Any method to get Widevine Key if there is Access-Control-Allow-Origin?

[peterchan7991]

Is there any method to get the Widevine key if the header of the license url is like this?

Access-Control-Allow-Origin: https://www.mytvsuper.com

Other Websites that I can get keys before are like this

Access-Control-Allow-Origin: *


[Attachment 68843 - Click to enlarge]


[Attachment 68844 - Click to enlarge]

[[ss]vegeta]

I don't think response headers matter. It's the request headers that matter.

[lomero]

for this site need a proper script

does not work on site from your shot

[andrewzhong]

tvsuper is just raw request.
I don't know what show you want but I randomly choose this show.
I didn't use getwvkeys but my own script.

https://www.mytvsuper.com/tc/programme/jewelinthepalace_114763/%E5%A4%A7%E9%95%B7%E4%B...e/315460/?t=41

[INFO] - [LICENSE URL (BASE)] : wv.drm.tvb.com
[INFO] - [PSSH] : AAAAR3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACcIARIQRIapz3dd6ipT7CsubOEMDRoDdHZiIgxNVEUzTlRNMU9Td3c=


[INFO] - [KID:KEY] : 4486a9cf775dea2a53ec2b2e6ce10c0d:4d997fa46c10d7c99b93bfd60029e395
[INFO] - [KID] : 4486a9cf775dea2a53ec2b2e6ce10c0d
[INFO] - [KEY] : 4d997fa46c10d7c99b93bfd60029e395

[elfoeda]

tvsuper is just raw request.
I don't know what show you want but I randomly choose this show.
I didn't use getwvkeys but my own script.

https://www.mytvsuper.com/tc/programme/jewelinthepalace_114763/%E5%A4%A7%E9%95%B7%E4%B...e/315460/?t=41

[INFO] - [LICENSE URL (BASE)] : wv.drm.tvb.com
[INFO] - [PSSH] : AAAAR3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACcIARIQRIapz3dd6ipT7CsubOEMDRoDdHZiIgxNVEUzTlRNMU9Td3c=


[INFO] - [KID:KEY] : 4486a9cf775dea2a53ec2b2e6ce10c0d:4d997fa46c10d7c99b93bfd60029e395
[INFO] - [KID] : 4486a9cf775dea2a53ec2b2e6ce10c0d
[INFO] - [KEY] : 4d997fa46c10d7c99b93bfd60029e395

Hi!

Could you share your script?

[andrewzhong]

Hi!

Could you share your script?

Sorry. I don't share my script.
But if you need any keys, I am more than willingly to help as I like to test my script on various sites.

[peterchan7991]

I don't think response headers matter. It's the request headers that matter.

You are right. I just found that x-user-token is required for request headers. This issue has been fixed. Thanks.