1.3.3

.github/FUNDING.yml

@@ -0,0 +1 @@
+custom: ['t.me/tribute/app?startapp=dqW2']

.github/workflows/extract.yml

@@ -0,0 +1,40 @@
+name: Extract
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 6 * * 6' # Runs every Saturday at 06:00 UTC
+
+jobs:
+  extract:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+
+      - name: Install JADX
+        run: |
+          JADX_VERSION=$(curl -s "https://api.github.com/repos/skylot/jadx/releases/latest" | grep -Po '"tag_name": "v\K[0-9.]+')
+          echo "Installing JADX version ${JADX_VERSION}..."
+          curl -Lo jadx.zip "https://github.com/skylot/jadx/releases/download/v${JADX_VERSION}/jadx-${JADX_VERSION}.zip"
+          unzip -q jadx.zip -d jadx-dist
+          echo "$(pwd)/jadx-dist/bin" >> $GITHUB_PATH
+          rm jadx.zip
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Extract app credentials
+        run: npm run extract:mobile && npm run extract:tv
+
+      - uses: stefanzweifel/git-auto-commit-action@v5

.github/workflows/publish.yml

@@ -0,0 +1,51 @@
+name: Publish
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          registry-url: https://registry.npmjs.org/
+      - run: npm ci
+
+      # Extract version from package.json and determine release channel
+      - name: Parse version and determine release channel
+        id: version
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          echo "PACKAGE_VERSION=$VERSION" >> $GITHUB_OUTPUT
+
+          if [[ $VERSION == *"-alpha."* ]]; then
+            echo "NPM_TAG=alpha" >> $GITHUB_OUTPUT
+            echo "PRERELEASE=true" >> $GITHUB_OUTPUT
+          elif [[ $VERSION == *"-beta."* ]]; then
+            echo "NPM_TAG=beta" >> $GITHUB_OUTPUT
+            echo "PRERELEASE=true" >> $GITHUB_OUTPUT
+          else
+            echo "NPM_TAG=latest" >> $GITHUB_OUTPUT
+          fi
+
+      # Publish with the appropriate tag
+      - name: Publish to npm
+        run: npm publish --tag ${{ steps.version.outputs.NPM_TAG }}
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      # Only create GitHub releases for stable versions
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          prerelease: ${{ steps.version.outputs.PRERELEASE == 'true' }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+permissions:
+  contents: write

.gitignore

@@ -1,5 +1,7 @@
 /node_modules
 .DS_Store
+/jadx-dist
+/jadx.zip
 /crunchyroll
 crunchyroll.apk
 crunchyroll.xapk

README.md

@@ -1,31 +1,34 @@
 # Crextractor
 
-Utility for extracting credentials from the Crunchyroll Android app
+Utility for extracting credentials from the Crunchyroll Android app (both TV and mobile versions).
+
+The [credentials](https://github.com/vitalygashkov/crextractor/blob/main/credentials.tv.json) are [automatically](https://github.com/vitalygashkov/crextractor/actions/workflows/extract.yml) updated once a week (if there are any changes).
 
 ## Prerequisites
 
 - [Node.js](https://nodejs.org/en)
 - [jadx](https://github.com/skylot/jadx)
 
-## Installation
+## Usage
+
+### Library
 
 ```bash
 npm i crextractor
 ```
 
-## Usage
+#### Fetch ready credentials from this GitHub repository
-
-### Fetching already extracted secrets
 
 ```js
-async function main() {
+import { pull } from 'crextractor';
-  const url = 'https://raw.githubusercontent.com/vitalygashkov/crextractor/refs/heads/main/credentials.tv.json';
-  const data = await fetch(url).then((response) => response.json());
 
-  // You can use the extracted secrets to obtain access tokens for Crunchyroll APIs
+async function main() {
+  const credentials = await pull('tv');
+
+  // You can use the extracted credentials to obtain access tokens for Crunchyroll APIs
   const response = await fetch('https://beta-api.crunchyroll.com/auth/v1/token', {
     headers: {
-      Authorization: data.authorization,
+      Authorization: credentials.authorization, // Ready HTTP header in the format `Basic <encoded>`, can be used to access some Crunchyroll APIs
       'User-Agent': 'Crunchyroll/ANDROIDTV/3.42.1_22267 (Android 16; en-US; sdk_gphone64_x86_64)',
       // ...
     },
@@ -37,17 +40,23 @@ async function main() {
 }
 ```
 
