Issue affecting your YoutTube-HLS script, YTLite, YTUHD, and similar software.

[ivansavra1]

Hi, I’m adding this so you’re aware of an issue that’s on the works getting fixed, it impacts your userscript, so be on the lookout to a fix on similar projects.
PoomSmart/YTUHD#56

[ivansavra1]

This is my issue on YTLite: dayanch96/YTLite#364

[pepeloni-away]

In my case this happens because the /player request goes first, fails with auth required error, and then the userscript intercepts and caches the required X-Goog-Visitor-Id header so the next /player request(s) will succeed with the cached header.

For me this was only a problem the first time a premium video would be opened in an incognito/private window, and since a reload would fix it i didn't bother to look into it til now. The visitor ID can be grabbed from the /watch page response or from the ytcfg.data_ object, it is the same as VISITOR_DATA.

A quick fix that seems to work for my userscript is to replace this if statement with

if (useAuth /*&& isUserLoggedIn()*/) {
        xmlhttp.withCredentials = true;
        Config.GOOGLE_AUTH_HEADER_NAMES.forEach((headerName) => {
            if (headerName === 'X-Goog-Visitor-Id') {
                xmlhttp.setRequestHeader(headerName, getYtcfgValue('VISITOR_DATA'))
            } else
            xmlhttp.setRequestHeader(headerName, get(headerName));
        });
    }

[ivansavra1]

Thank you for looking it up! I’ll relay that info to the other issues as maybe the cause of this problem is the same.

By the way, do you have a Mac or iPhone? If so, could you check why the script won’t work with Userscripts? It’s the most popular Tampermonkey alternative, I’m trying to switch because TM has weird issues on the platform, it works with it but not with Userscripts, and most scripts work fine.

👋🏻

[pepeloni-away]

Can't help you with apple debugging. I read the userscripts repo readme and found this limitation that userscript managers usually don't have:

When using API methods, it's only possible to inject into the content script scope due to security concerns.

_{-- from the first paragraph in the api section.}

That means code that uses the unsafeWindow keyword won't work as intended/at all.