Getting a CHALLENGE when logging in

[dr-robert-li]

Appears to be resolved when modifying the client to use the most recent user agent:

    REQUEST_HEADERS = {
        "user-agent": " ".join(
            [
                "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_1_1)",
                "AppleWebKit/537.36 (KHTML, like Gecko)",
                "Chrome/131.0.6778.205 Safari/537.36",
            ]
        ),
        # "accept": "application/vnd.linkedin.normalized+json+2.1",
        "accept-language": "en-AU,en-GB;q=0.9,en-US;q=0.8,en;q=0.7",
        "x-li-lang": "en_US",
        "x-restli-protocol-version": "2.0.0",
        # "x-li-track": '{"clientVersion":"1.2.6216","osName":"web","timezoneOffset":10,"deviceFormFactor":"DESKTOP","mpName":"voyager-web"}',

Perhaps it can be recommended that the user agent be dynamically generated from an API request to this end point making sure to parse for the latest version of Chrome: https://deviceandbrowserinfo.com/api/user_agents/humans

[romsVLM]

That work fine in local, but if you put your script on production server, Linkedin challenge you (cause the IP)

[wischmcj]

@dr-robert-li I was able to pass the challenge by adding some code to client.Client.authorize. You can find the modified version of the method below.
Note: This works initially, but LinkedIn will eventually (if you send too many requests) start presenting a captcha at login, in which case this code stops working.

@nsandman thoughts on adding this code in? I have a branch locally, but do not have permission to push.

` def authenticate(self, username, password):
"""
Authenticate with Linkedin.

    Return a session object that is authenticated.
    """
    self._set_session_cookies(self._request_session_cookies())

    payload = {
        "session_key": username,
        "session_password": password,
        "JSESSIONID": self.session.cookies["JSESSIONID"],
    }
    #### START MODIFIED CODE
    post_args = [f"{Client.AUTH_BASE_URL}/uas/authenticate",]
    post_kwargs = {
        "data": payload,
        "cookies": self.session.cookies,
        "headers": Client.AUTH_REQUEST_HEADERS,
        "verify": False
    }

    res = requests.post(
        *post_args,
        **post_kwargs
    )

    data = res.json()
    
    if data and data["login_result"] != "PASS":
        chal_url_params = data['challenge_url'].split('&')
        for param in chal_url_params:
            key, value = param.split('=')
            if key == 'csrfToken':
                # new csrf token is passed in the response
                post_kwargs['data']['_token'] = value
                # we might want to update the headers here as well?
                # seems to work without it though
                break

        logger.warning('challenge exception, re-authenticating')
        res = requests.post(
            *post_args,
            **post_kwargs
        )
        data = res.json()
    #### END MODIFIED CODE

    if data and data["login_result"] != "PASS":
         raise ChallengeException(data["login_result"])

    if res.status_code == 401:
        raise UnauthorizedException()

    if res.status_code != 200:
        raise Exception()

    self._set_session_cookies(res.cookies)

`

[hirios]

@wischmcj still work?