ig-pixelfed-mirror/igmirror.py

#!/usr/bin/python3
import threading
import requests
import hashlib
import string
import random
import time
import json
import os
import re

CONFIG = {}

def add_igaccount(acc_id):
    accfile = './db/accounts/{}'.format(acc_id)

    # user_create script must exist before running the API server
    if not os.path.exists('./scripts/user_create'):
        print('E| You may need to initialize the server environment first')
        return 1

    if not os.path.exists(accfile):
        # get all profile data from instagram acc
        data = getig_user_data(acc_id)

        # this tells us the user probably don't exist (or also might be a network error?)
        if len(data.keys()) == 0:
            print('E| User "{}" does not exist on Instagram'.format(acc_id))
            return 2

        # we don't and can't mirror private profiles
        #  (well, we can if we follow them and follow back, but we just don't need that)
        if data['graphql']['user']['is_private']:
            print('E| User "{}" is a private account. We just won\'t mirror that!'.format(acc_id))
            return 3

        # get account display name to create it
        name = data['graphql']['user']['full_name']
        name = re.sub(r'[^a-zA-Z0-9_\s]', '', name)
        account = {
            'name': name,
            'username': acc_id,
            'password': random_string()
        }
        # we are completely sure the parameters can't contain unwanted characters
        #  a shell exploit is not possible here :)
        os.system('./scripts/user_create \'{}\' \'{}\' \'{}\''.format(\
            account['name'], account['username'], account['password']))

        # save the account login information for updates and mirroring
        db_set('accounts', acc_id, account)
        db_set('posts', acc_id, [])

        # set Pixelfed account data for the username
        pixelfed_setpic(acc_id, data['graphql']['user']['profile_pic_url'])
        pixelfed_setinfo(acc_id, data['graphql']['user']['biography'],\
            data['graphql']['user']['external_url'])
        update_igaccount_async(acc_id, False)
    else:
        print('W| User "{}" already exists in local database'.format(acc_id))
    return 0

def update_igaccount_async(acc_id, profileset=True):
    threading.Thread(target=update_igaccount, args=(acc_id, profileset,)).start()

def update_igaccount(acc_id, profileset=True):
    # if account does not exist, we stop the mirroring process
    accfile = './db/accounts/{}'.format(acc_id)
    if not os.path.exists(accfile):
        print('E| User "'+acc_id+'" has not been created yet, maybe you wanted to call /<username>/add ?')
        return 1

    data = getig_user_data(acc_id)
    if profileset:
        pixelfed_setpic(acc_id, data['graphql']['user']['profile_pic_url'])
        pixelfed_setinfo(acc_id, data['graphql']['user']['biography'],\
                data['graphql']['user']['external_url'])
    pixelfed_dlposts(acc_id, data['graphql']['user'])

def update_allaccounts_async():
    threading.Thread(target=update_allaccounts).start()

def update_allaccounts():
    # update all accounts with a timeout of 20 seconds
    sleeptime = int(config()['timeout_btw_accounts'])
    accounts = os.listdir('./db/accounts')
    random.shuffle(accounts)
    for acc_id in accounts:
        print('I| mirroring account "{}"...'.format(acc_id))
        update_igaccount(acc_id)
        print('I| timeout {} seconds'.format(sleeptime))
        time.sleep(sleeptime)
        print()
    print('I| done updating all accounts')

def delete_statuses(acc_id):
    accdata = db_get('accounts', acc_id)
    if not pixelfed_islogged(acc_id, accdata):
        print('E| user "{}" is not logged in. Please log in'.format(acc_id))
        return 1

    # check our information to validate our account exists
    r = requests.get( 'https://'+config()['instance']+'/api/pixelfed/v1/accounts/verify_credentials', cookies=accdata['cookie'])
    if r.status_code != 200:
        print('E| user "{}" is not logged in. Please log in'.format(acc_id))
        return 2
    pixdata = json.loads(r.text)
    if not 'id' in pixdata:
        print('E| fatal! API is not working!. Might be a connectivity issue or the Account does Not Exist??'.format(acc_id))
        return 3

    _, _token = pixelfed_token_url('', accdata['cookie'])
    _headers = {
        'Content-Type': 'application/json',
        'X-Requested-With': 'XMLHttpRequest',
        'X-CSRF-TOKEN': _token,
        'X-XSRF-TOKEN': accdata['cookie']['XSRF-TOKEN']
    }

