Support for bgutil-ytdlp-pot-provider as used by MusicAssistant

[Bluscream]

https://github.com/Brainicism/bgutil-ytdlp-pot-provider/tree/master/server is a docker container i have to have running anyway to get MusicAssistant to work with YTM, so it would be nice if this lib would support its contentBinding+poToken response as in https://github.com/Bluscream/youtube-music-api-proxy/blob/ai/Models/PoTokenResponse.cs without the need for visitordata

[IcySnex]

Hello, thanks for the suggestion.

I am not quite sure what contentBinding is used for and how it would replace the visitorData. From my understanding every single request always has the visitorData sent along. Also, as far as I know, the content binding parameters are injected into the poToken when created using the BotGuard system (https://icysnex.github.io/YouTubeSessionGenerator/reference/YouTubeSessionGenerator/BotGuard/BotGuardContentBinding.html) - are you referring to this or something different?

Do you maybe have some documentation or code where this is used, as I'm not quite familiar with yt-dlp. Also what exactly is "MusicAssistant", perhaps it could be integrated in the future.

Best Regards :)

[Bluscream]

1. Contentbinding seems to refer to everything encompassing visitorData? they have some docs on it
   • https://github.com/Brainicism/bgutil-ytdlp-pot-provider/tree/master/server#content-binding
   • https://github.com/yt-dlp/yt-dlp/wiki/PO-Token-Guide#po-tokens-for-gvs
   • https://github.com/search?q=repo%3Ayt-dlp%2Fyt-dlp%20potoken&type=code
     i am talking out of my ass here because i didnt go deep into this auth stuff yet. i just know that your generator needs visitorData and doesnt work some times, probably because its trying to generate tokens too often? and the "pot-provider" needs other data than just visitorData, it returns visitor_data being deprecated
2. MusicAssistant was initially created as a addon for HomeAssistant but can also be selfhosted in a normal docker container now.

[Bluscream]

okay maybe different potoken scopes need different content bindings?

https://github.com/yt-dlp/yt-dlp/blob/6ae3543d5a1feea0c546571fd2782b024c108eac/test/test_pot/test_pot_builtin_utils.py#L12-L25

    @pytest.mark.parametrize('client_name, context, is_authenticated, expected', [
        *[(client, context, is_authenticated, expected) for client in [
            'WEB', 'MWEB', 'TVHTML5', 'WEB_EMBEDDED_PLAYER', 'WEB_CREATOR', 'TVHTML5_SIMPLY_EMBEDDED_PLAYER', 'TVHTML5_SIMPLY']
          for context, is_authenticated, expected in [
            (PoTokenContext.GVS, False, ('example-visitor-data', ContentBindingType.VISITOR_DATA)),
            (PoTokenContext.PLAYER, False, ('example-video-id', ContentBindingType.VIDEO_ID)),
            (PoTokenContext.SUBS, False, ('example-video-id', ContentBindingType.VIDEO_ID)),
            (PoTokenContext.GVS, True, ('example-data-sync-id', ContentBindingType.DATASYNC_ID)),
        ]],
        ('WEB_REMIX', PoTokenContext.GVS, False, ('example-visitor-data', ContentBindingType.VISITOR_DATA)),
        ('WEB_REMIX', PoTokenContext.PLAYER, False, ('example-visitor-data', ContentBindingType.VISITOR_DATA)),
        ('ANDROID', PoTokenContext.GVS, False, (None, None)),
        ('IOS', PoTokenContext.GVS, False, (None, None)),
    ])

[IcySnex]

The python library you have linked states that they use BgUtils under the hood. The C# library I have created is also heavily inspired by this exact library - so everything the base JS library is able to do, the YouTubeSessionGenerator is also able to do.

i just know that your generator [...] doesnt work some times

This is pretty weird, since it's doing the exact same things as BgUtils and strictly follows their guide - even using Node.js and jsdom under the hood. Could you please provide a little more information about the error and then create a new issue here so I can debug?

i just know that your generator needs visitorData

I may have slipped up with naming the parameter, but you can also pass a videoId, dataSyncId or any other identifier which should be minted to the poToken. I didn't really realize that at the point of creation, but it's clearly stated in the BgUtils guide.
For additional content bindings you can also pass a BotGuardContentBinding into the ProofOfOriginTokenAsync method. This is the exact same thing as in the BgUtils content binding.

[Bluscream]

So i can just do with these values?

YouTubeMusicClient client = new(logger, geographicalLocation, "CgtaOVU2aWdqSThLcyjUp4fFBjIKCgJERRIEEgAgSw%3D%3D" ("contentBinding" from api), poToken from api, cookies);

[IcySnex]

Hmm, as far as I know the content binding is only captured inside the poToken during the BotGuard snapshot (more info):

[...] you'll get a function that can be used to mint WebPO tokens. Call it with the value you want to use as content binding, such as a Visitor ID, Data Sync ID (if you're signed in), or a Video ID.

---

After that, the content binding is not specified anywhere else. But correct me if I'm wrong - this whole YouTube authentication stuff is very undocumented and rather confusing in my eyes.

So to use the content binding specify it during the creation of the poToken instead of when creating the YouTube client:

YouTubeSessionConfig config = new()
{
    JsEnvironment = jsEnv
};
YouTubeSessionCreator creator = new(config);

string identifier = "VISITOR_DATA / VIDEO_ID / DATA_SYNC_ID"
BotGuardContentBinding contentBinding = new(
  c: "...",
  e: "...",
  ...) 

string poToken = await creator.ProofOfOriginTokenAsync(identifier, contentBinding);