Bypass RoPro verification

[Jack5079]

ropro now needs ropro-id and ropro-verification headers ropro-id = userid ropro-verification =

function getVerificationToken() {
    return new Promise(resolve => {
        async function generateVerificationToken(resolve) {
            try {
                $.ajax({
                    type: "POST",
                    url: "https://api.ropro.io/generateVerificationToken.php",
                    success: function(data){
                        if (data.success == true) {
                            resolve(data.token)
                        } else {
                            resolve(null)
                        }
                    },
                    error: function(XMLHttpRequest, textStatus, errorThrown) {
                       resolve(null)
                    }
                  });
            } catch (e) {
                console.log(e)
                resolve(null)
            }
        }
        generateVerificationToken(resolve)
    })
}

[Jack5079]

Hmm

[Jack5079]

We can try using AvatarEditorService to force-favorite the game RoPro uses

[Jack5079]

How does it connect the metadata call with the get token call - I think I saw something about a PHPSESSION cookie on the network tab, maybe we need to emulate that