[Help Wanted] - Fixing the Package
See original GitHub issueHey, I’ve been trying to fix the API, one of the things I’m running into is generating the x-tt-params
header. I currently have code semi-working for getting user posts except for this header. I’ll be pushing my current code to the nightly branch, but it’ll likely only be focused on user_posts breaking the other functions temporarily (but they’re already broken so 🤷 ) it’s just meant as a way to collaborate.
Important Information
@MuffinFox pointed out on #690
- for initialisation of parameter encryption there is a call to window._$jsvmprt(a, b, c) with some hardcoded string (key?)
- window._fetch is a patched fetch which adds some additional functionality
- crypthojs lib is used for obfuscation
@asportnoy on #685 about ttwid (which isn’t my current main focus)
- The cookie is generated from a post request to https://www.tiktok.com/ttwid/check/ (set-cookie header). That request requires a fid parameter but I can’t tell what generates that.
- I also noticed this new script which seems relevant to the changes: https://www.tiktok.com/acrawler/webmssdk.js I was able to partially de-obfuscate that with http://jsnice.org/.
Things I’ve noticed
- Appears they’re signing urls using a different algorithm for
_signature
url parameter. ttwid
doesn’t really seem to matter (at least for user_posts)- Whatever tokens they’re checking don’t seem to expire
- VerifyFp doesn’t seem to exist on the initial calls of at least user_posts anymore
Priorities
- Figure out how
x-tt-params
is being generated
Related Issues (with more information and potentially more help)
I’ve closed these and linked to this, sorted by most relevant to least relevant
Issue Analytics
- State:
- Created 2 years ago
- Reactions:10
- Comments:14 (3 by maintainers)
Top Results From Across the Web
FNaF VR: Help Wanted - Curse of Dread Bear - 10/30 Update ...
FNaF VR: Help Wanted - Curse of Dread Bear - 10/30 Update (Corn Maze, Dreadbear Repair, Etc.).
Read more >Home Repair Jobs, Employment | Indeed.com
106235 Home Repair jobs available on Indeed.com. Apply to Repair Technician, Customer Service Representative, Body Shop Estimator and more!
Read more >Vent Repair | Five Nights at Freddy's Wiki - Fandom
Not what you were looking for? See Vent (disambiguation). Vent Repair is the sixth selectable game mode in Five Nights at Freddy's: Help...
Read more >Five Nights at Freddy's Help Wanted is fun! My thoughts : r/PSVR
Parts and Service have you follow instructions given by a narrator to help repair certain animatronics. Vent repair, won't say anything about it ......
Read more >fnaf vr help wanted: chica v2 (repair) - DeviantArt
chica (parts and service (repair)) from five nights at freddys help wanted © 2019 Scott Cawthon. All Rights Reserved.
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
In this kind of situation, you can be sure, there are people from tiktok’s engineering team watching this issue.
If you really want to get the API to work you should probably organize and work together with a little more privacy.
Now, about the x-tt-params code I posted in the previous issue, here is what gets inside
b
"x-tt-params": Object(d.a)(b)
@carcabot has replicated the signing function in javascript with a docker container in their repository.