offsides on Sidechat | I built a Sidechat/YikYak app for Android devices since the official app was removed from Google Play when YY was bought out. Still working on DMs, image uploads, and polls but aside from that everything is working great!

offsides

I built a Sidechat/YikYak app for Android devices since the official app was removed from Google Play when YY was bought out. Still working on DMs, image uploads, and polls but aside from that everything is working great!

Anonymous 57w

How are you retrieving the bearer token? The only way I have found to do it is to sniff it with a proxy server

🏈

Anonymous 57w

That's exactly what I did! Reverse engineered the entire auth process too.

🏈

Anonymous 57w

Forgot to drop the GitHub link for anyone interested: https://github.com/micahlt/offsides

Anonymous 57w

It’s crazy that you managed to reverse engineer the firebase auth. Normally for the phone number authentication with Firebase it requires captcha verification to make sure it’s being called from an approved bundle. Usually through a silent push notification or a verification link.

🏈

Anonymous 57w

I don't know whether or not the auth uses Firebase as its backend or not - I'm not using it though. My requests are going directly to Sidechat's API endpoints. See https://github.com/micahlt/sidechat.js if you're interested :)

Anonymous

offsides 57w

Behind the scenes, I’m pretty sure it’s using firebase (or at least used to use firebase) to generate and store its user table. Nice to see that you figured out how to just use the endpoint without having to deal with an app token or something.

Download Terms of Service Privacy Policy Community Guidelines