【工具】Get Widevine KEYS (Server)

[nilaoda]

介绍

源代码：https://github.com/nilaoda/WVCore.Server

类似于https://getwvkeys.cc/, 本工具实现简化的服务器版WV密钥获取工具

• 默认端口为18888
• 准备device_client_id_blob和device_private_key并放到exe旁边
• 支持跨域调用
• 启动时增加参数nolog可以使程序不记录文本日志
• 本工具可能不会维护

软件启动后，即可开始测试

一般情况下, 所有请求由服务端完成

向http://localhost:18888/wvapi发起请求即可，请求体格式如下：

{
    "PSSH":"AAAAp3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAIcSEFF0U4YtQlb9i61PWEIgBNcSEPCTfpp3yFXwptQ4ZMXZ82USEE1LDKJawVjwucGYPFF+4rUSEJAqBRprNlaurBkm/A9dkjISECZHD0KW1F0Eqbq7RC4WmAAaDXdpZGV2aW5lX3Rlc3QiFnNoYWthX2NlYzViZmY1ZGM0MGRkYzlI49yVmwY=",
    "Headers":{
        "User-Agent":"IOS"
    },
    "LicenseUrl":"https://cwip-shaka-proxy.appspot.com/no_auth"
}

正常情况下，响应内容格式如下：

{
    "pssh":"AAAAp3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAIcSEFF0U4YtQlb9i61PWEIgBNcSEPCTfpp3yFXwptQ4ZMXZ82USEE1LDKJawVjwucGYPFF+4rUSEJAqBRprNlaurBkm/A9dkjISECZHD0KW1F0Eqbq7RC4WmAAaDXdpZGV2aW5lX3Rlc3QiFnNoYWthX2NlYzViZmY1ZGM0MGRkYzlI49yVmwY=",
    "keys":[
        "902a051a6b3656aeac1926fc0f5d9232:7a13acb8d7cf12fdfaecea19c96edc4e",
        "4d4b0ca25ac158f0b9c1983c517ee2b5:41954cca5a98b00ad05db8bbf2330fee",
        "f0937e9a77c855f0a6d43864c5d9f365:d041141f4e556079a89c685a6ca50f4a",
        "517453862d4256fd8bad4f58422004d7:5b4b848eac0855d79165d05f3cf16d56",
        "26470f4296d45d04a9babb442e169800:a38e1ade8a367b7f6fd0427126902c19"
    ]
}

服务器启动后，即可通过发起HTTP请求开始测试

• py脚本调用

import requests

api_request = {
    'PSSH': 'AAAAp3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAIcSEFF0U4YtQlb9i61PWEIgBNcSEPCTfpp3yFXwptQ4ZMXZ82USEE1LDKJawVjwucGYPFF+4rUSEJAqBRprNlaurBkm/A9dkjISECZHD0KW1F0Eqbq7RC4WmAAaDXdpZGV2aW5lX3Rlc3QiFnNoYWthX2NlYzViZmY1ZGM0MGRkYzlI49yVmwY=',
    'Headers': {
        'User-Agent': 'IOS'
    },
    'LicenseUrl': 'https://cwip-shaka-proxy.appspot.com/no_auth'
}


resp = requests.post('http://localhost:18888/wvapi',json=api_request).json()
for k in resp['keys']:
    print(k)

• 浏览器控制台调用

let body = {
    "PSSH": "AAAAp3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAIcSEFF0U4YtQlb9i61PWEIgBNcSEPCTfpp3yFXwptQ4ZMXZ82USEE1LDKJawVjwucGYPFF+4rUSEJAqBRprNlaurBkm/A9dkjISECZHD0KW1F0Eqbq7RC4WmAAaDXdpZGV2aW5lX3Rlc3QiFnNoYWthX2NlYzViZmY1ZGM0MGRkYzlI49yVmwY=",
    "Headers": {
        "User-Agent": "Test"
    },
    "LicenseUrl": "https://cwip-shaka-proxy.appspot.com/no_auth"
}
let json = await fetch("http://127.0.0.1:18888/wvapi", {
    body: JSON.stringify(body),
    headers: {
        "Content-Type": "application/json"
    },
    method: "POST"
}).then(resp => resp.json());
console.log(json.keys);

