app has been blocked.

[kexul]

app has been blocked,error log : ERROR: Error message: app has been blocked. ERROR: Can not get 'cid' from http://www.bilibili.com/video/av4057188/

[persmule]

When using GET at http(s)://api.bilibili.com/view?id=3227664&sign=103c7f198a1a8a44b04e172a83d43640&appkey=85eb6835b0a1034e&page=1&type=json returns {"code":-1,"error":"app has been blocked."}. It seems that Twistencent starts to do something bad.

[m13253]

I confirmed this problem.

@cnbeining , can you help me solve the problem?

[miaoneng]

new android appkey is c1b107428d337928. However, I cannot get "sign" field correctly hashed: b'{"code":-3,"message":"API sign invalid","ts":1457664215}'

bilibili-helper's appkey is valid and can be used without "sign". But just don't want to abuse it.

[cnbeining]

I am working with them. @m13253

[cnbeining]

I am thinking from now on we cannot release the secretkey in our programme.

[m13253]

I am thinking from now on we cannot release the secretkey in our programme.

Can we use a server to do the request? (But too many requests from the same IP might cause an IP ban?) Have you tried to contact the Bilibili official?

[cnbeining]

Yes I am working directly with them and found out that I am in an awkward position.

Here's the problem: since I am working with multiple similar projects, I would like an universal way of dealing such problem.

For you-get, I simply cannot rely on any external service to finish my job. For Biligrab, I do not want to do that, either.

It is wrong to have some backdoor opened from their side.

But it is clear that it is just impossible to hide something in your software. Especially open-source ones.

Also, for the sake of being nice, I do not want to use anyone else's key.

What am I supposed to do?

[cnbeining]

Maybe...check the latest Biligrab?

[m13253]

It is said that a certain Bilibili player for Mac has cracked out the key of the Android client.

[cnbeining]

That is an outdated key, said ****.

I just do not like that approach.

[persmule]

Why not? We do not need to honor such a corrupted company like Twistencent, or you may add an interface to allow users to use their own appkey, and even providing a default path...

[ghost]

It's meaningful that continue maintaining this project without the appkey. People can get keys by themselves through the regular ways if they want. So, don't stop the project.

[cnbeining]

My approach for now: Here

Also refer to: Soimort's thought

@m13253

@persmule I am thinking about the same thing.

@wnereiz No we are not going to just abandon our project.

[cnbeining]

See #51 .

[m13253]

Fixed in #51