emusks 2.0.12 → 2.0.14

package/README.md

@@ -3,4 +3,6 @@
 
 Log in and interact with the unofficial X API using any client identity — web, Android, iOS, or TweetDeck
 
-[Learn more →](https://emusks.tiago.zip)
+officially dmca'd by twitter™ 🏆  •  includes a few leaked ads bearers
+
+[Learn more →](https://emusks.tiago.zip) [Codeberg](https://codeberg.org/tiag/emusks)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "emusks",
-  "version": "2.0.12",
+  "version": "2.0.14",
   "description": "Reverse-engineered Twitter API client. Log in and interact with the unofficial X API using any client identity — web, Android, iOS, or TweetDeck",
   "keywords": [
     "client",
@@ -10,14 +10,14 @@
     "x",
     "x-api"
   ],
-  "homepage": "https://github.com/tiagozip/emusks",
+  "homepage": "https://emusks.tiago.zip",
   "bugs": {
-    "url": "https://github.com/tiagozip/emusks/issues"
+    "url": "https://codeberg.org/tiag/emusks/issues"
   },
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",
-    "url": "https://github.com/tiagozip/emusks.git"
+    "url": "https://codeberg.org/tiag/emusks.git"
   },
   "type": "module",
   "main": "src/index.js",
@@ -26,6 +26,6 @@
   },
   "dependencies": {
     "cycletls": "^2.0.5",
-    "x-client-transaction-id": "^0.1.9"
+    "x-client-transaction-id": "^0.2.0"
   }
 }

package/src/clients.js

@@ -4,18 +4,14 @@ const chrome_fingerprint = {
   ja3: "771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,35-5-27-16-0-10-13-23-45-65037-17613-18-65281-51-43-11,4588-29-23-24,0",
   ja4r: "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,44cd,fe0d,ff01_0403,0804,0401,0503,0805,0501,0806,0601",
 };
-
 const android_fingerprint = {
   ja3: "771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,23-0-16-11-17613-27-43-35-13-65037-51-18-65281-45-5-10-41,4588-29-23-24,0",
   ja4r: "t13d1517h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,44cd,fe0d,ff01_0403,0804,0401,0503,0805,0501,0806,0601",
-
   userAgent: "TwitterAndroid/10.93.0-release.00 (Android 14; Google Pixel 7 Pro)",
 };
-
 const iphone_fingerprint = {
   ja3: "771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,23-0-16-11-17613-27-43-35-13-65037-51-18-65281-45-5-10-41,4588-29-23-24,0",
   ja4r: "t13d1517h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,44cd,fe0d,ff01_0403,0804,0401,0503,0805,0501,0806,0601",
-
   userAgent: "Twitter-iPhone/10.93.0-release.00 (iPhone; iOS 16.5.1; Scale/3.00)",
 };
 
