#!/usr/bin/python3 import sys import os import base64 import json import datetime import pytz # Add parent directory to path for o11 import sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__)))) import o11 from pywidevine.cdm import Cdm from pywidevine.device import Device from pywidevine.pssh import PSSH # Parse command line parameters user = o11.parse_params(sys.argv, 'user') password = o11.parse_params(sys.argv, 'password') device = o11.parse_params(sys.argv, 'device') pin = o11.parse_params(sys.argv, 'pin') id = o11.parse_params(sys.argv, 'id') action = o11.parse_params(sys.argv, 'action') bind = o11.parse_params(sys.argv, 'bind') proxy = o11.parse_params(sys.argv, 'proxy') doh = o11.parse_params(sys.argv, 'doh') worker = o11.parse_params(sys.argv, 'worker') cdm = o11.parse_params(sys.argv, 'cdm') drm = o11.parse_params(sys.argv, 'drm') kid = o11.parse_params(sys.argv, 'kid') pssh = o11.parse_params(sys.argv, 'pssh') challenge = o11.parse_params(sys.argv, 'challenge') heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl') heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams') # Session setup o11Session = o11.session(bind=bind, proxy=proxy, worker=worker) req = o11Session.get_session() if doh != "": o11.dns(doh) if challenge == "cert": challenge = "CAQ=" # Configuration WVD_PATH = './WVD.wvd' authFile = '/tv4play_refresh.txt' SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__)) USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36' headers = { 'Origin': 'https://www.tv4play.se', 'User-Agent': USER_AGENT, 'accept': '*/*', 'client-name': 'tv4-web', 'client-version': '5.4.0', 'content-type': 'application/json', } token = '' def get_auth(): try: with open(SCRIPT_DIR + authFile, 'r') as f: return f.read().strip() except: return None def save_auth(refresh_token): with open(SCRIPT_DIR + authFile, 'w') as f: f.write(refresh_token) def do_refresh(refresh_token): refresh_headers = { 'accept': '*/*', 'content-type': 'application/json', 'origin': 'https://www.tv4play.se', 'user-agent': USER_AGENT, 'Client-Name': 'tv4-web' } json_data = {'grant_type': 'refresh_token', 'refresh_token': refresh_token, 'is_child': False} response = req.post('https://auth.tv4.a2d.tv/v2/auth/token', headers=refresh_headers, json=json_data) data = response.json() return data['access_token'], data['refresh_token'] def login(): global token print("logging in...", file=sys.stderr) refresh_token = get_auth() if not refresh_token: print("No refresh token found. Please add tv4play refresh token to auth file.", file=sys.stderr) print("Login to https://www.tv4play.se and copy 'tv4-refresh-token' cookie value", file=sys.stderr) save_auth('') sys.exit(1) try: tok, new_refresh = do_refresh(refresh_token) save_auth(new_refresh) token = tok print("logged in successfully", file=sys.stderr) return tok except Exception as e: print(f"Login failed: {e}", file=sys.stderr) sys.exit(1) def get_token(): global token if token: return token return login() def get_pssh_from_manifest(url): response = req.get(url, headers={'User-Agent': USER_AGENT}) lines = response.content.decode().split('\n') for l in lines: if 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed' in l: return l.split('data:text/plain;base64,')[-1].split('"')[0] return None def get_single(content_id): single_headers = { 'Accept': '*/*', 'Origin': 'https://www.tv4play.se', 'User-Agent': USER_AGENT, 'x-jwt': 'Bearer ' + token, } params = {'service': 'tv4play', 'device': 'browser', 'protocol': 'hls,dash', 'drm': 'widevine', 'browser': 'GoogleChrome', 'capabilities': 'live-drm-adstitch-2,yospace3'} response = req.get(f'https://playback2.a2d.tv/play/{content_id}', params=params, headers=single_headers) try: data = response.json() url = data['playbackItem']['manifestUrl'] lic_url = None lic_token = None if