#!/usr/bin/python3 import sys import os import base64 import json import datetime import pytz import urllib.parse # Add parent directory to path for o11 import sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__)))) import o11 from bs4 import BeautifulSoup # Parse command line parameters user = o11.parse_params(sys.argv, 'user') password = o11.parse_params(sys.argv, 'password') device = o11.parse_params(sys.argv, 'device') pin = o11.parse_params(sys.argv, 'pin') id = o11.parse_params(sys.argv, 'id') action = o11.parse_params(sys.argv, 'action') bind = o11.parse_params(sys.argv, 'bind') proxy = o11.parse_params(sys.argv, 'proxy') doh = o11.parse_params(sys.argv, 'doh') worker = o11.parse_params(sys.argv, 'worker') cdm = o11.parse_params(sys.argv, 'cdm') drm = o11.parse_params(sys.argv, 'drm') kid = o11.parse_params(sys.argv, 'kid') pssh = o11.parse_params(sys.argv, 'pssh') challenge = o11.parse_params(sys.argv, 'challenge') heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl') heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams') # Session setup o11Session = o11.session(bind=bind, proxy=proxy, worker=worker) req = o11Session.get_session() if doh != "": o11.dns(doh) if challenge == "cert": challenge = "CAQ=" # Configuration WVD_PATH = './WVD.wvd' authFile = '/NFL_refreshable.txt' SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__)) USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36' headers = { 'accept': 'application/json, text/plain, */*', 'origin': 'https://www.nfl.com', 'referer': 'https://www.nfl.com/', 'user-agent': USER_AGENT, } token = '' def get_auth(): try: with open(SCRIPT_DIR + authFile, 'r') as f: return json.loads(f.read()) except: return None def save_auth(auth_data): with open(SCRIPT_DIR + authFile, 'w') as f: f.write(json.dumps(auth_data, indent=2)) def do_refresh(refreshable_token): refresh_headers = { 'Accept': '*/*', 'Content-Type': 'application/json', 'Origin': 'https://id.nfl.com', 'Referer': 'https://id.nfl.com/', 'User-Agent': USER_AGENT } json_data = { 'clientKey': '0q1p5KSsvtu2VJfk5vQ5EdpmNNGrCGU7', 'clientSecret': 'qGhEv1RtI2SfRQOe', 'deviceId': refreshable_token['rawData']['deviceId'], 'deviceInfo': 'eyJjYXBhYmlsaXRpZXMiOnt9LCJjdHZEZXZpY2UiOiJBbmRyb2lkVFYiLCJkaXNwbGF5SGVpZ2h0IjoyMjIwLCJkaXNwbGF5V2lkdGgiOjEwODAsIm5ldHdvcmtUeXBlIjoid2lmaSIsIm1lbW9yeSI6Mzg1ODQxNTYxNiwiZGlza0NhcGFjaXR5Ijo2MTg1ODExOTY4MCwiaWRmdiI6IjFhM2IyNjIxY2QwZTM1ODAiLCJpc0xvY2F0aW9uRW5hYmxlZCI6dHJ1ZSwibWFudWZhY3R1cmVyIjoic2Ftc3VuZyIsIm1vZGVsIjoiU00tRzk1NUYiLCJvc05hbWUiOiJBbmRyb2lkIiwib3NWZXJzaW9uIjoiOSIsInZlbmRvciI6InNhbXN1bmciLCJ2ZXJzaW9uIjoidW5pdmVyc2FsODg5NSIsInZlcnNpb25OYW1lIjoiNTkuMC4yOS4xMzQ2NjQ0In0=', 'networkType': 'other', 'peacockUUID': 'undefined', 'uid': refreshable_token['rawData']['uid'], 'refreshToken': refreshable_token['rawData']['refreshToken'], } response = req.post('https://api.nfl.com/identity/v3/token/refresh', headers=refresh_headers, json=json_data) data = response.json() return data['accessToken'], data['refreshToken'] def login(): global token print("logging in...", file=sys.stderr) refreshable_token = get_auth() if not refreshable_token: print("No auth found. Please add NFL refreshable token to auth file.", file=sys.stderr) print("Copy 'nfl.refreshableToken.v3' from DevTools -> Application -> Local Storage -> id.nfl.com", file=sys.stderr) save_auth({}) sys.exit(1) try: