Livecheck strategy with POST to the URL（cask: neteasemusic)

[niu541412]

Output of brew config

HOMEBREW_VERSION: 4.4.6-37-g3a5b17a
ORIGIN: https://github.com/Homebrew/brew
HEAD: 3a5b17a421fea58241efd9398349eb17c5e92277
Last commit: 8 hours ago
Core tap HEAD: d654be12a69013433edacbcd31e6c82839c09688
Core tap last commit: 4 days ago
Core tap JSON: 22 Nov 16:24 UTC
Core cask tap HEAD: 73d2020323b6989db5ddac3424ee8785f581417a
Core cask tap last commit: 4 days ago
Core cask tap JSON: 22 Nov 16:24 UTC
HOMEBREW_PREFIX: /opt/homebrew
HOMEBREW_API_DOMAIN: https://mirrors.tuna.tsinghua.edu.cn/homebrew-bottles/api
HOMEBREW_BOTTLE_DOMAIN: https://mirrors.tuna.tsinghua.edu.cn/homebrew-bottles
HOMEBREW_CASK_OPTS: []
HOMEBREW_DISPLAY: /private/tmp/com.apple.launchd.CctAXWthqk/org.xquartz:0
HOMEBREW_MAKE_JOBS: 12
HOMEBREW_SORBET_RUNTIME: set
Homebrew Ruby: 3.3.6 => /opt/homebrew/Library/Homebrew/vendor/portable-ruby/3.3.6/bin/ruby
CPU: dodeca-core 64-bit dunno
Clang: 16.0.0 build 1600
Git: 2.39.5 => /Library/Developer/CommandLineTools/usr/bin/git
Curl: 8.7.1 => /usr/bin/curl
macOS: 15.1.1-arm64
CLT: 16.1.0.0.1.1729049160
Xcode: N/A
Rosetta 2: false

Output of brew doctor

Warning: You have uncommitted modifications to Homebrew/homebrew-cask.
If this is a surprise to you, then you should stash these modifications.
Stashing returns Homebrew to a pristine state but can be undone
should you later need to do so for some reason.
  cd /opt/homebrew/Library/Taps/homebrew/homebrew-cask && git stash -u && git clean -d -f

Uncommitted files:
   M Casks/n/neteasemusic.rb

Description of issue

As the version inferred from AppStore, neteamusic cask should be also bumped to >3.0 from 2.3.
I found that due to the developing framework changed, the livecheck url is also deprecated.
Now the neteasemusic homepage uses a POST method to fetch the url of the latest build.
It seems there is still no parameter in homebrew to send a post request for livecheck.
The below is my livecode draft, however with GET method nothing is returned.

  # AES encrypt 16-bit random string, request content and encSecKey twice to generate params,
  # RSA encrypt pubKey and secKey once to generate encSecKey.
  livecheck do
    url "https://music.163.com/weapi/appcustomconfig/get?params=pv2A3ZBx4O7GdfL%2FKZ3HfqSYa4mZCrzVPmhHxBYs3GMh4lgMt%2Bw4cyFCipyno%2BOmVYidCKnq4wwLQ3XWW7ev4PVN9hUApDznNV1Z89zs4Tw%3D&encSecKey=6518d2f0db74f253c99a46f96a22adc840fb2a9570da9956cc11037515f74a819659e6f81eb15860bb417fa6daaf852098b90e2ecb070ed5f1ccbf43983ab0c53741373da4bfa524b76af55de6a1fc798232559ca16c46443877a8c3bc6dfdcbb4c74fe25819b709f6c3a51307e38f48784cf8cdfd7592d3c1356c8458c55621"
    regex(/NeteaseMusic[._-]v?(\d+(?:[._]\d+)+)_web/i)
    strategy :json do |json, regex|
      match = json.dig("data","web-pc-beta-download-links","macPackage")&.match(regex)
      next if match.blank?
      match[1]
    end
  end

return content

{'code': 200,
 'message': 'SUCCESS',
 'data': {'web-pc-beta-download-links': {'pcPackage64': 'https://d8.music.126.net/dmusic/NeteaseCloudMusic_Music_official_3.1.1.203306_64.exe',
   'pcPackage32': 'https://d8.music.126.net/dmusic/NeteaseCloudMusic_Music_official_3.1.1.203306_32.exe',
   'pcV2Package': 'https://d8.music.126.net/dmusic/NeteaseCloudMusic_Music_official_2.10.13.202675_32.exe',
   'macPackage': 'https://d8.music.126.net/dmusic/NeteaseMusic_3.0.6.2300_web.dmg'}}}

