🗝️ Login

🍪 GTK cookie

Before making any login requests, you need a GTK cookie. It's an anti-bot security: it changes periodically.

GET /login.awp?gtk=1

In the response, there are 2 set-cookie headers. One of them starts with GTK= : extract its content.

🗝️ Initial login

POST /login.awp

🙃 Headers

• X-GTK: [your-GTK-cookie]

👤 Body

{
  "isReLogin": false,
  "identifiant": "my_username",
  "motdepasse": "my_password",
  "sesouvenirdemoi": true, // Allows you to refresh the token later on without password nor 2FA. Set to false to opt out.
  "uuid": "5c944aac-4d7c-44a1-b240-a471eee3ed28", // Random UUIDv4, must always be the same through all login requests.
  "fa": []
}