    # delete all statuses on pixelfed by Polling next N items
    while True:
        r2 = requests.get('https://'+config()['instance']+'/api/pixelfed/v1/accounts/{}/statuses?min_id=1'.format(pixdata['id']),\
            cookies=accdata['cookie'] )
        jsdata = json.loads(r2.text)
        if not jsdata:
            break
        for status in jsdata:
            print('I| deleting status "{}" for account "{}"... '.format(status['id'], acc_id), end='')
            r3 = requests.post('https://'+config()['instance']+'/i/delete', json={'item': status['id'], 'type': 'status'},\
                cookies=accdata['cookie'], headers=_headers)
            print(r3.status_code)

    db_set('posts', acc_id, [])
    print('I| done nuking account posts for "{}"'.format(acc_id))
    return 0

def logout_account(acc_id):
    accdata = db_get('accounts', acc_id)
    del accdata['cookie']
    db_set('accounts', acc_id, accdata)

def pixelfed_islogged(acc_id, accdata=None):
    if accdata is None:
        accdata = db_get('accounts', acc_id)
    return 'cookie' in accdata

def pixelfed_login(acc_id, force=False):
    # check account is already logged in if not "force"
    accdata = db_get('accounts', acc_id)
    if not force and pixelfed_islogged(acc_id, accdata):
        return

    # obtain one time tokens for the pixelfed instance
    _cookies, _token = pixelfed_token_url()

    # do the login post and retrieve the raw cookies, the rest of API calls will have this cookies
    r = requests.post( 'https://'+config()['instance']+'/login' ,\
        data={
            '_token': _token, 'email': 'pixelfed.'+acc_id+'@localhost',
            'password': accdata['password'], 'remember': 'on'
        },
        cookies=_cookies
    )

    # add the raw cookies to the account data for later calls
    accdata['cookie'] = dict(r.cookies)
    db_set('accounts', acc_id, accdata)

def pixelfed_token_url(url='', _cookies=None):
    r = requests.get( 'https://'+config()['instance']+url, cookies=_cookies )
    _token = re.search(r'name="_token".+value="([^"]+)"', r.text).group(1)
    return r.cookies, _token

def pixelfed_dlposts(acc_id, data):
    ts = []
    for edge in data['edge_owner_to_timeline_media']['edges']:
        ts.append(edge['node']['taken_at_timestamp'])
    for edge in data['edge_felix_video_timeline']['edges']:
        ts.append(edge['node']['taken_at_timestamp'])
    ts = sorted(ts)
    items = []
    for t in ts:
        brkit = False
        for edge in data['edge_owner_to_timeline_media']['edges']:
            if edge['node']['taken_at_timestamp'] == t:
                items.append(edge['node'])
                brkit = True
                break
        if brkit:
            continue
        for edge in data['edge_felix_video_timeline']['edges']:
            if edge['node']['taken_at_timestamp'] == t:
                items.append(edge['node'])
                break

    # mirror posts from the account (only the last N, without loading more),
    #   but only the ones that has not already been imported
    accposts = db_get('posts', acc_id)
    accdata = db_get('accounts', acc_id)

    for item in items:
        if item['shortcode'] in accposts:
            print('I| skipping IG post {}:{}. Already added'.format(acc_id, item['shortcode']))
            continue

        print('I| >>>> {}:{}'.format(acc_id, item['shortcode']))
        ig_url = 'https://www.instagram.com/p/{}/'.format(item['shortcode'])
        title = item['title'] if 'title' in item else None

        caption = item['edge_media_to_caption']['edges'][0]['node']['text'] \
            if len(item['edge_media_to_caption']['edges']) > 0 else ''
        altcaption = item['accessibility_caption'] if 'accessibility_caption' in item else ''
        altcaption = '' if altcaption is None else altcaption

        # add support for posts with multiple images
        #  get the data from the post URL. (we need all images, as IG can have not only 1 image in the post)
        postdata = json.loads(instagram_get('/p/{}/?__a=1'.format(item['shortcode']), 216000))
        multiple = False
        multmedia = None
        if len(postdata.keys()) > 0 and 'edge_sidecar_to_children' in postdata['graphql']['shortcode_media']:
            multiple = True
            multmedia = postdata['graphql']['shortcode_media']['edge_sidecar_to_children']['edges']

        _headers = {
            'Content-Type': 'application/json',
            'X-Requested-With': 'XMLHttpRequest',
            'X-XSRF-TOKEN': accdata['cookie']['XSRF-TOKEN']
        }
        jsdata_items = []
        _token = None
        failed = False

        if item['is_video']:
            # if the video is bigger than "max_video_size", we don't even try to upload it!
            r = requests.head(item['video_url'])
            size_in_mb = (int(r.headers['Content-Length']) / 1024 / 1024)
            if size_in_mb > config()['max_video_size']:
                # hack, we "add" it on posts so it doesn't try it again!
                accposts.append(item['shortcode'])
                print('W| video exceeds the configured Maximum of "{}MB"'.format(config()['max_video_size']))
                continue

