}) _, lic_pssh_server_uri = get_lic_pssh_server_uri(video_url) if lic_pssh_server_uri: keys = do_cdm_external(lic_pssh_server_uri, lic_server_params) if keys: for key in keys: print(key) else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" else: print("invalid action: " + action, file=sys.stderr) if do_action() == "error": login() do_action()