fix: fetch firebase tokens

Author: ImRodry

scripts/extras.js

@@ -146,7 +146,7 @@ function createCookie(name, value, expiryDate) {
 		"=" +
 		value +
 		"; expires=" +
-		expiryDate.toGMTString() +
+		expiryDate.toUTCString() +
 		"; SameSite=strict" +
 		"; Domain=" +
 		getTLD() +

scripts/map.js

@@ -111,6 +111,12 @@ async function initMap() {
 		user.accessToken = accessTokenCookie;
 	}
 
+	// Check if the user has a stored firebase token
+	const firebaseTokenCookie = getCookie("firebaseToken");
+	if (firebaseTokenCookie) {
+		user.firebaseToken = firebaseTokenCookie;
+	}
+
 	/* Run the startup functions */
 	await runStartupFunctions();
 }

scripts/requests.js

@@ -8,6 +8,7 @@ const GIRA_GRAPHQL_WS_ENDPOINT = "wss://c2g091p01.emel.pt/ws/graphql";
 const GIRA_AUTH_ENDPOINT = "https://api-auth.emel.pt/auth";
 const GIRA_TOKEN_REFRESH_ENDPOINT = "https://api-auth.emel.pt/token/refresh";
 const GIRA_USER_ENDPOINT = "https://api-auth.emel.pt/user";
+const FIREBASE_TOKEN_URL = "https://luk.moe/girabot_tokens/exchange";
 
 const NUMBER_OF_RETRIES = 3;
 const DEFAULT_PROXY = "https://corsproxy.afonsosousah.workers.dev/";
@@ -19,10 +20,11 @@ async function makePostRequest(url, body, accessToken = null) {
 	const response = await fetch(proxyURL ?? DEFAULT_PROXY, {
 		method: "POST",
 		headers: {
-			"User-Agent": "Gira/3.4.0 (Android 34)",
+			"User-Agent": "Gira/3.4.3 (Android 34)",
 			"X-Proxy-URL": url,
 			"Content-Type": "application/json",
 			"X-Authorization": `Bearer ${accessToken}`,
+			"X-Firebase-Token": encryptFirebaseToken(user.firebaseToken, user.accessToken),
 		},
 		body: body,
 	});
@@ -31,9 +33,19 @@ async function makePostRequest(url, body, accessToken = null) {
 
 		// refresh token
 		accessToken = await tokenRefresh();
+		// se o token tiver expirado
+		if (!getCookiie("firebaseToken")) {
+			const firebaseToken = await fetchFirebaseToken();
+			const { exp } = getJWTPayload(user.firebaseToken);
+			if (firebaseToken) {
+				// Store firebaseToken cookie (for quick refreshes)
+				createCookie("firebaseToken", firebaseToken, new Date(exp * 1000)); // 30 days
+				user.firebaseToken = firebaseToken;
+			} else delete user.firebaseToken;
+		}
 
-		// check if token refresh was successful
-		if (typeof accessToken !== "undefined") {
+		// check if token refresh was successful and there's a firebase token
+		if (typeof accessToken !== "undefined" && user.firebaseToken) {
 			// try to make request again
 			return await retryPostRequest(url, body, accessToken, "Erro da API (401)"); // be sure to use latest available token
 		}
@@ -158,6 +170,20 @@ async function makePostRequest(url, body, accessToken = null) {
 	}
 }
 
+// source: trust me bro
+function encryptFirebaseToken(firebaseToken, authToken) {
+	let { sub, jti } = getJWTPayload(authToken);
+
+	const key = sub.replaceAll("-", "");
+	const iv = jti.slice(0, 16);
+
+	let cipher = crypto.createCipheriv("aes-256-cbc", key, iv);
+
+	let encrypted = cipher.update(firebaseToken, "utf8", "base64");
+
+	return encrypted + cipher.final("base64");
+}
+
 async function makeGetRequest(url, accessToken = null) {
 	// Proxy is not needed for these GET requests
 	const response = await fetch(url, {

scripts/user.js

@@ -63,6 +63,9 @@ async function login(event) {
 		user.accessToken = response.data.accessToken;
 		user.refreshToken = response.data.refreshToken;
 		user.expiration = response.data.expiration;
+		const firebaseToken = await fetchFirebaseToken(user.accessToken);
+		if (firebaseToken) user.firebaseToken = encryptFirebaseToken(firebaseToken, user.accessToken);
+		else alert("Erro ao obter o token de verificação do dispositivo. A app não vai funcionar corretamente.");
 
 		/* Run the startup functions */
 		await runStartupFunctions();
@@ -81,13 +84,36 @@ async function login(event) {
 		// Store accessToken cookie (for quick refreshes)
 		createCookie("accessToken", user.accessToken, accessTokenExpiryDate);
 
+		const { exp: firebaseExpiryDate } = getJWTPayload(user.firebaseToken);
+		createCookie("firebaseToken", user.firebaseToken, new Date(firebaseExpiryDate * 1000));
+
 		document.getElementById("loginMenu")?.remove();
 		tokenRefreshed = true;
 	} else {
 		alert("Login failed!");
 	}
 }
 
+async function fetchFirebaseToken(accessToken) {
+	const res = await fetch(FIREBASE_TOKEN_URL, {
+			headers: `mGira ${currentVersion}`,
+			"X-Gira-Token": accessToken,
+		}),
+		token = await res.text();
+	if (!res.ok) {
+		console.error("Error fetching encrypted token: ", token);
+		return null;
+	}
+	return token;
+}
+
+function getJWTPayload(token) {
+	// Decode the JWT token and get the payload
+	const payload = token.split(".")[1];
+	const decodedPayload = atob(payload);
+	return JSON.parse(decodedPayload);
+}
+
 async function runStartupFunctions() {
 	// Get all user details
 	getUserInformation();
@@ -115,7 +141,7 @@ async function validateLogin() {
 			query: `mutation { 
 				validateLogin(in: { 
 					language: "pt",
-					userAgent: "Gira/3.4.0 (Android 34)",
+					userAgent: "Gira/3.4.3 (Android 34)",
 					firebaseToken: "cwEUfibvTHCRZ6z3R1l3B8"
 				}) { messages { code text } } 
 			}`,