• curl调用

curl "http://localhost:18888/wvapi" -H "Content-Type: application/json" -d "{\"PSSH\":\"AAAAp3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAIcSEFF0U4YtQlb9i61PWEIgBNcSEPCTfpp3yFXwptQ4ZMXZ82USEE1LDKJawVjwucGYPFF+4rUSEJAqBRprNlaurBkm/A9dkjISECZHD0KW1F0Eqbq7RC4WmAAaDXdpZGV2aW5lX3Rlc3QiFnNoYWthX2NlYzViZmY1ZGM0MGRkYzlI49yVmwY=\",\"Headers\":{\"User-Agent\":\"IOS\"},\"LicenseUrl\":\"https://cwip-shaka-proxy.appspot.com/no_auth\"}"

特殊情况下, 请求由客户端完成

实际情况中，存在一些不能由服务器直接请求的情况：如请求/响应被包裹在Json中、服务器需要代理等。此时可以通过/getchallenge和/getkeys两个接口来完成测试。

下面是两个完整的浏览器JS调用过程：

• 例一

var CommonWV = async function(pssh, licUrl) {
    const serverAddr = "http://127.0.0.1:18888";
    console.group("fetch cert...");
    let certBuffer = await fetch(licUrl, {
        body: new Uint8Array([0x08, 0x04]),
        headers: {
            "Content-Type": "application/octet-stream"
        },
        method: "POST"
    }).then(resp => resp.arrayBuffer());
    let certB64 = btoa(String.fromCharCode(...new Uint8Array(certBuffer)));
    console.log(certB64);
    console.groupEnd();
    
    console.group("fetch challenge...");
    let jsonC = await fetch(serverAddr + "/getchallenge", {
        body: JSON.stringify({
            "PSSH": pssh,
            "CertBase64": certB64
        }),
        headers: {
            "Content-Type": "application/json"
        },
        method: "POST"
    }).then(resp => resp.json());
    let challengeBase64 = jsonC.challengeBase64;
    console.log(challengeBase64);
    console.groupEnd();
    
    console.group("fetch license...");
    let licBuffer = await fetch(licUrl, {
        body: Uint8Array.from(atob(challengeBase64), (c) => c.charCodeAt(0)),
        headers: {
            "Content-Type": "application/octet-stream"
        },
        method: "POST"
    }).then(resp => resp.arrayBuffer());
    let licB64 = btoa(String.fromCharCode(...new Uint8Array(licBuffer)));
    console.log(licB64);
    console.groupEnd();
    
    console.group("get keys...");
    let jsonK = await fetch(serverAddr + "/getkeys", {
        body: JSON.stringify({
            "PSSH": pssh,
            "ChallengeBase64": challengeBase64,
            "LicenseBase64": licB64
        }),
        headers: {
            "Content-Type": "application/json"
        },
        method: "POST"
    }).then(resp => resp.json());
    let keys = jsonK.keys;
    console.log(keys);
    console.groupEnd();
    return keys;
};

let pssh = "AAAAp3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAIcSEFF0U4YtQlb9i61PWEIgBNcSEPCTfpp3yFXwptQ4ZMXZ82USEE1LDKJawVjwucGYPFF+4rUSEJAqBRprNlaurBkm/A9dkjISECZHD0KW1F0Eqbq7RC4WmAAaDXdpZGV2aW5lX3Rlc3QiFnNoYWthX2NlYzViZmY1ZGM0MGRkYzlI49yVmwY=";
let licUrl = "https://cwip-shaka-proxy.appspot.com/no_auth";
CommonWV(pssh, licUrl);

---

下载使用：

• WINDOWS

  • 20220928：WVCore.Server.v20220928_win_x64.zip

• LINUX

  • 20220928：WVCore.Server.v20220928_linux_x64.zip
  • 20220928：WVCore.Server.v20220928_linux_musl_x64.zip
  • 20220928：WVCore.Server.v20220928_linux_musl_arm64.zip

• MAC

  • 20220928：WVCore.Server.v20220928_mac_x64.zip
  • 20220928：WVCore.Server.v20220928_mac_arm64.zip

[dhrubo11]

how to use post reqst in chrome browser ?

[nilaoda]

Use fetch api, i just added CORS support.

[M4NH3X]

有这个的源代码吗？出于安全原因，想要自己编译
谢谢开发者

[nilaoda]

https://github.com/nilaoda/WVCore.Server

[ekian]

device_client_id_blob和device_private_key
怎么获取？

[FoxRefire]

[FoxRefire]

Some user's report nilaoda's prebuilt API dosen't work on Windows.
Please use this instead
https://github.com/FoxRefire/WVCore.Server/releases