fix: remove build step

.github/FUNDING.yml

@@ -0,0 +1 @@
+custom: ['t.me/tribute/app?startapp=dqW2']

.github/workflows/publish.yml

@@ -0,0 +1,51 @@
+name: Publish
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          registry-url: https://registry.npmjs.org/
+      - run: npm ci
+
+      # Extract version from package.json and determine release channel
+      - name: Parse version and determine release channel
+        id: version
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          echo "PACKAGE_VERSION=$VERSION" >> $GITHUB_OUTPUT
+
+          if [[ $VERSION == *"-alpha."* ]]; then
+            echo "NPM_TAG=alpha" >> $GITHUB_OUTPUT
+            echo "PRERELEASE=true" >> $GITHUB_OUTPUT
+          elif [[ $VERSION == *"-beta."* ]]; then
+            echo "NPM_TAG=beta" >> $GITHUB_OUTPUT
+            echo "PRERELEASE=true" >> $GITHUB_OUTPUT
+          else
+            echo "NPM_TAG=latest" >> $GITHUB_OUTPUT
+          fi
+
+      # Publish with the appropriate tag
+      - name: Publish to npm
+        run: npm publish --tag ${{ steps.version.outputs.NPM_TAG }}
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      # Only create GitHub releases for stable versions
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          prerelease: ${{ steps.version.outputs.PRERELEASE == 'true' }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+permissions:
+  contents: write

.gitignore

@@ -1,2 +1,5 @@
 /node_modules
 .DS_Store
+/crunchyroll
+crunchyroll.apk
+crunchyroll.xapk

README.md

@@ -1,6 +1,6 @@
 # Crextractor
 
-Utility for extracting secrets from Crunchyroll mobile app
+Utility for extracting credentials from the Crunchyroll Android app
 
 ## Prerequisites
 
@@ -15,12 +15,34 @@ npm i crextractor
 
 ## Usage
 
+### Fetching already extracted secrets
+
+```js
+async function main() {
+  const url = 'https://raw.githubusercontent.com/vitalygashkov/crextractor/refs/heads/main/credentials.tv.json';
+  const data = await fetch(url).then((response) => response.json());
+
+  // You can use the extracted secrets to obtain access tokens for Crunchyroll APIs
+  const response = await fetch('https://beta-api.crunchyroll.com/auth/v1/token', {
+    headers: {
+      Authorization: data.authorization,
+      'User-Agent': 'Crunchyroll/ANDROIDTV/3.42.1_22267 (Android 16; en-US; sdk_gphone64_x86_64)',
+      // ...
+    },
+    method: 'POST',
+    body: JSON.stringify({
+      // ...
+    }),
+  });
+}
+```
+
 #### Library
 
 ```js
-import { extractSecrets } from 'crextractor';
+import { extract } from 'crextractor';
 
-const { id, secret, encoded, header } = await extractSecrets();
+const { id, secret, encoded, authorization } = await extract();
 
 // Do something with the extracted secrets
 ```
@@ -28,10 +50,10 @@ const { id, secret, encoded, header } = await extractSecrets();
 #### Command-line interface
 
 ```bash
-npx crextractor
+npx crextractor --target mobile --output ./credentials.mobile.json
 ```
 
-> Results will be printed to the console and saved to `secrets.json` file
+> Results will be printed to the console and saved to `credentials.mobile.json` file. By default, the target is TV, but you can change it with `--target mobile` option.
 
 ## License
 

bin/cli.js

@@ -1,5 +1,26 @@
 #!/usr/bin/env node
 
-const { extractSecrets } = require('../crextractor');
+const { parseArgs } = require('node:util');
+const { extract } = require('../crextractor');
 
-extractSecrets({ output: 'secrets.json' });
+const args = parseArgs({
+  options: {
+    target: {
+      type: 'string',
+      default: 'tv',
+    },
+    output: {
+      type: 'string',
+    },
+    cleanup: {
+      type: 'boolean',
+      default: true,
+    },
+  },
+});
+
+extract({
+  target: args.values.target,
+  output: args.values.output ?? (args.values.target === 'tv' ? 'credentials.tv.json' : 'credentials.mobile.json'),
+  cleanup: args.values.cleanup,
+});