Jan 2025: new homepage fetch quest url

https://music.163.com/weapi/appcustomconfig/get?params=l74dJNJLLDwVgsiDNEb23W2B%2FFY0xguNZJzcGzRbTH7a6qIGvbYyaNO6u0LGFY1z&encSecKey=32175e6de459bd5d29ab970b5e86d08f775cfa15483c2ded5146614fcf8432853d345d12d7429a7edec12f72749d9d303470df49d8459983b469e55831c4ad7fd17fd7de5c2701e8debef43486ed2527194912e487468d7558d1a2a65985f25b463e9e29d46f21543f5f15d1382ad9317d7c394be0dcfad80fc96aaa83b972ca

{'code': 200,
 'message': 'SUCCESS',
 'data': {'web-new-download': {'pc64': {'appVersion': '3.1.2',
    'publishTime': '2024-12-23 19:10:49',
    'downloadUrl': 'https://d8.music.126.net/dmusic/NeteaseCloudMusic_Music_official_3.1.2.203359_64.exe'},
   'pc32': {'appVersion': '3.1.2',
    'publishTime': '2024-12-23 19:10:49',
    'downloadUrl': 'https://d8.music.126.net/dmusic/NeteaseCloudMusic_Music_official_3.1.2.203359_32.exe'},
   'pcV2': {'appVersion': '2.10.13',
    'publishTime': '2024-03-19 15:20:38',
    'downloadUrl': 'https://d8.music.126.net/dmusic/NeteaseCloudMusic_Music_official_2.10.13.202675_32.exe'},
   'osx': {'appVersion': '3.0.6',
    'publishTime': '2024-11-14 00:00:00',
    'downloadUrl': 'https://d8.music.126.net/dmusic/NeteaseMusic_3.0.6.2300_web.dmg'},
   'osxOld': {'appVersion': '2.3.21',
    'publishTime': '2024-11-26 17:36:49',
    'downloadUrl': ''},
   'uwp': {'appVersion': '3.0.12',
    'publishTime': '2024-05-23 00:00:00',
    'downloadUrl': ''},
   'android': {'appVersion': '9.2.10',
    'publishTime': '2024-11-26 00:44:53',
    'downloadUrl': ''},
   'android5.x': {'appVersion': '8.6.76',
    'publishTime': '2022-05-01 00:00:00',
    'downloadUrl': ''},
   'iphone': {'appVersion': '9.2.10',
    'publishTime': '2024-11-26 23:59:24',
    'downloadUrl': ''},
   'iPad': {'appVersion': '2.1.23',
    'publishTime': '2024-12-01 00:00:00',
    'downloadUrl': ''},
   'androidPad': {'appVersion': '9.2.25',
    'publishTime': '2024-12-01 00:00:00',
    'downloadUrl': 'https://d1.music.126.net/dmusic/NeteaseCloudMusic_Music_official_9.2.25.241229203217_3264.apk'},
   'car': {'appVersion': '3.7.01',
    'publishTime': '2025-01-03 00:00:00',
    'downloadUrl': 'https://d3.music.126.net/8e21283c-57d9-4c25-b939-6a5605fed5c7.apk'},
   'TV': {'appVersion': '1.1.21',
    'publishTime': '2024-11-01 00:00:00',
    'downloadUrl': 'https://nos.netease.com/music-static/3264music1001021_241108140941_netease.apk'},
   'watch': {'appVersion': '1.0.0',
    'publishTime': '2024-07-09 17:36:49',
    'downloadUrl': ''}}}}

Relevant casks

neteamusic

[daeho-ro]

I guess the key included in the params will be change every version or attempts, so it cannot be used for livecheck in homebrew AFAIK.

[daeho-ro]

And v3 is in beta, currently.

[niu541412]

And v3 is in beta, currently.

But AppStore, homepage and software internal have already pushed v3.

[niu541412]

AES encrypt 16-bit random string, request content and encSecKey twice to generate params

It should be random, but currently it still works with a fixed value.
I use another api with similar algorithm to grab the metadata of a song in my headless server, the script have run without error for over half one year.

[niu541412]

Now, V3 is the stable version, and V2 is flagged as deprecated.