Skip to content

impersonate android browser for token exchange too - #12

Open
Soph wants to merge 1 commit into
RustyDust:mainfrom
Soph:soph/inpersonate-android
Open

impersonate android browser for token exchange too#12
Soph wants to merge 1 commit into
RustyDust:mainfrom
Soph:soph/inpersonate-android

Conversation

@Soph

@Soph Soph commented Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown

This fixes the issue with a 403 during the token exchange. See here: #11

Example error:

  ✅ Session established
[2/4] Fetching RSA public key...
  ✅ Password encrypted
[3/4] Signing in...
  ✅ Authorization code received
[4/4] Exchanging code for tokens...
  ❌ Token exchange failed: HTTP 403
     <html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

The fix is to also impersonate as android during the exchange request. Copied over from this PR: TMA84/bluelink-refresh-token@8246b0a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Soph