            # try to upload to Pixelfed, it might failed depending on MAX_PHOTO_SIZE setting
            print('I| fetching VIDEO for {}:{}... '.format(acc_id, item['shortcode']), end='')
            _token, jsdata = pixelfed_postvideo(acc_id, item['video_url'])
            if not jsdata:
                print('err')
                print('E| tried to upload a video of "{}MB" but failed. MAX_PHOTO_SIZE setting?'.format(int(size_in_mb)))
                print()
                continue
            jsdata_items.append(jsdata)
            print('done')

        else:
            print('I| uploading IMAGES for {}:{}... '.format(acc_id, item['shortcode']), end='')
            media2iterate = [a['node']['display_url'] for a in multmedia] if multiple else [item['display_url']]
            # we add support to multiple media here
            for media in media2iterate:
                _token, jsdata = pixelfed_postimage(acc_id, media, accdata)
                if not jsdata:
                    print('E| Could not upload media for {}:{}'.format(acc_id, item['shortcode']))
                    failed = True
                    break
                jsdata_items.append(jsdata)
            if failed:
                continue
            print('done')

        # add the accesibility captions
        i = 0
        _headers['X-CSRF-TOKEN'] = _token
        for jsdata in jsdata_items:
            jsdata['description'] = ig_url
            jsdata['cw'] = False
            jsdata['alt'] = ''
            if multiple:
                mnode = multmedia[i]['node']
                if 'accessibility_caption' in mnode and not mnode['accessibility_caption'] is None:
                    jsdata['alt'] = mnode['accessibility_caption'][0:136]+'...' \
                        if len(mnode['accessibility_caption']) > 140 else mnode['accessibility_caption']
            else:
                jsdata['alt'] = altcaption[0:136]+'...' if len(altcaption) > 140 else altcaption
            i += 1

        # publish the post using Pixelfed API
        # the caption will be the original instagram URL
        print('I| publishing post for {}:{}... '.format(acc_id, item['shortcode']), end='')
        r = requests.post('https://'+config()['instance']+'/api/compose/v0/publish',\
            json={"media": jsdata_items, "caption": ig_url, "visibility": "public", "cw": False,\
                "comments_disabled": False, "place": False, "tagged": [],"optimize_media": True},\
            cookies=accdata['cookie'], headers=_headers
        )

        # do a comment as it supports larger descriptions
        if r.status_code == 200 and len(r.text) > 5:
            ps = r.text.strip('/').split('/')
            status_id = ps[len(ps)-1]
            print('done | StatusID -> {}'.format(status_id))

            print('I| publishing comments containing caption for {}:{}... '.format(acc_id, item['shortcode']), end='')
            i = 1
            failed = False
            for comment in [caption[i:i+495] for i in range(0, len(caption), 495)]:
                r2 = requests.post('https://'+config()['instance']+'/i/comment',\
                    json={'comment': '('+str(i)+') '+comment, 'item': status_id, 'sensitive': False},\
                    cookies=accdata['cookie'], headers=_headers
                )
                if not r2.status_code == 200:
                    failed = True
                    print('err. CODE -> {}'.format(r2.status_code))
                    print(r2.text)
                    break
                i += 1

            if not failed:
                print('done')
                accposts.append(item['shortcode'])
                print('I| uploaded post {}:{} : OK'.format(acc_id, item['shortcode']))
                time.sleep(int(config()['timeout_btw_posts']))
        else:
            print(r.text)
            print(r.headers)
            return

    print('I| done updating "{}" account'.format(acc_id))
    db_set('posts', acc_id, accposts)

# upload media and return data
def pixelfed_postimage(acc_id, image_url, accdata=None):
    return pixelfed_postmedia(acc_id, image_url, 'jpg', accdata)

def pixelfed_postvideo(acc_id, video_url, accdata=None):
    return pixelfed_postmedia(acc_id, video_url, 'mp4', accdata)

def pixelfed_postmedia(acc_id, url, ext, accdata=None):
    return _pixelfed_postmedia(acc_id, pixelfed_cachemedia(url, ext), accdata)

def _pixelfed_postmedia(acc_id, cachef, accdata=None):
    if accdata is None:
        accdata = db_get('accounts', acc_id)
    _, _token = pixelfed_token_url('', accdata['cookie'])
    r = requests.post( 'https://'+config()['instance']+'/api/compose/v0/media/upload',\
        files={'file': open(cachef, 'rb')}, cookies=accdata['cookie'],\
        headers={
            'X-CSRF-TOKEN': _token,
            'X-Requested-With': 'XMLHttpRequest',
            'X-XSRF-TOKEN': accdata['cookie']['XSRF-TOKEN']
        }
    )
    if r.status_code == 200:
        return _token, json.loads(r.text)
    return None, False