@@ -41,14 +37,14 @@ export default {
       "AAAAAAAAAAAAAAAAAAAAAIWCCAAAAAAA2C25AxqI%2BYCS7pdfJKRH8Xh19zA%3D8vpDZzPHaEJhd20MKVWp3UR38YoPpuTX7UD2cVYo3YNikubuxd",
     fingerprints: iphone_fingerprint,
   },
-
   old: {
-    // doesn't seem to work
+    // v1.1 only - doesn't seem to work
     bearer:
       "AAAAAAAAAAAAAAAAAAAAAPYXBAAAAAAACLXUNDekMxqa8h%2F40K4moUkGsoc%3DTYfbDKbT3jJPCEVnMYqilB28NHfOPqkca3qaAxGfsyKCs0wRbw",
     fingerprints: chrome_fingerprint,
   },
   web: {
+    // requires transaction id
     bearer:
       "AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA",
     fingerprints: chrome_fingerprint,
@@ -59,4 +55,41 @@ export default {
       "AAAAAAAAAAAAAAAAAAAAAFQODgEAAAAAVHTp76lzh3rFzcHbmHVvQxYYpTw%3DckAlMINMjmCwxUcaXbAN4XqJVdgMJaHqNOFgPMK0zN1qLqLQCF",
     fingerprints: chrome_fingerprint,
   },
-};
+  advertisers: {
+    bearer:
+      "AAAAAAAAAAAAAAAAAAAAAPnA9gAAAAAAZHpqKYoDdMCaqTUBktzAdK38BGk%3DLNsI9r2BHSjZ7cl5wD6Sh6NhxwZd2j8lXDSd6GDoQVYBlzx5Ff",
+    fingerprints: chrome_fingerprint,
+  },
+  ads_manager_next: {
+    bearer:
+      "AAAAAAAAAAAAAAAAAAAAAFsXTQEAAAAAGT1ZWWC51IF1Z8pIl9GKdGuGYtY%3Darf4lbyvoKjCUZfpLX90hOjVT1PqmxNH3arG6iOcb4XNlCvQxe",
+    fingerprints: chrome_fingerprint,
+  },
+  advertiser_interface: {
+    bearer:
+      "AAAAAAAAAAAAAAAAAAAAAFktLQEAAAAAidmFlKJvQR29CW13eg2VolZ3wy4%3DU2ufD1swpIdjuNtaIzloCW8VnUYsmyuTatng49FzHuRwEeDdKH",
+    fingerprints: chrome_fingerprint,
+  },
+  corporate_cms: {
+    // known by twitter employees
+    bearer:
+      "AAAAAAAAAAAAAAAAAAAAACHguwAAAAAAaSlT0G31NDEyg%2BSnBN5JuyKjMCU%3Dlhg0gv0nE7KKyiJNEAojQbn8Y3wJm1xidDK7VnKGBP4ByJwHPb",
+    fingerprints: chrome_fingerprint,
+  },
+  ads_broken: {
+    // doesn't work
+    bearer:
+      "AAAAAAAAAAAAAAAAAAAAAG5LOQEAAAAAbEKsIYYIhrfOQqm4H8u7xcahRkU%3Dz98HKmzbeXdKqBfUDmElcqYl0cmmKY9KdS2UoNIz3Phapgsowi",
+    fingerprints: chrome_fingerprint,
+  },
+  audience_manager_internal: {
+    bearer:
+      "AAAAAAAAAAAAAAAAAAAAADLR6gAAAAAAVkXGYss9CqHyAQ%2FMecX43S1FhwA%3DYUynbBpK0xqHXNeDxFt3NkoFwkS45LTzvgE3CJTfRbQ3QOSO7f",
+    fingerprints: chrome_fingerprint,
+  },
+  tweets_manager: {
+    bearer:
+      "AAAAAAAAAAAAAAAAAAAAADiN8wAAAAAAeBRmNg1NMB%2F4KdNvC%2FpQD0jjTEI%3Dosq5IVDr4azvJ2wThXtkMbGu8powFlXBRgQD9yTttGtygMk7ki",
+    fingerprints: chrome_fingerprint,
+  },
+};

package/src/helpers/media.js

@@ -71,10 +71,11 @@ async function makeUploadRequest(instance, method, params, body, extraHeaders =
     "x-twitter-active-user": "yes",
     "x-twitter-auth-type": "OAuth2Session",
     "x-twitter-client-language": "en",
+    origin: "https://x.com",
     priority: "u=1, i",
-    "sec-ch-ua": "Not(A:Brand;v=8, Chromium;v=144",
+    "sec-ch-ua": '"Not(A:Brand";v="8", "Chromium";v="144"',
     "sec-ch-ua-mobile": "?0",
-    "sec-ch-ua-platform": "macOS",
+    "sec-ch-ua-platform": '"macOS"',
     "sec-fetch-dest": "empty",
     "sec-fetch-mode": "cors",
     "sec-fetch-site": "same-site",
@@ -85,6 +86,14 @@ async function makeUploadRequest(instance, method, params, body, extraHeaders =
     ...extraHeaders,
   };
 
+  if (instance.auth.generateTransactionId) {
+    const uploadUrl = new URL(url);
+    headers["x-client-transaction-id"] = await instance.auth.generateTransactionId(
+      method.toUpperCase(),
+      uploadUrl.pathname,
+    );
+  }
+
   return await cycleTLS(
     url,
     {
@@ -140,6 +149,10 @@ export async function create(source, opts = {}) {
     media_category: category,
   });
 
+  if (initRes.status !== 200 && initRes.status !== 202) {
+    const text = typeof initRes.body === "string" ? initRes.body : await initRes.text();
+    throw new Error(`upload INIT failed (HTTP ${initRes.status}): ${text}`);
+  }
   const initData = await initRes.json();
   if (!initData?.media_id_string) {
     throw new Error(`upload INIT failed: ${JSON.stringify(initData)}`);