dlabrie / shakingbot

Shaking Bot
MIT License
5 stars 1 forks source link

Not an issue, but just an FYI, tokens expired today. #10

Closed john-- closed 1 year ago

john-- commented 1 year ago

Hi. Just trying to get your attention. It seems Shakepay logged out everyone today and all old access tokens are expired. If you rely on your bot to shake for you everyday, then just an FYI that you might need to generate a new token today (March 1st). That's all. Have a nice day.

dlabrie commented 1 year ago

Yeah, I noticed that everyone was logged out in the afternoon yesterday - just got word from Shakepay and it seems like it affected everyone.

As far as I am aware the login scripts of this bot are broken as they get blocked by CloudFlare via ssl fingerprinting.

-

Hey shakers! On occasion Shakepay will log all customers out of their accounts to ensure they are only logged in to their account on their most current and active devices.

Please note that these are proactive measures that Shakepay may routinely take to help ensure the security of customers accounts. We understand that some of you are having trouble with your 2FA and logging back in. Parkman will be prioritizing this today and our support team is ready to approve all of the verifications submitted today to avoid a 2 day wait and broken streaks. We appreciate your patience with this 🙂

To avoid issues in the future, Authenticator apps can be much easier to access when you're outside of cell phone coverage and can be backed up if you ever lose access to your original device. We would highly recommend getting an authenticator set up as your preferred 2FA method if you haven't already. You can find the quick FAQ on how to do so here: https://help.shakepay.com/en/articles/4027484-how-to-enable-2fa-with-an-authenticator-app

john-- commented 1 year ago

It's all good, I have my own way of getting access tokens: Temporarily disable cert pinning in the app then do a MITM capture.. voila. Again, this as more of an FYI to a fellow bot shaker so you don't have false confidence in your bots abilities today :) Have a nice day

john-- commented 1 year ago

Since you already knew your token was expired, I guess I wasn't helpful at all! Thanks for what you do and your contributions to open source. Marking as closed.

john-- commented 1 year ago

BTW, just one last thing. If CFs TLS fingerprinting is killing your script, I highly recommend looking at https://github.com/lwthiker/curl-impersonate . It's pretty clever and uses ciphers suites/orders that impersonate common browsers. I've used their standalone version of curl with success (specifically the chrome101 one) to get around Opensea's CF protection, but they also have a version of libcurl that should work with python.

gunadeau commented 1 year ago

Hello guys, I just found out that my shaking bot is not shaking anymore. Is there a way to reconnect the bot? Thank you

dlabrie commented 1 year ago

I won't be updating this bot code, I'll leave it as is, still available if you know how to make it work.