data['metadata'].get('isDrmProtected'): lic_url = data['playbackItem']['license']['castlabsServer'] lic_token = data['playbackItem']['license']['castlabsToken'] return url, lic_url, lic_token except: return None, None, None def do_cdm_internal(challenge_b64, lic_url, lic_token): lic_headers = { 'Accept': '*/*', 'Origin': 'https://www.tv4play.se', 'User-Agent': USER_AGENT, 'x-dt-auth-token': lic_token, 'Content-Type': 'application/octet-stream', } response = req.post(lic_url, headers=lic_headers, data=base64.b64decode(challenge_b64)) response_b64 = str(base64.b64encode(response.content), 'ascii') if response_b64.startswith('CA'): return response_b64 return None def do_cdm_external(pssh_b64, lic_url, lic_token): try: pssh_obj = PSSH(pssh_b64) device_obj = Device.load(WVD_PATH) cdm_obj = Cdm.from_device(device_obj) session_id = cdm_obj.open() challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj) lic_headers = { 'Accept': '*/*', 'Origin': 'https://www.tv4play.se', 'User-Agent': USER_AGENT, 'x-dt-auth-token': lic_token, 'Content-Type': 'application/octet-stream', } licence = req.post(lic_url, headers=lic_headers, data=challenge_data) cdm_obj.parse_license(session_id, licence.content) keys = [] for key in cdm_obj.get_keys(session_id): if key.type != 'SIGNING': keys.append(f"{key.kid.hex}:{key.key.hex()}") cdm_obj.close(session_id) return keys except Exception as e: print(f'CDM external failed: {e}', file=sys.stderr) return None def do_action(): get_token() if action == "login": login() sys.exit() if action == "channels": output = {'Channels': []} ch_headers = {**headers, 'authorization': 'Bearer ' + token, 'user-entitlements': '4393'} params = { 'operationName': 'LivePanel', 'variables': '{"panelId":"1SmcE15MWgkB4AVHhfp3gS","limit":100,"offset":0}', 'extensions': '{"persistedQuery":{"version":1,"sha256Hash":"85f1009b06d7af0c1653437cdbe967f7ccd3a4c370abe75ca799d9be5a087cd2"}}' } response = req.get('https://nordic-gateway.tv4.a2d.tv/graphql', params=params, headers=ch_headers) try: data = response.json() for card in data['data']['panel']['content'].get('cards', []): content = card.get('content', {}) channel = { 'Name': content.get('title', 'Unknown'), 'Mode': 'live', 'SessionManifest': True, 'ManifestScript': f"id={content.get('id', '')}", 'CdmType': 'widevine', 'UseCdm': True, 'Cdm': f"id={content.get('id', '')}", 'Video': 'best', 'OnDemand': True, 'SpeedUp': True, } output['Channels'].append(channel) print(json.dumps(output, indent=2)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "events": output = {'Events': []} print(json.dumps(output, indent=2)) elif action == "heartbeat": sys.exit() elif action == "manifest": try: content_id = id video_url, lic_url, lic_token = get_single(content_id) if not video_url: return "error" output = { "Cdn": [{"Name": "default", "ManifestUrl": video_url}], "ManifestUrl": video_url, "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}}, "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000}, "LicenseUrl": lic_url, "LicenseToken": lic_token } print(json.dumps(output)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "internal": try: content_id = id _, lic_url, lic_token = get_single(content_id) if lic_url and lic_token: result = do_cdm_internal(challenge, lic_url, lic_token) if result: print(result) else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "external": try: content_id = id video_url, lic_url, lic_token = get_single(content_id) if lic_url and lic_token: pssh_to_use = pssh if pssh else get_pssh_from_manifest(video_url) if pssh_to_use: keys = do_cdm_external(pssh_to_use, lic_url, lic_token) if keys: for key in keys: print(key) else: return "error" else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" else: print("invalid action: " + action, file=sys.stderr) if do_action() == "error": login() do_action()