-#### Library
+#### Extract credentials from the latest APK using jadx
 
 ```js
 import { extract } from 'crextractor';
 
-const { id, secret, encoded, authorization } = await extract();
+async function main() {
+  const { id, secret, encoded, authorization } = await extract();
+  // id - Crunchyroll app ID
+  // secret - Crunchyroll app secret
+  // encoded - Base64 encoded `id:secret` string
+  // authorization - ready HTTP header in the format `Basic <encoded>`, can be used to access some Crunchyroll APIs
 
-// Do something with the extracted secrets
+  // Do something with the extracted credentials
+}
 ```
 
-#### Command-line interface
+### Command-line interface
 
 ```bash
 npx crextractor --target mobile --output ./credentials.mobile.json

bin/cli.js

@@ -14,7 +14,7 @@ const args = parseArgs({
     },
     cleanup: {
       type: 'boolean',
-      default: false,
+      default: true,
     },
   },
 });

credentials.mobile.json

@@ -1,7 +1,7 @@
 {
-  "version": "3.89.2 (952)",
+  "version": "3.92.3 (977)",
-  "id": "n0q2nxl37zig0dqn0aio",
+  "id": "dvoxpszj59depczpxvwj",
-  "secret": "P0j3he4N8UG8W2w0-PvDadjGuv62fN2d",
+  "secret": "_VQmMQlJw65tMCIT-SvM2r6OvBTs85Gf",
-  "encoded": "bjBxMm54bDM3emlnMGRxbjBhaW86UDBqM2hlNE44VUc4VzJ3MC1QdkRhZGpHdXY2MmZOMmQ=",
+  "encoded": "ZHZveHBzemo1OWRlcGN6cHh2d2o6X1ZRbU1RbEp3NjV0TUNJVC1Tdk0ycjZPdkJUczg1R2Y=",
-  "authorization": "Basic bjBxMm54bDM3emlnMGRxbjBhaW86UDBqM2hlNE44VUc4VzJ3MC1QdkRhZGpHdXY2MmZOMmQ="
+  "authorization": "Basic ZHZveHBzemo1OWRlcGN6cHh2d2o6X1ZRbU1RbEp3NjV0TUNJVC1Tdk0ycjZPdkJUczg1R2Y="
 }

credentials.tv.json

@@ -1,7 +1,7 @@
 {
-  "version": "3.42.1 (22267)",
+  "version": "3.45.2 (22274)",
-  "id": "bmbrkxyx3d7u6jsfyla4",
+  "id": "cb9nzrmht32vgtexygko",
-  "secret": "AIN4D5VE_cp0wVzfNoP0YqHUrYFp9hSg",
+  "secret": "KUwmMjJXxxursHITd1zvl2C2yQaQo8N4",
-  "encoded": "Ym1icmt4eXgzZDd1NmpzZnlsYTQ6QUlONEQ1VkVfY3Awd1Z6Zk5vUDBZcUhVcllGcDloU2c=",
+  "encoded": "Y2I5bnpybWh0MzJ2Z3RleHlna286S1V3bU1qSlh4eHVyc0hJVGQxenZsMkMyeVFhUW84TjQ=",
-  "authorization": "Basic Ym1icmt4eXgzZDd1NmpzZnlsYTQ6QUlONEQ1VkVfY3Awd1Z6Zk5vUDBZcUhVcllGcDloU2c="
+  "authorization": "Basic Y2I5bnpybWh0MzJ2Z3RleHlna286S1V3bU1qSlh4eHVyc0hJVGQxenZsMkMyeVFhUW84TjQ="
 }

crextractor.d.ts

@@ -1,10 +1,24 @@
-export function extractSecrets(): Promise<{
+export type CrunchyrollAppCredentials = {
   // Crunchyroll app ID
   id: string;
   // Crunchyroll app secret
   secret: string;
   // Base64 encoded `id:secret` string
   encoded: string;
-  // HTTP header with Basic Authorization to access Crunchyroll mobile APIs
+  // Ready HTTP header in the format `Basic <encoded>`, can be used to access some Crunchyroll APIs
   authorization: string;
-}>;
+};
+
+/**
+ * Extract credentials from the Crunchyroll Android APK using jadx.
+ */
+export function extract(options?: {
+  target?: 'mobile' | 'tv';
+  output?: string;
+  cleanup?: boolean;
+}): Promise<CrunchyrollAppCredentials>;
+
+/**
+ * Fetch ready credentials from the GitHub repository.
+ */
+export function pull(options?: { target: 'mobile' | 'tv' }): Promise<CrunchyrollAppCredentials>;

crextractor.js

@@ -1,16 +1,12 @@
 const { execSync } = require('node:child_process');
 const { join } = require('node:path');
 const { readdir, readFile, writeFile, rm } = require('node:fs/promises');
-const { download } = require('molnia');
 const { existsSync } = require('node:fs');
+const { download } = require('molnia');
 
 const downloadMobileApk = async () => {
-  const source = 'https://apkcombo.com/crunchyroll/com.crunchyroll.crunchyroid/download/apk';
+  const url = 'https://api.qqaoop.com/v11/apps/com.crunchyroll.crunchyroid/download?userId=1';
