Some thoughts and questions

[tboothman]

Not really an issue, but this isn't a codebase either.

The cookies you need to make a request are SecureNetflixId and NetflixId, and you need authURL in a get or post param.
Do you have any idea how long these ids/sessions last for? Mine are 24 hours old at the moment and still working.

I'm not sure the season object looks like you've described. I can get episodes and summary from it. title doesn't seem to exist.

You could probably do with some examples, the explanation of the paths is pretty confusing. I worked it out by looking at the requests the website was making.

Some examples:
Fetch the seasonList and title attribute from the video with ID 70153404
["videos",70153404,["seasonList", "title"]]

Fetch the summary field of the first 20 seasons (which are in the seasonList collection) for the video with ID videos.
["videos",70153404,"seasonList",{"from":0,"to":20},"summary"]

Fetch the summary, title for all episodes of all season of videos with id 70153404
["videos",70153404,"seasonList",{"from":0,"to":40},"episodes",{"from":-1,"to":60},["summary","title"]]

Fetch summary for the first genre (index 0, the 4th segment) and first season of videos with id 70153404
["videos",70153404,["genres", "seasonList"],0,"summary"]

[tboothman]

The paths business is part of json graph btw - https://netflix.github.io/falcor/documentation/paths.html

[tboothman]

Actually authURL doesn't seem to do anything. I tried changing it to rubbish then removing it and the api carried on working

[oldgalileo]

Great points. I'll add some examples. Definitely a fair point to include the Falcor docs too. It only makes sense that those who created it would have documentation better than mine (lol).

@mrbass21 had started looking into the longevity of the cookies IIRC. We had a brief conversation about that. The skinny of it is that I'm not sure how long they last because each time I've tried to test this I've forgotten during the testing.

Also, I can't believe I didn't even think to check that the authURL was needed. I've stripped most of the stuff in the requests, but that one didn't even occur to me. Hah!

[mrbass21]

@tboothman I can't tell you exactly how long they last, but I can tell you the answer is "a long time".

I used the same netflixid and securenetflixid for over 1.5 months.

I found some endpoints that have to do with netflix's download and play offline feature (video and audio streams) that seem to have an additional authentication method besides your id and secure id. My guess is those protected resources are accessed with tokens with short lifespans, so Netflix then allows netflixid and securenetflixid to live a long time.

If I had to venture a guess, I'd say they either have the same life as the web cookie (one year) or never.

Another note is that securenetflixid and netflixid are unique per profile. When I changed profiles on my account, I was given new netflixid and securenetflixid tokens.