#!/usr/bin/python3 import sys import os import base64 import json import datetime import pytz import hmac import hashlib # Add parent directory to path for o11 import sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__)))) import o11 from bs4 import BeautifulSoup from pywidevine.cdm import Cdm from pywidevine.device import Device from pywidevine.pssh import PSSH # Parse command line parameters user = o11.parse_params(sys.argv, 'user') password = o11.parse_params(sys.argv, 'password') device = o11.parse_params(sys.argv, 'device') pin = o11.parse_params(sys.argv, 'pin') id = o11.parse_params(sys.argv, 'id') action = o11.parse_params(sys.argv, 'action') bind = o11.parse_params(sys.argv, 'bind') proxy = o11.parse_params(sys.argv, 'proxy') doh = o11.parse_params(sys.argv, 'doh') worker = o11.parse_params(sys.argv, 'worker') cdm = o11.parse_params(sys.argv, 'cdm') drm = o11.parse_params(sys.argv, 'drm') kid = o11.parse_params(sys.argv, 'kid') pssh = o11.parse_params(sys.argv, 'pssh') challenge = o11.parse_params(sys.argv, 'challenge') heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl') heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams') # Session setup o11Session = o11.session(bind=bind, proxy=proxy, worker=worker) req = o11Session.get_session() if doh != "": o11.dns(doh) if challenge == "cert": challenge = "CAQ=" # Configuration WVD_PATH = './WVD.wvd' authFile = '/VodafonePT_auth.json' SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__)) USER_AGENT = 'Vodafone TV/1.50.21 Android/12/google/AOSP TV on x86' ks = '' signing_key = '' device_id = '' def get_auth(): try: return json.load(open(SCRIPT_DIR + authFile)) except: return None def save_auth(auth_data): json.dump(auth_data, open(SCRIPT_DIR + authFile, 'w'), indent=2) def hmac_sha256(key, message): message_bytes = message.encode('utf-8') hmac_obj = hmac.new(key.encode('utf-8'), message_bytes, hashlib.sha256) return hmac_obj.hexdigest() def check_ks(ks_val, key): headers = {'user-agent': USER_AGENT, 'content-type': 'application/json', 'host': 'apigw.pt.vtv.vodafone.com', 'connection': 'Keep-Alive', 'accept-encoding': 'gzip'} json_data = {'apiVersion': '5.2', 'ks': ks_val} vtv_authorization_hash = hmac_sha256(key, json.dumps(json_data, separators=(',', ':'))) headers['vtv-authorization'] = f'HMAC-SHA256:{vtv_authorization_hash}' response = req.post('https://apigw.pt.vtv.vodafone.com/vtv/phoenix/v1/api_v3/service/household/action/get', headers=headers, json=json_data) response.raise_for_status() def login(): global ks, signing_key, device_id print("logging in...", file=sys.stderr) auth = get_auth() if not auth or 'ks' not in auth: print("No auth found. Please add VodafonePT auth to auth file.", file=sys.stderr) print("Login and copy ks, signing_key, device_id from session", file=sys.stderr) save_auth({'ks': '', 'signing_key': '', 'device_id': ''}) sys.exit(1) try: check_ks(auth['ks'], auth['signing_key']) ks = auth['ks'] signing_key = auth['signing_key'] device_id = auth['device_id'] print("logged in successfully", file=sys.stderr) return ks except Exception as e: print(f"Login failed: {e}", file=sys.stderr) sys.exit(1) def get_token(): global ks if ks: return ks return login() def get_pssh_from_mpd(url): response = req.get(url, headers={'User-Agent': USER_AGENT}, timeout=5) content_protections = BeautifulSoup(response.content, features="xml").findAll('ContentProtection') for cp in content_protections: if cp.get('schemeIdUri', '').lower() == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed': pssh_elem = cp.find('cenc:pssh') if pssh_elem: return pssh_elem.text return None def get_lic_token(): headers = {'user-agent': USER_AGENT, 'content-type': 'application/json', 'host': 'apigw.pt.vtv.vodafone.com', 'connection': 'Keep-Alive', 'accept-encoding': 'gzip'} json_data = {'apiVersion': '5.2', 'ks': ks} vtv_authorization_hash = hmac_sha256(signing_key, json.dumps(json_data, separators=(',', ':'))) headers['vtv-authorization'] = f'HMAC-SHA256:{vtv_authorization_hash}' response = req.post('https://apigw.pt.vtv.vodafone.com/vtv/phoenix/v1/api_v3/service/householddevice/action/get', json=json_data, headers=headers) try: return response.json()['result']['drm']['data'] except: return None def do_cdm_internal(challenge_b64, lic_token): lic_headers = {'nv-tenant-id': 'VDP654RF', 'nv-authorizations': lic_token, 'accept': 'application/octet-stream', 