#!/usr/bin/python3 import sys import os import base64 import json import datetime import pytz import time import hashlib import hmac import urllib.parse # Add parent directory to path for o11 import sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__)))) import o11 from bs4 import BeautifulSoup from pywidevine.cdm import Cdm from pywidevine.device import Device from pywidevine.pssh import PSSH # Parse command line parameters user = o11.parse_params(sys.argv, 'user') password = o11.parse_params(sys.argv, 'password') device = o11.parse_params(sys.argv, 'device') pin = o11.parse_params(sys.argv, 'pin') id = o11.parse_params(sys.argv, 'id') action = o11.parse_params(sys.argv, 'action') bind = o11.parse_params(sys.argv, 'bind') proxy = o11.parse_params(sys.argv, 'proxy') doh = o11.parse_params(sys.argv, 'doh') worker = o11.parse_params(sys.argv, 'worker') cdm = o11.parse_params(sys.argv, 'cdm') drm = o11.parse_params(sys.argv, 'drm') kid = o11.parse_params(sys.argv, 'kid') pssh = o11.parse_params(sys.argv, 'pssh') challenge = o11.parse_params(sys.argv, 'challenge') heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl') heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams') # Session setup o11Session = o11.session(bind=bind, proxy=proxy, worker=worker) req = o11Session.get_session() if doh != "": o11.dns(doh) if challenge == "cert": challenge = "CAQ=" # Configuration WVD_PATH = './WVD.wvd' authFile = '/SkyGoUK_auth.json' SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__)) USER_AGENT = 'skyq:android:23.7.0:GB' PLATFORM = 'ANDROID' DEVICE_TYPE = 'MOBILE' headers = { 'user-agent': USER_AGENT, } # Cache for license URLs lic_url_cache = {} def get_auth(): try: return json.load(open(SCRIPT_DIR + authFile)) except: return None def save_auth(auth_data): json.dump(auth_data, open(SCRIPT_DIR + authFile, 'w'), indent=2) def calculate_signature(method, url, sig_headers, payload, timestamp=None): app_id = 'SKYGO-ANDROID-v2' signature_key = bytearray('jM3CCqNAAQBY9VDeVd6rjttYc2cYDpqnsvNxuTfH', 'utf-8') sig_version = '1.0' if not timestamp: timestamp = int(time.time()) if url.startswith('http'): parsed_url = urllib.parse.urlparse(url) path = parsed_url.path else: path = url text_headers = '' for key in sorted(sig_headers.keys()): if key.lower().startswith('x-skyott'): text_headers += key + ': ' + sig_headers[key] + '\n' headers_md5 = hashlib.md5(text_headers.encode()).hexdigest() if isinstance(payload, str): payload = payload.encode('utf-8') payload_md5 = hashlib.md5(payload).hexdigest() to_hash = ('{method}\n{path}\n{response_code}\n{app_id}\n{version}\n{headers_md5}\n' '{timestamp}\n{payload_md5}\n').format(method=method, path=path, response_code='', app_id=app_id, version=sig_version, headers_md5=headers_md5, timestamp=timestamp, payload_md5=payload_md5) hashed = hmac.new(signature_key, to_hash.encode('utf8'), hashlib.sha1).digest() signature = base64.b64encode(hashed).decode('utf8') return 'SkyOTT client="{}",signature="{}",timestamp="{}",version="{}"'.format(app_id, signature, timestamp, sig_version) def get_region(): response = req.get('https://init.sky.com/') try: return response.json()['geoip']['country-code'] except: return 'GB' def token_request(messo_token, region): token_url = 'https://p.sky.com/auth/tokens' token_headers = { 'accept': 'application/vnd.tokens.v1+json', 'content-type': 'application/vnd.tokens.v1+json', 'x-skyott-device': DEVICE_TYPE, 'x-skyott-platform': PLATFORM, 'x-skyott-proposition': 'SKYQ', 'x-skyott-provider': 'SKY', 'x-skyott-territory': region } post_data = { "auth": { "authScheme": "MESSO", "authToken": messo_token, "provider": "SKY", "providerTerritory": region, "proposition": "SKYQ" }, "device": { "type": DEVICE_TYPE, "platform": PLATFORM, "id": 'Z-sKxKApCe7c3dBMGAYtKU8NmWKDcWrCKobKpnVTLqc', "drmDeviceId": "UNKNOWN" } } post_data_str = json.dumps(post_data) token_headers['x-sky-signature'] = calculate_signature('POST', token_url, token_headers, post_data_str) response = req.post(token_url, headers=token_headers, data=post_data_str) try: return response.json()['userToken'] except: print('Error getting token', file=sys.stderr) return None def login(): print("logging in...", file=sys.stderr) auth = get_auth() if not auth or 'messo_token' not in auth: print("No messo token found. Please add skyCEsidismesso01 to auth file.", file=sys.stderr) save_auth({'messo_token': 'PASTE_skyCEsidismesso01_HERE'}) sys.exit(1) region = get_region() token = token_request(auth['messo_token'], region) if token: auth['token'] = token auth['region'] = region save_auth(auth) print("logged in successfully", file=sys.stderr) return token, region else: sys.exit(1) def get_token(): auth = get_auth() if auth and 'token' in auth and 'region' in auth: return auth['token'], auth['region'] return login() def get_pssh_from_mpd(url): response = req.get(url, headers={'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'}) content_protections = BeautifulSoup(response.content, features="xml").findAll('ContentProtection') for