Use Twitch app headers to bypass integrity checks

Author: chowder

internal/pkg/config/integrity.go

@@ -80,7 +80,7 @@ func (c *Config) refreshIntegrityToken() error {
 }
 
 func getClientVersion() (string, error) {
-	resp, err := utils.HttpGet(twitch.TwitchHomeUrl, nil)
+	resp, err := utils.HttpGet(twitch.HomeUrl, nil)
 	if err != nil {
 		return "", err
 	}

internal/pkg/twitch/defaults.go

@@ -1,7 +1,11 @@
 package twitch
 
-const TwitchHomeUrl = "https://www.twitch.tv/"
+const HomeUrl = "https://www.twitch.tv/"
 const IntegrityUrl = "https://gql.twitch.tv/integrity"
 const GqlApiUrl = "https://gql.twitch.tv/gql"
-const DefaultClientId = "kimne78kx3ncx6brgo4mv6wki5h1ko"
-const DefaultUserAgent = "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36"
+
+const DefaultClientId = "kd1unb4b3q4t58fwlpcbzcbnm76a8fp"
+const DefaultUserAgent = "Dalvik/2.1.0 (Linux; U; Android 7.1.2; SM-N976N Build/N2G48C) tv.twitch.android.app/13.9.0/1309000"
+const DefaultAppVersion = "13.9.0"
+const DefaultAcceptHeader = "application/vnd.twitchtv.v3+json"
+const DefaultApiConsumerType = "mobile; Android/1309000"

internal/pkg/twitch/gql/gql.go

@@ -23,14 +23,13 @@ func post(config *config.Config, request any) ([]byte, error) {
 	if err != nil {
 		return nil, fmt.Errorf("error creating HTTP request: %w", err)
 	}
+
 	req.Header.Set("Client-ID", twitch.DefaultClientId)
 	req.Header.Set("User-Agent", twitch.DefaultUserAgent)
+	req.Header.Set("X-App-Version", twitch.DefaultAppVersion)
+	req.Header.Set("Accept", twitch.DefaultAcceptHeader)
+	req.Header.Set("Api-Consumer-Type", twitch.DefaultApiConsumerType)
 	if config != nil {
-		integrityToken, err := config.GetIntegrityToken()
-		if err != nil {
-			return nil, fmt.Errorf("could not get integrity token: %w", err)
-		}
-		req.Header.Set("Client-Integrity", integrityToken)
 		req.Header.Set("Client-Session-Id", config.GetClientSessionId())
 		req.Header.Set("Client-Version", config.GetClientVersion())
 		req.Header.Set("Authorization", "OAuth "+config.GetAuthToken())