pinterest-dl 2.0.3 → 2.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ba41b3cdd44c6463cfffde77fc4b9db8185f47b1d62e3a9555b9408bfd4f197
-  data.tar.gz: b032e121ffb9750ed128b0a0c6ce5d0266dea8db4fbc99ee1bd6579e8f680d1a
+  metadata.gz: ab49a0f8fc2500835b07ec8abf935c4a643d7a9fa8f6e2de9bdb5250f10ef24c
+  data.tar.gz: 9fb506ca599f3a1625989ab178c7ed4f0c0e5ddad236f416f514666c90741bf0
 SHA512:
-  metadata.gz: 11fe875c2a1eabda28fb7f7b4f342b33565dc141b5fd7ff06cac800595a834c9156abd9fe61544f75eed944f0553fc180183cad5ac7fdef6ca13a03023e179ae
-  data.tar.gz: dc3600f15608c7717f2010cceef198e636e423b3788ee5763ff4e49fdfd19f49cef545e5206d1a7a0981d658194a97745aecbc0f373da038062f381b2ad74ec6
+  metadata.gz: e3962e2ea256111c1c9178947a0aa026daec6fed0c1cfefb2f81d92dd77299eebc9c2634f2ecf9e74ede3edfacb327ce28381c9aeffa951f9960c81f8883dddd
+  data.tar.gz: '09407f8541a4042be42584393524b8aee0147654d46c0abdc1d0c17ad9467bbaa17406fd260099fe214db43aa946553f20a696524616e66e2817477d6cd897b8'

data/CHANGELOG.md

@@ -3,7 +3,7 @@
 All notable changes to this project are documented here.
 This project follows [Semantic Versioning](https://semver.org/).
 
-## [2.0.2]
+## [2.0.3]
 
 ### Fixed
 - **`PinterestDL::Board` was broken.** `lib/pinterest_dl/board.rb` accidentally
@@ -11,6 +11,11 @@ This project follows [Semantic Versioning](https://semver.org/).
   search logic), so it silently collided with `PinterestDL::Search` at load
   time and `PinterestDL.board(...)` never worked correctly. Restored the
   correct `Board` class backed by Pinterest's `BoardFeedResource`.
+- `PinterestDL.board` requests were missing a session cookie and CSRF token,
+  which Pinterest's internal resource API requires — every board request
+  came back as HTTP 403. `Board` now loads the board page first to obtain
+  a session cookie + CSRF token before calling the resource API, the same
+  way `Search` already did.
 - `pin.it/...` short links were rejected by `get_image_url` / `get_video_url` /
   `get_media` even though Pinterest itself redirects them to a normal pin
   page. `PIN_URL_PATTERN` now accepts `pin.it/...` links too.

data/lib/pinterest_dl/api.rb

@@ -74,7 +74,6 @@ module PinterestDL
     end
 
     private
-
     def extract_pin_image(html, quality:)
       pin = Extractors::PinData.extract(html)
       url = pin && pin[:image_url]

data/lib/pinterest_dl/board.rb

@@ -40,7 +40,13 @@ module PinterestDL
     private
 
     def fetch_page(match, bookmarks:)
-      body = @client.get(build_request_url(match, bookmarks), use_cache: false, headers: request_headers)
+      session = establish_session(match)
+      body = @client.get(
+        build_request_url(match, bookmarks),
+        use_cache: false,
+        headers: board_headers(session)
+      )
+
       json = safe_parse(body)
       raise PinterestDL::NotFoundError, "Board not found: #{match[0]}" unless json
 
@@ -50,6 +56,20 @@ module PinterestDL
       { pins: Array(data_node).filter_map { |r| build_pin(r) }, bookmarks: Array(next_bookmarks) }
     end
 
