#!/usr/bin/python3 import sys import os import base64 import json import datetime import pytz import uuid import time import hashlib import jwt import secrets # Add parent directory to path for o11 import sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__)))) import o11 from bs4 import BeautifulSoup from pywidevine.cdm import Cdm from pywidevine.device import Device from pywidevine.pssh import PSSH # Parse command line parameters user = o11.parse_params(sys.argv, 'user') password = o11.parse_params(sys.argv, 'password') device = o11.parse_params(sys.argv, 'device') pin = o11.parse_params(sys.argv, 'pin') id = o11.parse_params(sys.argv, 'id') action = o11.parse_params(sys.argv, 'action') bind = o11.parse_params(sys.argv, 'bind') proxy = o11.parse_params(sys.argv, 'proxy') doh = o11.parse_params(sys.argv, 'doh') worker = o11.parse_params(sys.argv, 'worker') cdm = o11.parse_params(sys.argv, 'cdm') drm = o11.parse_params(sys.argv, 'drm') kid = o11.parse_params(sys.argv, 'kid') pssh = o11.parse_params(sys.argv, 'pssh') challenge = o11.parse_params(sys.argv, 'challenge') heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl') heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams') # Session setup o11Session = o11.session(bind=bind, proxy=proxy, worker=worker) req = o11Session.get_session() if doh != "": o11.dns(doh) if challenge == "cert": challenge = "CAQ=" # Configuration WVD_PATH = './WVD.wvd' authFile = '/InesLive_auth.json' SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__)) USER_AGENT = 'okhttp/4.12.0' TENANT_ID = '23c0b91d8143494395bdcfec9f111529' APP_ID = 'de70bc05-74a3-4036-b82e-7f5c3ac7c10d' DEVICE_MODEL = 'samsung SM-S921B' PLATFORM_ID = 'Android/V' PLATFORM_VERSION = '15' APP_VERSION_STR = '1.3.3' APP_VERSION_CODE = 133 headers = { 'User-Agent': USER_AGENT, 'Accept-Encoding': 'gzip', } token = '' cdn_base = '' widevine_endpoint = '' def get_auth(): try: return json.load(open(SCRIPT_DIR + authFile)) except: return None def save_auth(auth_data): json.dump(auth_data, open(SCRIPT_DIR + authFile, 'w'), indent=2) def craft_jwt(username, pwd, device_id): now = int(time.time()) payload = { 'platformId': PLATFORM_ID, 'platformVersion': PLATFORM_VERSION, 'appVersionStr': APP_VERSION_STR, 'appVersionCode': APP_VERSION_CODE, 'uid': username, 'deviceId': f'{device_id}/Android/P', 'tenantId': TENANT_ID, 'appType': APP_ID, 'deviceModel': DEVICE_MODEL, 'jti': str(uuid.uuid4()), 'iat': now, 'exp': now + 60, } jwt_secret = hashlib.sha256(f'{username}{pwd}'.encode()).hexdigest() return jwt.encode(payload, jwt_secret.encode('ascii'), algorithm='HS256') def check_auth(tok): auth_headers = {**headers, 'Authorization': 'Bearer ' + tok} response = req.get('https://cdn2.inestv.ro/v2/user/login', headers=auth_headers) data = response.json() return data['params']['cdnBase'], data['drm']['widevine'] def login(): global token, cdn_base, widevine_endpoint print("logging in...", file=sys.stderr) auth = get_auth() if not auth or 'username' not in auth: print("No auth found. Please add InesLive auth to auth file.", file=sys.stderr) save_auth({'username': 'ENTER_USERNAME_HERE', 'password': 'ENTER_PASSWORD_HERE', 'device_id': secrets.token_hex(8)}) sys.exit(1) try: tok = craft_jwt(auth['username'], auth['password'], auth['device_id']) cdn, wv = check_auth(tok) token = tok cdn_base = cdn widevine_endpoint = wv print("logged in successfully", file=sys.stderr) return tok except Exception as e: print(f"Login failed: {e}", file=sys.stderr) sys.exit(1) def get_token(): global token if token: return token return login() def get_pssh_from_mpd(url, play_session_id): mpd_headers = {**headers, 'X-Play-Session': play_session_id, 'Authorization': 'Bearer ' + token} response = req.get(url, headers=mpd_headers) try: content_protections = BeautifulSoup(response.content, features="xml").findAll('ContentProtection') for cp in content_protections: if cp.get('schemeIdUri', '').lower() == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed': pssh_elem = cp.find('cenc:pssh') if pssh_elem: return str(response.url), pssh_elem.text except: pass return str(response.url), None def do_cdm_internal(challenge_b64, channel_id, play_session_id): lic_headers = { 'User-Agent': USER_AGENT, 'X-Play-Session': play_session_id, 'Authorization': 'Bearer ' + token, 'Content-Type': 'application/octet-stream' } response = req.post(f'{cdn_base}{widevine_endpoint}{channel_id}', headers=lic_headers, data=base64.b64decode(challenge_b64)) response_b64 = str(base64.b64encode(response.content), 'ascii') if response_b64.startswith('CA'): return response_b64 return None def do_cdm_external(pssh_b64, channel_id, play_session_id): try: pssh_obj = PSSH(pssh_b64) device_obj = Device.load(WVD_PATH) cdm_obj = Cdm.from_device(device_obj) session_id = cdm_obj.open() challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj) lic_headers = { 'User-Agent': USER_AGENT, 'X-Play-Session': play_session_id, 'Authorization': 'Bearer ' + token, 'Content-Type': 'application/octet-stream' } licence = req.post(f'{cdn_base}{widevine_endpoint}{channel_id}', headers=lic_headers, data=challenge_data) cdm_obj.parse_license(session_id, licence.content) keys = [] for key in cdm_obj.get_keys(session_id): if key.type != 'SIGNING': keys.append(f"{key.kid.hex}:{key.key.hex()}") cdm_obj.close(session_id) return keys except Exception as e: print(f'CDM external failed: {e}', file=sys.stderr) return None def do_action(): get_token() if action == "login": login() sys.exit() if action == "channels": output = {'Channels': []} ch_headers = {**headers, 'Authorization': 'Bearer ' + token} response = req.get('https://cdn2.inestv.ro/v2/epg/channel', headers=ch_headers) try: data = response.json() for ch in data: channel = { 'Name': ch.get('name', 'Unknown'), 'Mode': 'live', 'SessionManifest': True, 'ManifestScript': f"id={ch.get('id', '')}", 'CdmType': 'widevine', 'UseCdm': True, 'Cdm': f"id={ch.get('id', '')}", 'Video': 'best', 'OnDemand': True, 'SpeedUp': True, } output['Channels'].append(channel) print(json.dumps(output, indent=2)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "events": output = {'Events': []} print(json.dumps(output, indent=2)) elif action == "heartbeat": sys.exit() elif action == "manifest": try: channel_id = id play_session_id = str(uuid.uuid4()) video_url = f'{cdn_base}/{channel_id}/manifest.mpd' final_url, _ = get_pssh_from_mpd(video_url, play_session_id) output = { "Cdn": [{"Name": "default", "ManifestUrl": final_url}], "ManifestUrl": final_url, "Headers": {"Manifest": {'User-Agent': USER_AGENT, 'X-Play-Session': play_session_id, 'Authorization': 'Bearer ' + token}, "Media": {'User-Agent': USER_AGENT}}, "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000}, "PlaySessionId": play_session_id } print(json.dumps(output)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "internal": try: channel_id = id play_session_id = str(uuid.uuid4()) result = do_cdm_internal(challenge, channel_id, play_session_id) if result: print(result) else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "external": try: channel_id = id play_session_id = str(uuid.uuid4()) video_url = f'{cdn_base}/{channel_id}/manifest.mpd' _, pssh_to_use = get_pssh_from_mpd(video_url, play_session_id) if not pssh else (None, pssh) if pssh_to_use: keys = do_cdm_external(pssh_to_use, channel_id, play_session_id) if keys: for key in keys: print(key) else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" else: print("invalid action: " + action, file=sys.stderr) if do_action() == "error": login() do_action()