'user-agent': 'OTVMediaPlayer', 'content-type': 'application/octet-stream', 'host': 'vdp654rf.anycast.nagra.com', 'connection': 'Keep-Alive', 'accept-encoding': 'gzip'} response = req.post('https://vdp654rf.anycast.nagra.com/VDP654RF/wvls/contentlicenseservice/v1/licenses', headers=lic_headers, data=base64.b64decode(challenge_b64)) response_b64 = str(base64.b64encode(response.content), 'ascii') if response_b64.startswith('CA'): return response_b64 return None def do_cdm_external(pssh_b64, lic_token): try: pssh_obj = PSSH(pssh_b64) device_obj = Device.load(WVD_PATH) cdm_obj = Cdm.from_device(device_obj) session_id = cdm_obj.open() challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj) lic_headers = {'nv-tenant-id': 'VDP654RF', 'nv-authorizations': lic_token, 'accept': 'application/octet-stream', 'user-agent': 'OTVMediaPlayer', 'content-type': 'application/octet-stream', 'host': 'vdp654rf.anycast.nagra.com', 'connection': 'Keep-Alive', 'accept-encoding': 'gzip'} licence = req.post('https://vdp654rf.anycast.nagra.com/VDP654RF/wvls/contentlicenseservice/v1/licenses', headers=lic_headers, data=challenge_data) cdm_obj.parse_license(session_id, licence.content) keys = [f"{key.kid.hex}:{key.key.hex()}" for key in cdm_obj.get_keys(session_id) if key.type != 'SIGNING'] cdm_obj.close(session_id) return keys except Exception as e: print(f'CDM external failed: {e}', file=sys.stderr) return None def do_action(): get_token() if action == "login": login() sys.exit() if action == "channels": output = {'Channels': []} headers = {'host': 'apigw.pt.vtv.vodafone.com', 'user-agent': 'Vodafone TV/1.59.21 Android/13/google/AOSP TV on x86', 'content-type': 'application/json', 'connection': 'Keep-Alive', 'accept-encoding': 'gzip'} json_data = {'filter': {'objectType': 'KalturaChannelFilter', 'idEqual': 341986}, 'pager': {'objectType': 'KalturaFilterPager', 'pageSize': 500, 'pageIndex': 1}, 'apiVersion': '5.2', 'ks': ks, 'responseProfile': {'objectType': 'KalturaDetachedResponseProfile', 'relatedProfiles': [{'objectType': 'KalturaDetachedResponseProfile', 'filter': {'objectType': 'KalturaAssetImagePerRatioFilter'}, 'name': 'KalturaAssetImagePerRatioFilter'}]}} vtv_authorization_hash = hmac_sha256(signing_key, json.dumps(json_data, separators=(',', ':'))) headers['vtv-authorization'] = f'HMAC-SHA256:{vtv_authorization_hash}' response = req.post('https://apigw.pt.vtv.vodafone.com/vtv/phoenix/v1/api_v3/service/asset/action/list', json=json_data, headers=headers) try: data = response.json() for ch in data.get('result', {}).get('objects', []): external_id = ch.get('externalId', '') channel = { 'Name': ch.get('description', 'Unknown'), 'Mode': 'live', 'SessionManifest': True, 'ManifestScript': f"id={external_id}", 'CdmType': 'widevine', 'UseCdm': True, 'Cdm': f"id={external_id}", 'Video': 'best', 'OnDemand': True, 'SpeedUp': True, } output['Channels'].append(channel) print(json.dumps(output, indent=2)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "events": output = {'Events': []} print(json.dumps(output, indent=2)) elif action == "heartbeat": sys.exit() elif action == "manifest": try: external_id = id video_url = f'http://rr.cdn.vodafone.pt/LIVE/sdash/LIVE${external_id}/index.mpd/Manifest.mpd?start=LIVE&end=END&device=DASH_P_SSP_LIVE_UHD' lic_token = get_lic_token() output = { "Cdn": [{"Name": "default", "ManifestUrl": video_url}], "ManifestUrl": video_url, "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}}, "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000}, "LicenseToken": lic_token } print(json.dumps(output)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "internal": try: lic_token = get_lic_token() if lic_token: result = do_cdm_internal(challenge, lic_token) if result: print(result) else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "external": try: external_id = id video_url = f'http://rr.cdn.vodafone.pt/LIVE/sdash/LIVE${external_id}/index.mpd/Manifest.mpd?start=LIVE&end=END&device=DASH_P_SSP_LIVE_UHD' lic_token = get_lic_token() if lic_token: pssh_to_use = pssh if pssh else get_pssh_from_mpd(video_url) if pssh_to_use: keys = do_cdm_external(pssh_to_use, lic_token) if keys: for key in keys: print(key) else: return "error" else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" else: print("invalid action: " + action, file=sys.stderr) if do_action() == "error": login() do_action()