After 24h the next token stops working

[prapicault]

Describe the bug
After 24 hours, the next token stops working

To Reproduce
Steps to reproduce the behavior :

1. Use the following script:

import * as pronote from 'pawnote';

const credentials = {
  deviceUUID: 'magicmirror-device'
};
void async function main() {
  const handle = pronote.createSessionHandle();
  var sessionData = await pronote.loginQrCode(handle, {
    deviceUUID: credentials.deviceUUID,
    pin: "1234", // 4 numbers you provided in Pronote.
    qr: {"avecPageConnexion":false, "jeton":"D69F7DC6F2D71E3A16BC7FC9EC326B153ECD21F4436B6410A51E77B9BBEA4C009E6F2C86E8AED18017BA9E28D363DA70CAF5F0224F1F011D6C36D9AC434BEDA275CFA9CD6E6C76C36B8FC3C03AB9C0258975B8FEC91B388AF0EE0C99D818C6276398945AF5724840B63FCA787D0AAA81", "login":"E641C7BAD9A59DC9D57C63F1D682895C", "url":"https://pronote-vm.dev/mobile.eleve.html"}
  });
  console.info("Username:", sessionData.username);
  console.info("Next-Time Token:", sessionData.token);
  
  console.log("\n------ TOKEN:");
  
  while (true) {
    await new Promise(resolve => setTimeout(resolve, 10 * 60 * 1000)); // 15 minutes

    const next_handle = pronote.createSessionHandle();
    sessionData = await pronote.loginToken(next_handle, {
      // We use information from last session.
      kind: sessionData.kind,
      url: sessionData.url,
      username: sessionData.username,
      token: sessionData.token,
      deviceUUID: credentials.deviceUUID
    });
  }
}();

2. Replace the qr data with a valid one
3. Run the script for 24 hours.
4. Notice that after 24 hour, the script fails with the exception

Error occurred: SessionExpiredError: The session has expired
  SessionExpiredError: The session has expired
    at new te (file:///home/mirror/MagicMirrorSetup/pronote-info-getter/node_mod
ules/pawnote/dist/index.mjs:1:12264)
    at Object.promise (file:///home/mirror/MagicMirrorSetup/pronote-info-getter/
node_modules/pawnote/dist/index.mjs:1:14119)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5
)

Expected behavior
After 24 hours, the refresh should keep working

Desktop (please complete the following information) :

• OS: Linux
• Browser: N/A
• Version: Pawnote version: 1.6.1

[Vexcited]

Sorry for the inconvenience, after checks it might look like PRONOTE implemented kind of a whitelist on user agents and it's currently not deployed globally on Pawnote.js because I'm not 100% sure yet.

We'll check it together!

Can you please install the following dependency for type safety: npm add -D @literate.ink/utilities@1.0.0-10641118381.1

Then, add the following code to your codebase.

import type { Fetcher } from "@literate.ink/utilities";

const fetcher: Fetcher = async (options) => {
  const response = await fetch(options.url, {
    method: options.method,
    headers: {
      ...options.headers,
      // Extracted from the official PRONOTE app on iOS 26.0
      "User-Agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 19_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 PRONOTE Mobile APP Version/2.0.11"
    },
    body: options.method !== "GET" ? options.content : void 0,
    redirect: options.redirect
  });

  const content = await response.text();

  return {
    content,
    status: response.status,

    get headers() {
      return response.headers;
    }
  };
};

Finally, use it when you create your session handles, like this.

const handle = pronote.createSessionHandle(fetcher);
// ...
const next_handle = pronote.createSessionHandle(fetcher);

Please, tell me if this resolves your issue on the long run.

[Vexcited]

Can you please try out the new release (1.6.2) and see if your issue is resolved?

[prapicault]

My apologies for the delay..
Unfortunately, the fix did not address the issue. It still fails with the same issue: " SessionExpiredError: The session has expired"

[Gabriel29306]

I don't know if it can help, but my own headers for the initial request were:

Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Linux; Android 15; SM-S911U1 Build/AP3A.240905.015.A2; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/140.0.7339.51 Mobile Safari/537.36  PRONOTE Mobile APP Version/2.0.11
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
X-Requested-With: com.IndexEducation.Pronote
Accept-Encoding: gzip, deflate
Accept-Language: fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7

I note there is a X-Requested-With which probably have a meaning, I'm not sure there is an effect.

[Vexcited]

X-Requested-With is only present on Android, it's a side effect of Android WebViews.
On iOS this header is not present and it does not cause any issue.

[Vexcited]

@prapicault can I ask you why are you refreshing the session every 15 minutes?
Keeping the session alive is not enough?

• https://js.pawnote.docs.literate.ink/functions/startpresenceinterval
• https://github.com/LiterateInk/Pawnote.js/blob/main/examples/presence.ts

[prapicault]

@prapicault can I ask you why are you refreshing the session every 15 minutes? Keeping the session alive is not enough?

• https://js.pawnote.docs.literate.ink/functions/startpresenceinterval
• https://github.com/LiterateInk/Pawnote.js/blob/main/examples/presence.ts

Because I did not know it existed? 😬
My goal is to fetch the timetable a few times a day and I thought the only way to do this was to refresh the session to not be disconnected.
I'll give a try to the presence API and report.

[prapicault]

Bad news, my ip got banned 😬
I'll report when I'm through with this. Sorry for the inconvenience

[prapicault]

The invocation of pronote.presence is raising the following exception.:

TypeError: Cannot read properties of undefined (reading 'version')
    at Module.Oe (file:///Users/pascal/src/magicmirrorsetup/pronote-info-getter/node_modules/pawnote/dist/index.mjs:1:23635)
    at main (file:///Users/pascal/src/magicmirrorsetup/pronote-info-getter/presence.js:13:17)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)

Here is a reproducer:

import * as pronote from 'pawnote';

void async function main () {
  const handle = pronote.createSessionHandle();
  var session = await pronote.loginQrCode(handle, {
      deviceUUID: 'magic-mirror',
      pin: "1234", // 4 numbers you provided in Pronote.
      qr: <add qrcode>
    });

  console.log("LOGGED IN")
  // You can maually make presence requests.
  await pronote.presence(session);

  // Start presence requests every 2 minutes.
  pronote.startPresenceInterval(session);
  // `setInterval` return value will be stored under `session.presence`.

  // Stop presence after 5 minutes.
  setTimeout(() => pronote.clearPresenceInterval(session), 5 * 60 * 1000);
}();

[raphckrman]

Try to replace session with handle here:

await pronote.presence(handle);
pronote.startPresenceInterval(handle);
setTimeout(() => pronote.clearPresenceInterval(handle), 5 * 60 * 1000);

[prapicault]

👋 Thanks for your patience. I finally got around to test this. I have added the startPresenceInterval call as mentioned above. The process stays up for a little over 24 hours and after that it fails wih the following message: D [SessionExpiredError]: The session has expired.

I must be missing something but I don't see what it is.