user-647
02-10-2018, 08:21 PM
for a long time now, I've been making this REST API call to the BBC's servers to search for programs.
where MYQUERY is some appropriately encoded search string and APIKEY is one I found by snooping on the network, and verifying with other people their android client used the same one.
When I make the request, it comes back with http 403 forbidden. I tried changing the URL to https, but no joy.
I set up a squid proxy and tried searching on the android app and saw ibl.api.bbci.co.uk:443 as a CONNECT request, i.e. pass-through, and so using tcpdump/wireshark to snoop on the protocol is no longer possible. I'd set up a DNS hack on my proxy and a self-signed cert, but I'm sure Auntie Beeb's developers are wise to such things.
Thanks for any ideas!
Code:
http://search-suggest.api.bbci.co.uk/search-suggest/suggest?q=MYQUERY&scope=iplayer&format=bigscreen-2&mediatype=video&mediaset=android-phone-rtmp-high&apikey=APIKEY'where MYQUERY is some appropriately encoded search string and APIKEY is one I found by snooping on the network, and verifying with other people their android client used the same one.
When I make the request, it comes back with http 403 forbidden. I tried changing the URL to https, but no joy.
I set up a squid proxy and tried searching on the android app and saw ibl.api.bbci.co.uk:443 as a CONNECT request, i.e. pass-through, and so using tcpdump/wireshark to snoop on the protocol is no longer possible. I'd set up a DNS hack on my proxy and a self-signed cert, but I'm sure Auntie Beeb's developers are wise to such things.
Thanks for any ideas!