cp in content_protections: if cp.get('schemeIdUri', '').lower() == 'urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed': pssh_elem = cp.find('cenc:pssh') if pssh_elem: return pssh_elem.text return None def get_single(service_key, token, region): live_url = 'https://p.sky.com/video/playouts/live' live_headers = { 'x-skyott-device': DEVICE_TYPE, 'x-skyott-pinoverride': 'true', 'x-skyott-platform': PLATFORM, 'x-skyott-proposition': 'SKYQ', 'x-skyott-provider': 'SKY', 'x-skyott-territory': region, 'x-skyott-usertoken': token, 'Content-Type': 'application/vnd.playlive.v1+json', } post_data = { "serviceKey": service_key, "device": { "capabilities": [ {"transport": "DASH", "protection": "WIDEVINE", "vcodec": "H264", "acodec": "AAC", "container": "ISOBMFF"}, {"transport": "DASH", "protection": "WIDEVINE", "vcodec": "H265", "acodec": "AAC", "container": "ISOBMFF"}, ], "model": "SM-G955F", "maxVideoFormat": "UHD", "hdcpEnabled": 'false', "supportedColourSpaces": ["DV", "HDR10", "SDR"] }, "client": { "thirdParties": ["COMSCORE", "CONVIVA", "FRIENDS"] } } post_data_str = json.dumps(post_data) live_headers['x-sky-signature'] = calculate_signature('POST', live_url, live_headers, post_data_str) response = req.post(live_url, headers=live_headers, data=post_data_str) try: data = response.json() manifest_url = data['asset']['endpoints'][0]['url'].split('?')[0] licence_url = data['protection']['licenceAcquisitionUrl'] return manifest_url, licence_url except: print('Live request failed', file=sys.stderr) return None, None def do_cdm_internal(challenge_b64, lic_url): lic_headers = {'Content-Type': 'application/octet-stream'} response = req.post(lic_url, headers=lic_headers, data=base64.b64decode(challenge_b64)) response_b64 = str(base64.b64encode(response.content), 'ascii') if response_b64.startswith('CA'): return response_b64 else: print(response.text, file=sys.stderr) return None def do_cdm_external(pssh_b64, lic_url): """Extract Widevine keys using pywidevine library""" try: pssh_obj = PSSH(pssh_b64) device_obj = Device.load(WVD_PATH) cdm_obj = Cdm.from_device(device_obj) session_id = cdm_obj.open() challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj) lic_headers = {'Content-Type': 'application/octet-stream'} licence = req.post(lic_url, headers=lic_headers, data=challenge_data) cdm_obj.parse_license(session_id, licence.content) keys = [] for key in cdm_obj.get_keys(session_id): if key.type != 'SIGNING': keys.append(f"{key.kid.hex}:{key.key.hex()}") cdm_obj.close(session_id) return keys except Exception as e: print(f'CDM external failed: {e}', file=sys.stderr) return None def do_action(): token, region = get_token() if action == "login": login() sys.exit() if action == "channels": output = {} output['Channels'] = [] ch_headers = { 'X-SkyOTT-Territory': region, 'X-SkyOTT-Proposition': 'SKYQ', 'X-SkyOTT-Provider': 'SKY', 'X-SkyOTT-Device': DEVICE_TYPE, 'X-SkyOTT-Platform': PLATFORM, 'X-SkyOTT-Application': 'SKYQ/23.7.0', 'User-Agent': USER_AGENT } response = req.get('https://atlantis.epgsky.com/as/services/4104/32', headers=ch_headers) try: data = response.json() services = data['services'] for s in services: if 'OTT' in s.get('servicetypes', []): channel = {} channel['Name'] = s.get('t', 'Unknown') channel['Mode'] = "live" channel['SessionManifest'] = True channel['ManifestScript'] = 'id=' + str(s.get('sid', '')) channel['CdmType'] = "widevine" channel['UseCdm'] = True channel['Cdm'] = 'id=' + str(s.get('sid', '')) channel['Video'] = 'best' channel['OnDemand'] = True channel['SpeedUp'] = True output['Channels'].append(channel) print(json.dumps(output, indent=2)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "events": output = {} output['Events'] = [] print(json.dumps(output, indent=2)) elif action == "heartbeat": sys.exit() elif action == "manifest": try: manifest_url, lic_url = get_single(id, token, region) if not manifest_url: return "error" lic_url_cache[id] = lic_url output = { "Cdn": [], "ManifestUrl": manifest_url, "Headers": { "Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT} }, "Heartbeat": { "Url": '', "Params": '', "PeriodMs": 5*60*1000 }, "LicenseUrl": lic_url } output['Cdn'].append({"Name": "default", "ManifestUrl": manifest_url}) print(json.dumps(output)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "internal": try: _, lic_url = get_single(id, token, region) if lic_url: result = do_cdm_internal(challenge, lic_url) if result: print(result) else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "external": try: manifest_url, lic_url = get_single(id, token, region) if lic_url: pssh_to_use = pssh if not pssh_to_use and manifest_url: pssh_to_use = get_pssh_from_mpd(manifest_url) if pssh_to_use: keys = do_cdm_external(pssh_to_use, lic_url) if keys: for key in keys: print(key) else: return "error" else: print("No PSSH available", file=sys.stderr) return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" else: print("invalid action: " + action, file=sys.stderr) if do_action() == "error": login() do_action()