reddy-api-srm 1.0.9 → 1.0.10

package/dist/src/auth/validatePassword.js

@@ -1,9 +1,40 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validatePassword = validatePassword;
+async function getSigninSessionHeaders() {
+    const signinUrl = "https://academia.srmist.edu.in/accounts/p/40-10002227248/signin?hide_fp=true&servicename=ZohoCreator&service_language=en&dcc=true&serviceurl=https%3A%2F%2Facademia.srmist.edu.in%2Fportal%2Facademia-academic-services%2FredirectFromLogin";
+    const seedRes = await fetch(signinUrl, {
+        method: "GET",
+        redirect: "manual",
+        headers: {
+            accept: "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+            "accept-language": "en-US,en;q=0.9",
+        },
+    });
+    const setCookieHeaders = (typeof seedRes.headers.getSetCookie === "function"
+        ? seedRes.headers.getSetCookie()
+        : [seedRes.headers.get("set-cookie")].filter(Boolean));
+    const cookiePairs = [];
+    let csrfToken = null;
+    for (const header of setCookieHeaders) {
+        const pair = header.split(";")[0]?.trim();
+        if (!pair || !pair.includes("="))
+            continue;
+        cookiePairs.push(pair);
+        if (pair.startsWith("iamcsr="))
+            csrfToken = pair.slice("iamcsr=".length);
+        if (!csrfToken && pair.startsWith("_zcsr_tmp="))
+            csrfToken = pair.slice("_zcsr_tmp=".length);
+    }
+    return {
+        cookie: cookiePairs.join("; "),
+        csrfToken,
+    };
+}
 async function validatePassword({ identifier, digest, password, }) {
     let res;
     try {
+        const seed = await getSigninSessionHeaders();
         res = await fetch(`https://academia.srmist.edu.in/accounts/p/40-10002227248/signin/v2/primary/${identifier}/password?digest=${digest}&cli_time=${Date.now()}&servicename=ZohoCreator&service_language=en&serviceurl=https%3A%2F%2Facademia.srmist.edu.in%2Fportal%2Facademia-academic-services%2FredirectFromLogin`, {
             headers: {
                 accept: "*/*",
@@ -12,12 +43,25 @@ async function validatePassword({ identifier, digest, password, }) {
                 "sec-fetch-dest": "empty",
                 "sec-fetch-mode": "cors",
                 "sec-fetch-site": "same-origin",
+                ...(seed.csrfToken ? { "x-zcsrf-token": `iamcsrcoo=${seed.csrfToken}` } : {}),
+                ...(seed.cookie ? { cookie: seed.cookie } : {}),
                 Referer: "https://academia.srmist.edu.in/accounts/p/40-10002227248/signin?hide_fp=true&servicename=ZohoCreator&service_language=en&dcc=true&serviceurl=https%3A%2F%2Facademia.srmist.edu.in%2Fportal%2Facademia-academic-services%2FredirectFromLogin",
                 "Referrer-Policy": "strict-origin-when-cross-origin",
             },
             body: `{"passwordauth":{"password":"${password}"}}`,
             method: "POST",
+            redirect: "manual",
         });
+        const location = res.headers.get("location") ?? "";
+        if ([301, 302, 303, 307, 308].includes(res.status) && location.includes("sessions-reminder")) {
+            let flowId = null;
+            try {
+                const u = new URL(location, "https://academia.srmist.edu.in");
+                flowId = u.searchParams.get("flowId") ?? u.searchParams.get("flow_id") ?? null;
+            }
+            catch (_) { }
+            return { data: { statusCode: 435, message: "Maximum concurrent sessions reached. Please terminate existing sessions to continue.", captcha: { required: false, digest: null }, isConcurrentLimit: true, flowId }, isAuthenticated: false };
+        }
         // ── Detect redirect to Zoho sessions-reminder page ───────────────────────
         if (res.redirected && res.url && res.url.includes("sessions-reminder")) {
             let flowId = null;
@@ -36,7 +80,7 @@ async function validatePassword({ identifier, digest, password, }) {
             }
             return { error: "Internal Server Error", errorReason: new Error("Non-JSON response from login endpoint") };
         }
-        if (response.status_code === 201) {
+        if (response.status_code === 201 || response.status_code === 200) {
             const setCookieHeaders = (typeof res.headers.getSetCookie === "function"
                 ? res.headers.getSetCookie()
                 : [res.headers.get("set-cookie")].filter(Boolean));
@@ -49,10 +93,29 @@ async function validatePassword({ identifier, digest, password, }) {
             const extractedCookies = matches.map((m) => m[0]).join("; ") + ";";
             const data = {
                 cookies: extractedCookies,
-                statusCode: 201,
+                statusCode: response.status_code,
             };
             return { data, isAuthenticated: true };
         }
+        if ([301, 302, 303, 307, 308].includes(res.status) &&
+            (location.includes("redirectFromLogin") || location.includes("/portal/academia-academic-services"))) {
+            const setCookieHeaders = (typeof res.headers.getSetCookie === "function"
+                ? res.headers.getSetCookie()
+                : [res.headers.get("set-cookie")].filter(Boolean));
+            const combinedCookieHeader = setCookieHeaders.join("; ");
+            const matches = [
+                ...combinedCookieHeader.matchAll(/(_(?:iamadt|iambdt)_client_\d+|_z_identity)=[^;]+/g),
+            ];
+            if (matches.length > 0) {
+                return {
+                    data: {
+                        cookies: matches.map((m) => m[0]).join("; ") + ";",
+                        statusCode: 201,
+                    },
+                    isAuthenticated: true,
+                };
+            }
+        }
         // ── Concurrent / device-limit detection ──────────────────────────────────
         const msg = (response.localized_message ?? response.message ?? "").toLowerCase();
         const isConcurrentLimit =

