gpsoauth

Python client library for Google Play Services OAuth.

gpsoauth allows python code to use the "master token" flow that KB Sriram described at http://sbktech.blogspot.com/2014/01/inside-android-play-services-magic.html.

import gpsoauth

email = 'example@gmail.com'
password = 'my-password'
android_id = '0123456789abcdef'

master_response = gpsoauth.perform_master_login(email, password, android_id)
master_token = master_response['Token']

auth_response = gpsoauth.perform_oauth(
    email, master_token, android_id,
    service='sj', app='com.google.android.music',
    client_sig='...')
token = auth_response['Auth']

This can be useful when writing code that poses as a Google app, like gmusicapi does here.

Many thanks to Dima Kovalenko for reverse engineering the EncryptedPasswd signature in https://web.archive.org/web/20150814054004/http://codedigging.com/blog/2014-06-09-about-encryptedpasswd/.

For an explanation of recent changes, see the changelog.

Alternative flow

There is an alternative login flow if you are experiencing BadAuthentication errors.

1. Go to https://accounts.google.com/EmbeddedSetup
2. Log into your Google Account
3. Click on "I agree" when prompted. The page may show a loading screen forever; ignore it and move on to the next step.
4. Obtain the value of the oauth_token cookie. For more details see the gpsoauth-java readme.

Then, perform the token exchange:

import gpsoauth

email = 'example@gmail.com'
android_id = '0123456789abcdef'
token = '...' # insert the oauth_token here

master_response = gpsoauth.exchange_token(email, token, android_id)
master_token = master_response['Token']  # if there's no token check the response for more details

auth_response = gpsoauth.perform_oauth(
    email, master_token, android_id,
    service='sj', app='com.google.android.music',
    client_sig='...')
token = auth_response['Auth']

Using another HTTP client

perform_master_login(), exchange_token() and perform_oauth() send their requests with requests. To send them with another HTTP client, such as an async one, build the form fields with build_master_login_data(), build_exchange_token_data() or build_oauth_data(), which take the same arguments except proxy. For example, with aiohttp:

from urllib.parse import urlencode

import aiohttp
import gpsoauth

# Loading the certificates blocks: create the context once, outside the event loop.
ssl_context = gpsoauth.create_ssl_context()

async def perform_oauth(email, master_token, android_id):
    data = gpsoauth.build_oauth_data(
        email, master_token, android_id,
        service='sj', app='com.google.android.music',
        client_sig='...')
    async with aiohttp.ClientSession() as session, session.post(
        gpsoauth.AUTH_URL,
        data=urlencode(data).encode('ascii'),
        headers=gpsoauth.build_auth_headers(),
        ssl=ssl_context,
    ) as response:
        return gpsoauth.google.parse_auth_response(await response.text())

These functions give you the form fields, the headers gpsoauth sets and its TLS settings. Your client still adds its own default headers, and handles proxies, timeouts and HTTP errors as it does for its other requests. It must also URL-encode the fields, as in the example: build_master_login_data() returns EncryptedPasswd as bytes, which aiohttp would otherwise send as a file upload.

create_ssl_context() checks the server's certificate and hostname, and trusts the system's certificate authorities. gpsoauth's own functions may also trust the CA bundle requests uses, depending on its version and settings: certifi's, or the file named by REQUESTS_CA_BUNDLE or CURL_CA_BUNDLE. So a certificate that gpsoauth's functions accept can fail with another client. To trust the same certificates, add that bundle with ssl_context.load_verify_locations(), for example ssl_context.load_verify_locations(requests.certs.where()) for certifi's. This also blocks, so do it where you create the context, outside the event loop.

Ports

• Typescript: https://github.com/billgreenwald/gpsoauth-js
• C#: https://github.com/vemacs/GPSOAuthSharp
• Ruby: https://github.com/bryanmytko/gpsoauth
• Java: https://github.com/svarzee/gpsoauth-java
• C++: https://github.com/dvirtz/gpsoauth-cpp and https://github.com/Iciclelz/gpsoauthclient

Contributing

See Contributing guidelines. This is an open-source project and all contributions are highly welcomed.