# get the image by URL but cache it forever, as if the profile changes the pic
#  the url will be different, and therefore, the sum will also be different
def pixelfed_cacheimg(image_url):
    return pixelfed_cachemedia(image_url, 'jpg')

def pixelfed_cachevid(video_url):
    return pixelfed_cachemedia(image_url, 'mp4')

def pixelfed_cachemedia(url, ext='jpg'):
    cachef = './cache/{}.{}'.format(md5sum(url), ext)
    if not os.path.exists(cachef):
        r = requests.get(url)
        w = open(cachef, 'wb')
        w.write(r.content)
        w.close()
    return cachef

def pixelfed_setpic(acc_id, pic_url, count=0):
    count += 1
    pixelfed_login(acc_id)

    cachef = pixelfed_cacheimg(pic_url)
    accdata = db_get('accounts', acc_id)
    print('I| setting avatar for "{}" '.format(acc_id), end="")
    _, _token = pixelfed_token_url('/settings/home', accdata['cookie'])
    r = requests.post( 'https://'+config()['instance']+'/settings/avatar',\
        data={'_token': _token}, cookies=accdata['cookie'], files={'avatar': open(cachef, 'rb')}
    )

    # try to login if the upload failed
    if r.status_code == 419 and count < 3:
        print('err (login required)')
        pixelfed_login(acc_id, True)
        return pixelfed_setpic(acc_id, pic_url, count)

    print('ok')

    return True

def pixelfed_setinfo(acc_id, bio, website, count=0):
    accdata = db_get('accounts', acc_id)

    name = accdata['name'] + ' [Mirror]'
    if count == 0:
        bio = 'Mirrored from Instagram: instagram.com/{} | {}'.format(acc_id, bio)

    count += 1
    pixelfed_login(acc_id)

    print('I| setting account-info for "{}" '.format(acc_id), end="")
    _, _token = pixelfed_token_url('/settings/home', accdata['cookie'])
    r = requests.post( 'https://'+config()['instance']+'/settings/home',\
        data={
            '_token': _token, 'name': name,
            'website': website, 'bio': bio, 'language': 'en'
        },
        cookies=accdata['cookie']
    )

    # try to login if the upload failed
    if r.status_code == 419 and count < 3:
        print('err (login required)')
        pixelfed_login(acc_id, True)
        return pixelfed_setinfo(acc_id, bio, website, count)

    print('ok')

    return True


def random_string(count=32):
    return ''.join(random.choices(string.ascii_uppercase + string.ascii_lowercase + string.digits, k=count))

def md5sum(_str):
    return hashlib.md5(_str.encode()).hexdigest()

# get all profile data from user:
#  - display name
#  - bio description
#  - shared posts (images/videos)
#  - much more info...
def getig_user_data(acc_id):
    return json.loads(
        instagram_get('/{}/?__a=1'.format(acc_id), 1800)
    )

# runs a basic GET request emulating Tor Browser
def instagram_get(url, CACHE_SECS=600):
    headers = get_random_headers()
    default_headers = {
        'Accept':		'*/*',
        'Accept-Language':	'en-US,en;q=0.5',
        'Accept-Encoding':	'gzip, deflate, br',
        'Connection':		'keep-alive',
        'Cache-Control':	'no-cache',
        'Pragma':		'no-cache',
        'Host':			'www.instagram.com',
        'Referer':		'https://www.instagram.com/',
        'User-Agent':		'Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0'
    }
    for key in default_headers.keys():
        if not key in headers:
            headers[key] = default_headers[key]
    url = 'https://www.instagram.com{}'.format(url)
    cachef = './cache/'+md5sum(url)
    now = str(time.time())
    now = int(now[:now.index('.')])
    if os.path.exists(cachef):
        cache = readf(cachef).splitlines()
        ctime = int(cache[0])
        if now < ctime:
            return '\n'.join(cache[1:])

    r = requests.get(url, headers=headers)
    resp = r.text
    w = open(cachef, 'w')
    w.write(str(now+CACHE_SECS) + '\n')
    w.write(resp)
    return resp

def get_random_headers():
    a = os.listdir('./headers')
    rin = 0
    if len(a)-1 > 0:
        rin = random.randint(0, len(a)-1)
    lines = readf('./headers/{}'.format(a[rin])).splitlines()
    headers = {}
    for line in lines:
        reg = re.search('(^[^:]+):(.*)', line)
        headers[reg.group(1).strip()] = reg.group(2).strip()
    return headers

def db_set(table, acc_id, accdata):
    w = open('./db/{}/{}'.format(table, acc_id), 'w')
    w.write(json.dumps(accdata))
    w.close()

def db_get(table, acc_id):
    return json.loads(readf('./db/{}/{}'.format(table, acc_id)))

def config():
    global CONFIG
    if len(CONFIG.keys()) == 0:
        CONFIG = json.loads(readf('./config.json'))
    return CONFIG

def readf(f):
    r = open(f,'r')
    c = r.read().strip()
    r.close()
    return c

if __name__ == '__main__':
    main()