package/dist/src/auth/validateUser.js

@@ -1,8 +1,39 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateUser = validateUser;
+async function getSigninSessionHeaders() {
+    const signinUrl = "https://academia.srmist.edu.in/accounts/p/40-10002227248/signin?hide_fp=true&servicename=ZohoCreator&service_language=en&dcc=true&serviceurl=https%3A%2F%2Facademia.srmist.edu.in%2Fportal%2Facademia-academic-services%2FredirectFromLogin";
+    const seedRes = await fetch(signinUrl, {
+        method: "GET",
+        redirect: "manual",
+        headers: {
+            accept: "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+            "accept-language": "en-US,en;q=0.9",
+        },
+    });
+    const setCookieHeaders = (typeof seedRes.headers.getSetCookie === "function"
+        ? seedRes.headers.getSetCookie()
+        : [seedRes.headers.get("set-cookie")].filter(Boolean));
+    const cookiePairs = [];
+    let csrfToken = null;
+    for (const header of setCookieHeaders) {
+        const pair = header.split(";")[0]?.trim();
+        if (!pair || !pair.includes("="))
+            continue;
+        cookiePairs.push(pair);
+        if (pair.startsWith("iamcsr="))
+            csrfToken = pair.slice("iamcsr=".length);
+        if (!csrfToken && pair.startsWith("_zcsr_tmp="))
+            csrfToken = pair.slice("_zcsr_tmp=".length);
+    }
+    return {
+        cookie: cookiePairs.join("; "),
+        csrfToken,
+    };
+}
 async function validateUser(username) {
     try {
+        const seed = await getSigninSessionHeaders();
         const res = await fetch(`https://academia.srmist.edu.in/accounts/p/40-10002227248/signin/v2/lookup/${username}`, {
             headers: {
                 accept: "*/*",
@@ -11,6 +42,8 @@ async function validateUser(username) {
                 "sec-fetch-dest": "empty",
                 "sec-fetch-mode": "cors",
                 "sec-fetch-site": "same-origin",
+                ...(seed.csrfToken ? { "x-zcsrf-token": `iamcsrcoo=${seed.csrfToken}` } : {}),
+                ...(seed.cookie ? { cookie: seed.cookie } : {}),
                 Referer: "https://academia.srmist.edu.in/accounts/p/40-10002227248/signin?hide_fp=true&servicename=ZohoCreator&service_language=en&dcc=true&serviceurl=https%3A%2F%2Facademia.srmist.edu.in%2Fportal%2Facademia-academic-services%2FredirectFromLogin",
                 "Referrer-Policy": "strict-origin-when-cross-origin",
             },
@@ -27,7 +60,6 @@ async function validateUser(username) {
         return { data };
     }
     catch (e) {
-        console.error(e);
         return {
             error: "Internal Server Error",
             errorReason: e,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "reddy-api-srm",
   "description": "SRMIST KTR Academia portal",
-  "version": "1.0.9",
+  "version": "1.0.10",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
   "exports": {