credentials.mobile.json

@@ -0,0 +1,7 @@
+{
+  "version": "3.89.2 (952)",
+  "id": "n0q2nxl37zig0dqn0aio",
+  "secret": "P0j3he4N8UG8W2w0-PvDadjGuv62fN2d",
+  "encoded": "bjBxMm54bDM3emlnMGRxbjBhaW86UDBqM2hlNE44VUc4VzJ3MC1QdkRhZGpHdXY2MmZOMmQ=",
+  "authorization": "Basic bjBxMm54bDM3emlnMGRxbjBhaW86UDBqM2hlNE44VUc4VzJ3MC1QdkRhZGpHdXY2MmZOMmQ="
+}

credentials.tv.json

@@ -0,0 +1,7 @@
+{
+  "version": "3.42.1 (22267)",
+  "id": "bmbrkxyx3d7u6jsfyla4",
+  "secret": "AIN4D5VE_cp0wVzfNoP0YqHUrYFp9hSg",
+  "encoded": "Ym1icmt4eXgzZDd1NmpzZnlsYTQ6QUlONEQ1VkVfY3Awd1Z6Zk5vUDBZcUhVcllGcDloU2c=",
+  "authorization": "Basic Ym1icmt4eXgzZDd1NmpzZnlsYTQ6QUlONEQ1VkVfY3Awd1Z6Zk5vUDBZcUhVcllGcDloU2c="
+}

crextractor.js

@@ -1,15 +1,31 @@
 const { execSync } = require('node:child_process');
 const { join } = require('node:path');
 const { readdir, readFile, writeFile, rm } = require('node:fs/promises');
+const { existsSync } = require('node:fs');
 const { download } = require('molnia');
 
-const downloadLatestApk = async () => {
+const downloadMobileApk = async () => {
-  const source = 'https://apkcombo.com/crunchyroll/com.crunchyroll.crunchyroid/download/apk';
+  const url = 'https://api.qqaoop.com/v11/apps/com.crunchyroll.crunchyroid/download?userId=1';
-  const page = await fetch(source);
+  const filepath = join(process.cwd(), 'crunchyroll.apk');
-  const html = await page.text();
+  await download(url, {
-  const route = '/r2' + html.split('/r2')[1]?.split('"')[0];
+    output: filepath,
-  const url = `https://apkcombo.com${route}`;
+    onError: (error) => console.error(error),
-  const filepath = join(process.cwd(), 'crunchyroll.xapk');
+  });
+  return filepath;
+};
+
+const downloadTvApk = async () => {
+  const source = 'https://webservices.aptoide.com/webservices/3/getApkInfo';
+  const formData = new FormData();
+  formData.append('identif', 'id:71305225');
+  formData.append('mode', 'json');
+  const response = await fetch(source, {
+    method: 'POST',
+    body: formData,
+  });
+  const json = await response.json();
+  const url = json.apk.path;
+  const filepath = join(process.cwd(), 'crunchyroll.apk');
   await download(url, {
     output: filepath,
     onError: (error) => console.error(error),
@@ -21,7 +37,7 @@ const decompileApk = (apkPath) => {
   try {
     execSync(`jadx ${apkPath}`, { stdio: 'inherit' });
   } catch (error) {}
-  return apkPath.replace('.xapk', '');
+  return apkPath.replace('.xapk', '').replace('.apk', '');
 };
 
 const findConfigurationImpl = async (sourcesDir) => {
@@ -41,8 +57,11 @@ const findConfigurationImpl = async (sourcesDir) => {
   }
 };
 
-const parseSecrets = (contents) => {
+const parseCredentials = async (decompiledDir) => {
-  const lines = contents.split('\n');
+  const sourcesDir = join(decompiledDir, 'sources');
+  const configurationImpl = await findConfigurationImpl(sourcesDir);
+  if (configurationImpl) {
+    const lines = configurationImpl.split('\n');
     const startIndex = lines.findIndex((line) => line.includes('https://sso.crunchyroll.com'));
     const endIndex = lines.findIndex((line) => line.includes('CR-AndroidMobile-SSAI-Prod'));
     const results = lines
@@ -52,27 +71,45 @@ const parseSecrets = (contents) => {
       .map((line) => line.split('= ')[1])
       .map((line) => line.trim());
     const [, , id, secret] = results;
-  const encoded = Buffer.from(`${id}:${secret}`).toString('base64');
+    if (id && secret) return { id, secret };
-  const authorization = `Basic ${encoded}`;
+  }
-  return { id, secret, encoded, authorization };
+
+  const constantsPath = join(decompiledDir, 'sources', 'com', 'crunchyroll', 'api', 'util', 'Constants.java');
+  const constants = await readFile(constantsPath, 'utf8');
+  return {
+    id: constants.split(' PROD_CLIENT_ID = "')[1].split('"')[0],
+    secret: constants.split(' PROD_CLIENT_SECRET = "')[1].split('"')[0],
+  };
 };
 
