• AnyStream is having some DRM issues currently, Netflix is not available in HD for the time being.
    Situations like this will always happen with AnyStream: streaming providers are continuously improving their countermeasures while we try to catch up, it's an ongoing cat-and-mouse game. Please be patient and don't flood our support or forum with requests, we are working on it 24/7 to get it resolved. Thank you.

[Resolved] anystream plus 1.2.2.0 - unable to login to hbomax - captcha? 403 forbidden

miku101

Member
Thread Starter
Joined
Sep 13, 2021
Messages
21
Likes
4
I am unable to login to hbomax with my email address credentials. it looks like it tries to login then throws me back to the main screen without logging in.
Code:
the logs show what appears to be a captcha request, but I never saw a captcha on the page.

00:08:13.133 - [Debug] [hbomax interceptor] Requested URL: blob:https://play.hbomax.com/c272aee2-35e3-4a3f-9692-9d17499262da

00:08:13.167 - [Debug] [hbomax interceptor] Requested URL: https://telegraph.api.hbo.com/events/v1

00:08:13.167 - [Debug] [hbomax interceptor] Requested URL: https://telegraph.api.hbo.com/events/v1

00:08:13.368 - [Debug] [hbomax interceptor] Requested URL: https://telegraph.api.hbo.com/events/v1

00:08:17.915 - [Debug] [hbomax interceptor] Requested URL: https://telegraph.api.hbo.com/events/v1

00:08:17.916 - [Debug] [hbomax interceptor] Requested URL: https://telegraph.api.hbo.com/events/v1

00:08:17.916 - [Debug] [hbomax interceptor] Requested URL: https://play.hbomax.com/assets/images/buttons/desktop/btn_close_default.png

00:08:22.952 - [Debug] [hbomax interceptor] Requested URL: https://play.hbomax.com/assets/images/icons/eye_show.png

00:08:24.612 - [Debug] [hbomax interceptor] Requested URL: https://telegraph.api.hbo.com/events/v1

00:08:24.648 - [Debug] [hbomax interceptor] Requested URL: https://www.google.com/recaptcha/enterprise/reload?k=6LeMrv8ZAAAAAIcvo5HKvdj1lxtUdHnS13jUCulQ

00:08:24.732 - [Debug] [hbomax interceptor] Requested URL: https://oauth-us.api.hbo.com/auth/tokens

00:08:24.779 - [Debug] [hbomax interceptor] Requested URL: https://oauth-us.api.hbo.com/auth/tokens

00:08:24.987 - [Debug] [hbomax interceptor] Requested URL: https://sessions-us.api.hbo.com/sessions/v1/clientConfig

00:08:25.005 - [Debug] [hbomax interceptor] Requested URL: https://comet.api.hbo.com/content

00:08:25.016 - [Debug] [hbomax interceptor] Requested URL: https://comet.api.hbo.com/content

00:08:25.016 - [Debug] [hbomax interceptor] Requested URL: https://comet.api.hbo.com/content

00:08:25.016 - [Debug] [hbomax interceptor] Requested URL: https://comet.api.hbo.com/content

00:08:25.017 - [Debug] [hbomax interceptor] Requested URL: https://comet.api.hbo.com/content

00:08:25.049 - [Debug] [hbomax interceptor] Requested URL: https://comet.api.hbo.com/content

00:08:25.049 - [Debug] [hbomax interceptor] Requested URL: https://sessions-us.api.hbo.com/sessions/v1/clientConfig

00:08:25.066 - [Debug] [hbomax interceptor] Requested URL: https://comet.api.hbo.com/content

00:08:25.082 - [Debug] [hbomax interceptor] Requested URL: https://comet.api.hbo.com/content

00:08:25.083 - [Debug] [hbomax WebChannel] login success

00:08:25.100 - [Notice] [browser:hbomax] Startup provider...

00:08:26.088 - [Error] [hbomax] Error receiving: 201 (403) Error transferring https://oauth-us.api.hbo.com/auth/tokens - server replied: Forbidden, https://oauth-us.api.hbo.com/auth/tokens

00:08:26.088 - [Error] [hbomax] {"statusCode":403,"message":"The operation was not allowed. Please contact your TV provider.","code":"forbidden"}

00:08:26.088 - [Error] [hbomax] Failed to get token for grant type user_refresh_profile

00:08:26.089 - [Notice] [browser:hbomax] Logging in...