-  const page = await fetch(source);
+  const filepath = join(process.cwd(), 'crunchyroll.apk');
-  const html = await page.text();
-  const route = '/r2' + html.split('/r2')[1]?.split('"')[0];
-  const url = `https://apkcombo.com${route}`;
-  const filepath = join(process.cwd(), 'crunchyroll.xapk');
   await download(url, {
     output: filepath,
     onError: (error) => console.error(error),
@@ -21,7 +17,7 @@ const downloadMobileApk = async () => {
 const downloadTvApk = async () => {
   const source = 'https://webservices.aptoide.com/webservices/3/getApkInfo';
   const formData = new FormData();
-  formData.append('identif', 'id:71305225');
+  formData.append('identif', 'id:71666229');
   formData.append('mode', 'json');
   const response = await fetch(source, {
     method: 'POST',
@@ -100,10 +96,15 @@ const parseVersion = async (decompiledDir) => {
   }
 };
 
-const extract = async ({ target, output, cleanup = false } = {}) => {
+const extract = async ({ target = 'mobile', output, cleanup = false } = {}) => {
   console.log('Downloading APK...');
   const apkPath = target === 'tv' ? await downloadTvApk() : await downloadMobileApk();
 
+  if (!existsSync(apkPath)) {
+    console.error('Unable to find APK (possibly a download error)');
+    return;
+  }
+
   console.log('Decompiling APK...');
   const decompiledDir = decompileApk(apkPath);
 
@@ -132,4 +133,10 @@ const extract = async ({ target, output, cleanup = false } = {}) => {
   return { version, id, secret, encoded, authorization };
 };
 
-module.exports = { extract };
+const pull = async ({ target = 'mobile' } = {}) => {
+  const url = `https://raw.githubusercontent.com/vitalygashkov/crextractor/refs/heads/main/credentials.${target}.json`;
+  const credentials = await fetch(url).then((response) => response.json());
+  return credentials;
+};
+
+module.exports = { extract, pull };

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "crextractor",
-  "version": "1.2.0",
+  "version": "1.3.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "crextractor",
-      "version": "1.2.0",
+      "version": "1.3.3",
       "funding": [
         {
           "type": "individual",
@@ -15,7 +15,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "molnia": "^0.1.5"
+        "molnia": "^0.1.7"
       },
       "bin": {
         "crextractor": "bin/cli.js"
@@ -37,9 +37,9 @@
       }
     },
     "node_modules/molnia": {
-      "version": "0.1.5",
+      "version": "0.1.7",
-      "resolved": "https://registry.npmjs.org/molnia/-/molnia-0.1.5.tgz",
+      "resolved": "https://registry.npmjs.org/molnia/-/molnia-0.1.7.tgz",
-      "integrity": "sha512-Kb3bhlvNVWJ9Z8tGZGkhmChpXQY8OLFPkxXFvLJb+foLwfH7JyyJl+DbKuUKAIK1vnxs5sBFuQb3wxOIwWBpiA==",
+      "integrity": "sha512-wCezzcu2sRybrJb9ltrBEWwzO9NU2DRgxZw5Gr1g2QrnwrNo+olE3cAiD3Q1Y76rCde1qXBUmEuZ13aKXew+AQ==",
       "funding": [
         {
           "type": "individual",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "crextractor",
-  "version": "1.2.0",
+  "version": "1.3.3",
   "description": "Utility for extracting credentials from the Crunchyroll Android app",
   "main": "crextractor.js",
   "bin": {
@@ -15,6 +15,8 @@
   "type": "commonjs",
   "scripts": {
     "start": "node bin/cli.js",
+    "extract:mobile": "node bin/cli.js --target mobile --output ./credentials.mobile.json",
+    "extract:tv": "node bin/cli.js --target tv --output ./credentials.tv.json",
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "keywords": [
@@ -33,7 +35,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "molnia": "^0.1.5"
+    "molnia": "^0.1.7"
   },
   "devDependencies": {
     "typescript": "^5.9.2"