fix(learningsuite): add auth token (APIKEY) to video downloads

- Extract auth token from browser session (localStorage/sessionStorage)
- Pass authToken through VideoDownloadTask interface
- Add APIKEY and Authorization headers to HLS fetcher and downloader
- Fix 401 'Missing APIKEY' error for LearningSuite video API

Author: swernerx

src/cli/commands/syncLearningSuite.ts

@@ -9,6 +9,7 @@ import {
   buildLearningSuiteCourseStructure,
   createFolderName,
   extractLearningSuitePostContent,
+  getAuthToken,
   getLearningSuiteLessonUrl,
   slugify,
   type LearningSuiteCourseStructure,
@@ -518,15 +519,19 @@ export async function syncLearningSuiteCommand(
 
     // Phase 3: Download videos
     if (!options.skipVideos && videoTasks.length > 0) {
-      // Extract cookies from session for authenticated video downloads
+      // Extract cookies and auth token from session for authenticated video downloads
       const browserCookies = await session.page.context().cookies();
       const cookieString = browserCookies.map((c) => `${c.name}=${c.value}`).join("; ");
       const refererUrl = `https://${courseStructure.domain}/`;
+      const authToken = await getAuthToken(session.page);
 
-      // Add cookies and referer to all video tasks
+      // Add cookies, referer, and auth token to all video tasks
       for (const task of videoTasks) {
         task.cookies = cookieString;
         task.referer = refererUrl;
+        if (authToken) {
+          task.authToken = authToken;
+        }
       }
 
       await downloadVideos(videoTasks, config);

src/downloader/hlsDownloader.ts

@@ -40,7 +40,8 @@ export async function checkFfmpeg(): Promise<boolean> {
 export async function fetchHLSQualities(
   masterUrl: string,
   cookies?: string,
-  referer?: string
+  referer?: string,
+  authToken?: string
 ): Promise<HLSQuality[]> {
   try {
     // Use provided referer or extract origin from URL
@@ -55,6 +56,11 @@ export async function fetchHLSQualities(
     if (cookies) {
       headers.Cookie = cookies;
     }
+    // Add auth token as APIKEY header (used by LearningSuite)
+    if (authToken) {
+      headers.APIKEY = authToken;
+      headers.Authorization = `Bearer ${authToken}`;
+    }
 
     // Follow redirects manually to capture the final URL
     const response = await fetch(masterUrl, {
@@ -86,14 +92,14 @@ export async function fetchHLSQualities(
             (json.source as string | undefined);
           if (playlistUrl && typeof playlistUrl === "string") {
             // Recursively fetch the actual playlist
-            return await fetchHLSQualities(playlistUrl, cookies, referer);
+            return await fetchHLSQualities(playlistUrl, cookies, referer, authToken);
           }
           // Look for CDN URL anywhere in the JSON string
           const jsonStr = JSON.stringify(json);
           const cdnMatch =
             /(https?:\/\/[^"'\s]*(?:b-cdn\.net|mediadelivery\.net|vz-)[^"'\s]*)/i.exec(jsonStr);
           if (cdnMatch?.[1]) {
-            return await fetchHLSQualities(cdnMatch[1], cookies, referer);
+            return await fetchHLSQualities(cdnMatch[1], cookies, referer, authToken);
           }
         } catch {
           // Not valid JSON
@@ -106,7 +112,7 @@ export async function fetchHLSQualities(
           content
         );
       if (cdnMatch?.[1]) {
-        return await fetchHLSQualities(cdnMatch[1], cookies, referer);
+        return await fetchHLSQualities(cdnMatch[1], cookies, referer, authToken);
       }
 
       console.error(`[HLS] Invalid playlist (starts with: ${content.substring(0, 50)}...)`);
@@ -177,9 +183,10 @@ export async function getBestQualityUrl(
   masterUrl: string,
   preferredHeight?: number,
   cookies?: string,
-  referer?: string
+  referer?: string,
+  authToken?: string
 ): Promise<string> {
-  const qualities = await fetchHLSQualities(masterUrl, cookies, referer);
+  const qualities = await fetchHLSQualities(masterUrl, cookies, referer, authToken);
 