00:08:26.167 - [Debug] [browser:hbomax] Webengine URL changed to https://play.hbomax.com/page/urn:hbo:page:watch-free

00:08:26.193 - [Debug] [browser:hbomax] Webengine loading page https://play.hbomax.com/page/urn:hbo:page:watch-free
 

Attachments

  • AnyStream_1.2.2.0.astlog
    1.4 MB · Views: 3
Last edited by a moderator:
HBOMAX is using an Invisible Captcha.
If you are using your tv provider login, create a standalone account and link it to your provider and then use the standalone login to access the site. Might work for you.
I haven't updated to the latest version yet and have no problem accessing it....
 
i purchased hbomax subscription directly via PC web browser, i'm using standalone login - not a provider account.
 
i purchased hbomax subscription directly via PC web browser, i'm using standalone login - not a provider account.
Try deleting the registry entries
HKEY_CURRENT_USER\SOFTWARE\RedFox\AnyStream\Media\hbomax\Cache
and
HKEY_CURRENT_USER\SOFTWARE\RedFox\AnyStream\Media\hbomax\CacheC

(exit AnyStream first)
 
Try deleting the registry entries
HKEY_CURRENT_USER\SOFTWARE\RedFox\AnyStream\Media\hbomax\Cache
and
HKEY_CURRENT_USER\SOFTWARE\RedFox\AnyStream\Media\hbomax\CacheC

(exit AnyStream first)

deleting just the cache entries didnt seem to work, so i deleted the entire hbomax registry folder and restarted anystream, which seemed to work. (y)
 
The ""The operation was not allowed. Please contact your TV provider." threw me off.....glad you got it working.

The invisible captcha is screwing up the site more than anything else. Google has them installing it on every page so they can track every movement
you make....of course they are selling it to these companies saying it's to protect them...while Google harvests all the data.
 
The invisible captcha is screwing up the site more than anything else. Google has them installing it on every page so they can track every movement
you make....of course they are selling it to these companies saying it's to protect them...while Google harvests all the data.

No they don't. The invisible captcha (V3) is the next iteration of the Anti-Spam check. First there was the generated text, then the advanced checkbox, no it's an invisible one.

There is no tracking, I use it myself on half a dozen designed websites. Saying they use it for tracking is like saying the COVID-19 Vaccines are microchipped. Neither of which is true. This is my personal view and based on my experience as a web dev, my Google search, site performance and API console. I can't and won't speak for anyone else.



Sent from my Pixel 3 XL using Tapatalk
 
Last edited:
deleting just the cache entries didnt seem to work, so i deleted the entire hbomax registry folder and restarted anystream, which seemed to work. (y)
That's interesting.
The only thing I can think of then is the profile id. Did you recently make changes to your profiles on hbomax?
 
No they don't. The invisible captcha (V3) is the next iteration of the Anti-Spam check. First there was the generated text, then the advanced checkbox, no it's an invisible one.

There is no tracking, I use it myself on half a dozen designed websites. Saying they use it for tracking is like saying the COVID-19 Vaccines are microchipped. Neither of which is true.



Sent from my Pixel 3 XL using Tapatalk

There are multiple articles on the internet discussing the subject.
NO links to outside vendors- Forum Moderator
Please act civilized. I didn't insult you.
 
Last edited by a moderator:
I am civilized, neither did I insult you.

Sent from my Pixel 3 XL using Tapatalk
 
I am civilized, neither did I insult you.

Sent from my Pixel 3 XL using Tapatalk
"Saying they use it for tracking is like saying the COVID-19 Vaccines are microchipped. Neither of which is true."

Your statement implies I am a conspiracy theorist and a liar.
 
No it doesn't, anyway. Fixed it. Added a clarification.

Sent from my Pixel 3 XL using Tapatalk
 
Thanks...I added a clarification for you also....."IGNORE"
 
OK, then can we get back on topic, please?
I'll restate my question to @miku101 to be sure:

No problem Pete....thanks for adding your solution...I'll save it for future reference.

Could you pass on a request to the developers for the HBOMAX front facing?

I realize why they are not using the actual web page and it was pretty clever to have the different sections.
Could it be possible to add a movie and series sections with an A-Z option? That is an available option on the
site, so the coding should already exist. I know captcha is intertwined, so it might not work, but it's work an ask.

Thanks
 
OK, then can we get back on topic, please?
I'll restate my question to @miku101 to be sure:

no.

i do recall when trying to get 4k downloads working, i hit logout at some point. it paused a while and then gave me some weird error about being unable to logout. after that, it never was able to login again - until i deleted the registry keys.
 
Back
Top