scratchcloud/session.js

A powerful Node.js library for Scratch cloud manipulation

const fetch = require('node-fetch');


const cookie = {
  parse: c => {
    let cookies = {};
    c.split(';').forEach(item => {
      if(['Domain', 'expires', 'Path', 'Max-Age'].includes(item.split('=')[0].trim())) {} else
      if(item.indexOf('=') != -1)
        cookies[item.split('=')[0].trim()] = item.split('=')[1].trim()
    });
    return cookies;
  }
}


class Session {
  constructor(username = process.env.USERNAME, password = process.env.PASSWORD, callback) {
    this.cookie = "";
    if(!process.env.TOKEN && !this.token) {
      this.getInitCookie(() => {
        this.getCSRFToken(() => {
          this.construct(username, password, callback);
        });
      });
    } else {
      this.construct(username, password, callback);
    }
  }

  construct(username, password, callback) {
    let self = this;
    fetch('https://scratch.mit.edu/accounts/login/', {
      method: "POST",
      headers: {
        'X-Requested-With': 'XMLHttpRequest',
        'referer': 'https://scratch.mit.edu',
        'X-CSRFToken': self.token || process.env.TOKEN || 'a',
        'Cookie': self.cookie,//`scratchcsrftoken=${self.token || process.env.TOKEN || 'a'}; scratchlanguage=en;`,
        "accept": "application/json",
        "accept-language": "en-US,en;q=0.9",
        "content-type": "application/json",
        "sec-fetch-dest": "empty",
        "sec-fetch-mode": "cors",
        "sec-fetch-site": "same-origin",
        "origin": "https://scratch.mit.edu/",
        "sec-ch-ua": "\" Not;A Brand\;v=\"99\", \"Google Chrome\";v=\"91\", \"Chromium\";v=\"91\"",
        "sec-ch-ua-mobile": "?0",
        "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36"
      },
      body: JSON.stringify({
        username: username,
        password: password,
        useMessages: true
      }),
      "referrer": "https://scratch.mit.edu/",
      "referrerPolicy": "strict-origin-when-cross-origin",
      "mode": "cors",
      "credentials": "include"
    }).then(r=>{
        let arr = Array.from(r.headers.get('set-cookie').split(', '));
        arr = arr.map(cookie.parse);
        let obj = {};
        for (let i of arr)
          for (let j in i)
            obj[j] = i[j];
        self.session = obj.scratchsessionsid;
        self.token = obj.scratchcsrftoken.split('"').join('');
        return r.json()
      }).then(d=>{
        self.username = d[0].username;
        callback(this);
      });
  }

  getInitCookie(callback) {
    const self = this;
    fetch("https://scratch.mit.edu/").then(r=>{
      if(r.headers.get("set-cookie")) {
        let arr = Array.from(r.headers.get('set-cookie').split(', '));
        arr = arr.map(cookie.parse);
        let obj = {};
        for (let i of arr)
          for (let j in i)
            obj[j] = i[j];
        for(let i in obj) {
          if(obj[i] != '') self.cookie += i + "=" + obj[i] + "; ";
        }
      }
      callback();
    });
  }

  getCSRFToken(callback) {
    const self = this;
    fetch("https://scratch.mit.edu/csrf_token/").then(r=>{
      let arr = Array.from(r.headers.get('set-cookie').split(', '));
      arr = arr.map(cookie.parse);
      let obj = {};
      for (let i of arr)
        for (let j in i)
          obj[j] = i[j];
      for(let i in obj) {
        if(obj[i] != '') self.cookie += i + "=" + obj[i] + "; ";
      }
      self.token = obj.scratchcsrftoken.split('"').join('');
      callback();
    });
  }
}
Session.createAsync = (username = process.env.USERNAME, password = process.env.PASSWORD) => {
  return new Promise((resolve, reject) => {
    const session = new Session(username, password, resolve);
  });
}

module.exports = Session;