   if (qualities.length === 0) {
     // Assume it's a direct media playlist
@@ -216,7 +223,8 @@ export async function downloadHLSVideo(
   outputPath: string,
   onProgress?: (progress: DownloadProgress) => void,
   cookies?: string,
-  referer?: string
+  referer?: string,
+  authToken?: string
 ): Promise<HLSDownloadResult> {
   // Check if ffmpeg is available
   const hasFfmpeg = await checkFfmpeg();
@@ -240,6 +248,10 @@ export async function downloadHLSVideo(
     if (cookies) {
       headers.Cookie = cookies;
     }
+    if (authToken) {
+      headers.APIKEY = authToken;
+      headers.Authorization = `Bearer ${authToken}`;
+    }
 
     const testResponse = await fetch(hlsUrl, { headers, method: "HEAD" });
     if (!testResponse.ok) {
@@ -282,6 +294,10 @@ export async function downloadHLSVideo(
   if (cookies) {
     headerParts.push(`Cookie: ${cookies}`);
   }
+  if (authToken) {
+    headerParts.push(`APIKEY: ${authToken}`);
+    headerParts.push(`Authorization: Bearer ${authToken}`);
+  }
   args.push("-headers", headerParts.join("\r\n") + "\r\n");
 
   args.push(
@@ -388,7 +404,8 @@ export async function downloadHighLevelVideo(
   preferredQuality?: string,
   onProgress?: (progress: DownloadProgress) => void,
   cookies?: string,
-  referer?: string
+  referer?: string,
+  authToken?: string
 ): Promise<HLSDownloadResult> {
   // Report start
   onProgress?.({
@@ -408,13 +425,13 @@ export async function downloadHighLevelVideo(
   // Get the best quality URL
   let downloadUrl = masterUrl;
   try {
-    downloadUrl = await getBestQualityUrl(masterUrl, preferredHeight, cookies, referer);
+    downloadUrl = await getBestQualityUrl(masterUrl, preferredHeight, cookies, referer, authToken);
   } catch (error) {
     console.warn("Failed to fetch quality options, using master URL:", error);
   }
 
   // Download using ffmpeg
-  return downloadHLSVideo(downloadUrl, outputPath, onProgress, cookies, referer);
+  return downloadHLSVideo(downloadUrl, outputPath, onProgress, cookies, referer, authToken);
 }
 /* v8 ignore stop */
 

src/downloader/index.ts

@@ -26,6 +26,8 @@ export interface VideoDownloadTask {
   cookies?: string | undefined;
   /** Optional referer URL for authenticated downloads */
   referer?: string | undefined;
+  /** Optional auth token (API key) for authenticated downloads */
+  authToken?: string | undefined;
 }
 
 export interface DownloadResult {
@@ -42,7 +44,7 @@ export async function downloadVideo(
   task: VideoDownloadTask,
   onProgress?: (progress: DownloadProgress) => void
 ): Promise<DownloadResult> {
-  const { videoUrl, videoType, outputPath, preferredQuality, cookies, referer } = task;
+  const { videoUrl, videoType, outputPath, preferredQuality, cookies, referer, authToken } = task;
 
   switch (videoType) {
     case "loom":
@@ -57,7 +59,7 @@ export async function downloadVideo(
 
     case "hls":
       // Generic HLS stream
-      return downloadHLSVideo(videoUrl, outputPath, onProgress, cookies, referer);
+      return downloadHLSVideo(videoUrl, outputPath, onProgress, cookies, referer, authToken);
 
     case "highlevel":
       // HighLevel HLS video with quality selection
@@ -67,7 +69,8 @@ export async function downloadVideo(
         preferredQuality,
         onProgress,
         cookies,
-        referer
+        referer,
+        authToken
       );
 
     case "youtube":
@@ -87,7 +90,7 @@ export async function downloadVideo(
       }
       // Try HLS if it looks like a playlist
       if (/\.m3u8(\?|$)/i.exec(videoUrl)) {
-        return downloadHLSVideo(videoUrl, outputPath, onProgress, cookies, referer);
+        return downloadHLSVideo(videoUrl, outputPath, onProgress, cookies, referer, authToken);
       }
       return {
         success: false,