tok, refresh_token = do_refresh(refreshable_token) refreshable_token['rawData']['refreshToken'] = refresh_token save_auth(refreshable_token) token = tok print("logged in successfully", file=sys.stderr) return tok except Exception as e: print(f"Login failed: {e}", file=sys.stderr) sys.exit(1) def get_token(): global token if token: return token return login() def get_single(asset_id): single_headers = {**headers, 'authorization': 'Bearer ' + token, 'content-type': 'application/json'} json_data = { 'anvatoBeaconingVersion': '1.8.2', 'anvatoConnectorVersion': '0.19.0', 'blockAirplay': True, 'dev': False, 'deviceInfo': 'eyJjYXBhYmlsaXRpZXMiOnt9LCJjdHZEZXZpY2UiOiJBbmRyb2lkVFYiLCJkaXNwbGF5SGVpZ2h0IjoyMjIwLCJkaXNwbGF5V2lkdGgiOjEwODAsIm5ldHdvcmtUeXBlIjoid2lmaSIsIm1lbW9yeSI6Mzg1ODQxNTYxNiwiZGlza0NhcGFjaXR5Ijo2MTg1ODExOTY4MCwiaWRmdiI6IjFhM2IyNjIxY2QwZTM1ODAiLCJpc0xvY2F0aW9uRW5hYmxlZCI6dHJ1ZSwibWFudWZhY3R1cmVyIjoic2Ftc3VuZyIsIm1vZGVsIjoiU00tRzk1NUYiLCJvc05hbWUiOiJBbmRyb2lkIiwib3NWZXJzaW9uIjoiOSIsInZlbmRvciI6InNhbXN1bmciLCJ2ZXJzaW9uIjoidW5pdmVyc2FsODg5NSIsInZlcnNpb25OYW1lIjoiNTkuMC4yOS4xMzQ2NjQ0In0=', 'init': True, 'live': True, 'userAgent': urllib.parse.quote(USER_AGENT, safe='/', encoding=None, errors=None), } response = req.post(f'https://api.nfl.com/play/v1/asset/{asset_id}', headers=single_headers, json=json_data) try: data = response.json() resp = req.get(data['accessUrl'], headers=single_headers) soup = BeautifulSoup(resp.content, features='xml') return soup.find('Location').text except: return None def do_action(): get_token() if action == "login": login() sys.exit() if action == "channels": output = {'Channels': []} ch_headers = {**headers, 'authorization': 'Bearer ' + token} response = req.get('https://api.nfl.com/experience/v1/livestreams', headers=ch_headers) try: data = response.json() current_time = datetime.datetime.utcnow() for i in data.get('data', {}).get('items', []): try: start_time = datetime.datetime.strptime(i['startTime'], "%Y-%m-%dT%H:%M:%S.%fZ") end_time = datetime.datetime.strptime(i['endTime'], "%Y-%m-%dT%H:%M:%S.%fZ") if start_time <= current_time <= end_time: title = i.get('title', 'Unknown') if i.get('intendedAudience'): title += f" - {i['intendedAudience']}" if i.get('contentType'): title += f" ({i['contentType']})" channel = { 'Name': title, 'Mode': 'live', 'SessionManifest': True, 'ManifestScript': f"id={i.get('externalId', '')}", 'CdmType': 'none', 'UseCdm': False, 'Cdm': '', 'Video': 'best', 'OnDemand': True, 'SpeedUp': True, } output['Channels'].append(channel) except: pass print(json.dumps(output, indent=2)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "events": output = {'Events': []} print(json.dumps(output, indent=2)) elif action == "heartbeat": sys.exit() elif action == "manifest": try: asset_id = id video_url = get_single(asset_id) if not video_url: return "error" output = { "Cdn": [{"Name": "default", "ManifestUrl": video_url}], "ManifestUrl": video_url, "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}}, "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000} } print(json.dumps(output)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm": print("NFL streams are typically unencrypted HLS", file=sys.stderr) else: print("invalid action: " + action, file=sys.stderr) if do_action() == "error": login() do_action()