-const extractSecrets = async ({ output, cleanup = true } = {}) => {
+const parseVersion = async (decompiledDir) => {
-  console.log('Downloading latest APK...');
+  const manifestJsonPath = join(decompiledDir, 'resources', 'manifest.json');
-  const apkPath = await downloadLatestApk();
+  const manifestXmlPath = join(decompiledDir, 'resources', 'AndroidManifest.xml');
+  if (existsSync(manifestJsonPath)) {
+    const manifest = require(manifestJsonPath);
+    const version = `${manifest.version_name} (${manifest.version_code})`;
+    return version;
+  } else if (existsSync(manifestXmlPath)) {
+    const manifest = await readFile(manifestXmlPath, 'utf8');
+    const version = `${manifest.match(/versionName="([^"]+)"/)[1]} (${manifest.match(/versionCode="([^"]+)"/)[1]})`;
+    return version;
+  }
+};
+
+const extract = async ({ target, output, cleanup = false } = {}) => {
+  console.log('Downloading APK...');
+  const apkPath = target === 'tv' ? await downloadTvApk() : await downloadMobileApk();
 
   console.log('Decompiling APK...');
   const decompiledDir = decompileApk(apkPath);
 
-  console.log('Searching for secrets...');
+  console.log('Parsing version...');
-  const sourcesDir = join(decompiledDir, 'sources');
+  const version = await parseVersion(decompiledDir);
-  const manifest = require(join(decompiledDir, 'resources', 'manifest.json'));
-  const version = manifest.version_name;
-  const configurationImpl = await findConfigurationImpl(sourcesDir);
-  if (!configurationImpl) throw new Error('Could not find ConfigurationImpl.kt');
 
-  console.log('Parsing secrets...');
+  console.log('Parsing credentials...');
-  const { id, secret, encoded, authorization } = parseSecrets(configurationImpl);
+  const { id, secret } = await parseCredentials(decompiledDir);
+  const encoded = Buffer.from(`${id}:${secret}`).toString('base64');
+  const authorization = `Basic ${encoded}`;
 
   console.log(`Cleaning up files...`);
   if (cleanup) await rm(apkPath, { recursive: true, force: true });
@@ -91,4 +128,4 @@ const extractSecrets = async ({ output, cleanup = true } = {}) => {
   return { version, id, secret, encoded, authorization };
 };
 
-module.exports = { extractSecrets };
+module.exports = { extract };

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "crextractor",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "crextractor",
-      "version": "1.1.0",
+      "version": "1.2.1",
       "funding": [
         {
           "type": "individual",

package.json

@@ -1,15 +1,22 @@
 {
   "name": "crextractor",
-  "version": "1.1.0",
+  "version": "1.2.1",
-  "description": "Utility for extracting secrets from Crunchyroll mobile app",
+  "description": "Utility for extracting credentials from the Crunchyroll Android app",
   "main": "crextractor.js",
   "bin": {
     "crextractor": "bin/cli.js"
   },
+  "files": [
+    "bin",
+    "crextractor.d.ts",
+    "crextractor.js"
+  ],
   "types": "crextractor.d.ts",
   "type": "commonjs",
   "scripts": {
     "start": "node bin/cli.js",
+    "extract:mobile": "node bin/cli.js --target mobile --output ./credentials.mobile.json",
+    "extract:tv": "node bin/cli.js --target tv --output ./credentials.tv.json",
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "keywords": [

secrets.json

@@ -1,7 +0,0 @@
-{
-  "version": "3.89.1",
-  "id": "rybm7nqzc5zfynw7ayef",
-  "secret": "luDwBZArJNnVnGTJLuoXZufy5czXMWgr",
-  "encoded": "cnlibTducXpjNXpmeW53N2F5ZWY6bHVEd0JaQXJKTm5WbkdUSkx1b1hadWZ5NWN6WE1XZ3I=",
-  "authorization": "Basic cnlibTducXpjNXpmeW53N2F5ZWY6bHVEd0JaQXJKTm5WbkdUSkx1b1hadWZ5NWN6WE1XZ3I="
-}