+    def establish_session(match)
+      board_path = "/#{match[:username]}/#{match[:slug]}/"
+      board_uri = URI("https://www.pinterest.com#{board_path}")
+      home_response = @client.raw_get(board_uri.to_s)
+      cookies = (home_response.get_fields('set-cookie') || []).map { |c| c.split(';').first }
+
+      { board_path: board_path, board_uri: board_uri, cookies: cookies, csrf: csrf_token(cookies) }
+    end
+
+    def csrf_token(cookies)
+      token_cookie = cookies.find { |c| c.start_with?('csrftoken=') }
+      token_cookie ? token_cookie.split('=', 2).last : 'undefined'
+    end
+
     def build_request_url(match, bookmarks)
       options = {
         board_url: "/#{match[:username]}/#{match[:slug]}/",
@@ -64,10 +84,16 @@ module PinterestDL
       res_uri.to_s
     end
 
-    def request_headers
+    def board_headers(session)
+      cookie_header = [@config.cookies, session[:cookies].join('; ')].compact.reject(&:empty?).join('; ')
+
       {
         'Accept' => 'application/json, text/javascript, */*, q=0.01',
-        'X-Requested-With' => 'XMLHttpRequest'
+        'X-Requested-With' => 'XMLHttpRequest',
+        'X-Pinterest-PWS-Handler' => 'www/[username]/[slug].js',
+        'X-CSRFToken' => session[:csrf],
+        'Referer' => session[:board_uri].to_s,
+        'Cookie' => cookie_header
       }
     end
 

data/lib/pinterest_dl/client.rb

@@ -71,14 +71,7 @@ module PinterestDL
         raise PinterestDL::NotFoundError, "Redirected without a location header (#{url})" unless location
 
         location = URI.join(url, location).to_s if location.start_with?('/')
-
-        uri = URI(location)
-      if uri.host&.match?(/^(?:www\.)?pinterest\.(?!com$)[a-z.]+$/i) || uri.host == 'pin.it'
-        uri.host = 'www.pinterest.com'
-        location = uri.to_s
-      end
-
-  get_or_raw(location, raw: raw)
+        get_or_raw(location, raw: raw)
       when Net::HTTPForbidden
         raise PinterestDL::RateLimitError, "Request to #{url} was blocked (HTTP 403)"
       else

data/lib/pinterest_dl/extractors/pin_data.rb

@@ -6,13 +6,16 @@ module PinterestDL
   module Extractors
     module PinData
       SCRIPT_PATTERN = %r{<script[^>]*id=["']__PWS_DATA__["'][^>]*>(.*?)</script>}m.freeze
+
       module_function
+
       def extract(html)
         data = parse_embedded_json(html)
         return nil unless data
 
         pin = find_pin_node(data)
         return nil unless pin
+
         {
           image_url: pin.dig('images', 'orig', 'url'),
           video_url: first_video_url(pin),

data/lib/pinterest_dl/extractors/video.rb

@@ -3,7 +3,6 @@
 # Monji024
 module PinterestDL
   module Extractors
-    # Extracts the direct video URL for a pin from raw HTML.
     module Video
       module_function
 

data/lib/pinterest_dl/search.rb

@@ -50,7 +50,8 @@ module PinterestDL
       parse_search_response(json)
     end
 
-
+    # Pinterest's search resource requires a session cookie + CSRF token
+    # obtained by first loading the human-facing search page.
     def establish_session(query)
       source_path = "/search/pins/?q=#{URI.encode_www_form_component(query)}"
       home_uri = URI("https://www.pinterest.com#{source_path}")

data/lib/pinterest_dl/version.rb

@@ -2,5 +2,5 @@
 
 # Monji024
 module PinterestDL
-  VERSION = '2.0.3'
+  VERSION = '2.0.4'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pinterest-dl
 version: !ruby/object:Gem::Version
-  version: 2.0.3
+  version: 2.0.4
 platform: ruby
 authors:
 - Monji
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-29 00:00:00.000000000 Z
+date: 2026-08-30 00:00:00.000000000 Z
 dependencies: []
 description: A Ruby toolkit for getting direct image and video URLs from Pinterest
   pins, searching pins, fetching board contents, and downloading media to disk — as