fix(auth): replace raw Cookie header with httpx cookie jar to fix #273

src/notebooklm/_core.py

@@ -128,6 +128,8 @@ async def open(self) -> None:
         """Open the HTTP client connection.
 
         Called automatically by NotebookLMClient.__aenter__.
+        Uses httpx.Cookies jar to properly handle cross-domain redirects
+        (e.g., to accounts.google.com for auth token refresh).
         """
         if self._http_client is None:
             # Use granular timeouts: shorter connect timeout helps detect network issues
@@ -138,11 +140,13 @@ async def open(self) -> None:
                 write=self._timeout,
                 pool=self._timeout,
             )
+            # Build cookies jar for cross-domain redirect support
+            cookies = self._build_cookies_jar()
             self._http_client = httpx.AsyncClient(
                 headers={
                     "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
-                    "Cookie": self.auth.cookie_header,
                 },
+                cookies=cookies,
                 timeout=timeout,
             )
 
@@ -161,17 +165,36 @@ def is_open(self) -> bool:
         return self._http_client is not None
 
     def update_auth_headers(self) -> None:
-        """Update HTTP client headers with current auth tokens.
+        """Update HTTP client cookies with current auth tokens.
 
         Call this after modifying auth tokens (e.g., after refresh_auth())
         to ensure the HTTP client uses the updated credentials.
+        Uses httpx.Cookies jar to properly handle cross-domain redirects.
 
         Raises:
             RuntimeError: If client is not initialized.
         """
         if not self._http_client:
             raise RuntimeError("Client not initialized. Use 'async with' context.")
-        self._http_client.headers["Cookie"] = self.auth.cookie_header
+        # Replace cookies jar with updated auth tokens
+        self._http_client.cookies = self._build_cookies_jar()
+
+    def _build_cookies_jar(self) -> httpx.Cookies:
+        """Build an httpx.Cookies jar from auth tokens.
+
+        Uses .google.com as the domain to ensure cookies are sent
+        across all Google subdomains including accounts.google.com
+        for cross-domain auth refresh redirects.
+
+        Returns:
+            httpx.Cookies jar populated with auth cookies.
+        """
+        cookies = httpx.Cookies()
+        for name, value in self.auth.cookies.items():
+            # Use .google.com domain to cover all subdomains including
+            # accounts.google.com (used for token refresh redirects)
+            cookies.set(name, value, domain=".google.com")
+        return cookies
 
     def _build_url(self, rpc_method: RPCMethod, source_path: str = "/") -> str:
         """Build the batchexecute URL for an RPC call.

src/notebooklm/auth.py

@@ -646,7 +646,8 @@ async def fetch_tokens(cookies: dict[str, str]) -> tuple[str, str]:
     """Fetch CSRF token and session ID from NotebookLM homepage.
 
     Makes an authenticated request to NotebookLM and extracts the required
-    tokens from the page HTML.
+    tokens from the page HTML. Uses httpx.Cookies() jar to properly handle
+    cross-domain redirects (e.g., to accounts.google.com for token refresh).
 
     Args:
         cookies: Dict of Google auth cookies
@@ -659,12 +660,16 @@ async def fetch_tokens(cookies: dict[str, str]) -> tuple[str, str]:
         ValueError: If tokens cannot be extracted from response
     """
     logger.debug("Fetching CSRF and session tokens from NotebookLM")
-    cookie_header = "; ".join(f"{k}={v}" for k, v in cookies.items())
 
-    async with httpx.AsyncClient() as client:
+    # Build httpx.Cookies jar instead of raw header to properly handle
+    # cross-domain redirects (e.g., to accounts.google.com for refresh)
+    cookie_jar = httpx.Cookies()
+    for name, value in cookies.items():
+        cookie_jar.set(name, value, domain=".google.com")
+
+    async with httpx.AsyncClient(cookies=cookie_jar) as client:
         response = await client.get(
             "https://notebooklm.google.com/",
-            headers={"Cookie": cookie_header},
             follow_redirects=True,
             timeout=30.0,
         )