Adds blackbox bypass and refactors authentication methods

Introduces a blackbox bypass option to help mitigate 403 errors by allowing the skip of certain security payloads.

Renames the connection flow to `AuthenticateAsync` for better clarity and refines the internal logic for registry access and byte encoding.

Author: Roxeez

src/GameforgeConnector/Blackbox.cs

@@ -36,6 +36,7 @@ private static string EncodeString(string inputStr)
             return "tra:";
 
         var blackbox = new byte[uriEncoded.Length];
+        
         blackbox[0] = uriEncoded[0];
 
         for (var i = 1; i < uriEncoded.Length; i++)
@@ -46,18 +47,18 @@ private static string EncodeString(string inputStr)
             }
         }
 
-        var base64 = Convert.ToBase64String(blackbox);
-        base64 = base64.Replace('/', '_').Replace('+', '-').Replace("=", "");
+        var base64 = Convert.ToBase64String(blackbox)
+            .Replace('/', '_')
+            .Replace('+', '-')
+            .Replace("=", "");
 
         return "tra:" + base64;
     }
 
     private static byte[] ToPercentEncodingBytes(string input, string exclude)
     {
         var utf8 = Encoding.UTF8.GetBytes(input);
-
         var excludeSet = new HashSet<byte>(Encoding.ASCII.GetBytes(exclude));
-
         var outBytes = new List<byte>(utf8.Length * 3);
 
         foreach (var b in utf8)
@@ -83,7 +84,7 @@ static bool IsUnreserved(byte b)
             return b switch
             {
                 >= (byte)'a' and <= (byte)'z' or >= (byte)'A' and <= (byte)'Z' or >= (byte)'0' and <= (byte)'9' => true,
-                _ => b == (byte)'-' || b == (byte)'.' || b == (byte)'_' || b == (byte)'~'
+                _ => b is (byte)'-' or (byte)'.' or (byte)'_' or (byte)'~'
             };
         }
     }

src/GameforgeConnector/GameforgeClient.cs

@@ -7,10 +7,11 @@
 namespace GameforgeConnector;
 
 public record GameforgeClientSettings(
-    string InstallationId, 
-    string ChromeVersion, 
+    string InstallationId,
+    string ChromeVersion,
     string GameforgeVersion,
     string Certificate,
+    bool BlackboxBypass,
     Fingerprint Fingerprint);
 
 public class GameforgeClient(GameforgeClientSettings settings)
@@ -21,11 +22,11 @@ public class GameforgeClient(GameforgeClientSettings settings)
         AutomaticDecompression = DecompressionMethods.GZip | DecompressionMethods.Deflate | DecompressionMethods.Brotli,
     });
 
-    public async Task<GameforgeClientSession?> ConnectAsync(string email, string password)
+    public async Task<GameforgeClientSession?> AuthenticateAsync(string email, string password)
     {
         var fp = await settings.Fingerprint.CopyAndRefresh();
 
-        if (!await SendConnectOptions())
+        if (!await SendAuthenticateOptions())
             return null;
 
         var payload = new JObject
@@ -69,7 +70,7 @@ static string ExtractToken(string body)
         }
     }
 
-    private async Task<bool> SendConnectOptions()
+    private static async Task<bool> SendAuthenticateOptions()
     {
         var request = new HttpRequestMessage(HttpMethod.Options, "https://spark.gameforge.com/api/v2/authProviders/credentials/sessions");
 

src/GameforgeConnector/GameforgeClientBuilder.cs

@@ -1,5 +1,4 @@
 using System.Text;
-using Microsoft.Win32;
 using Newtonsoft.Json.Linq;
 
 namespace GameforgeConnector;
@@ -11,6 +10,7 @@ public class GameforgeClientBuilder
     private string? gameforgeVersion;
     private string? certificate;
     private Fingerprint? fingerprint;
+    private bool withBlackboxBypass;
 
     private static readonly HttpClient client = new();
 
@@ -53,6 +53,13 @@ public GameforgeClientBuilder WithCertificateFromFile(string path)
         return this;   
     }
 
+    [Obsolete("This method should not be used, it's only here to avoid 403 errors when using the Gameforge API and it's probably not safe to use it.")]
+    public GameforgeClientBuilder WithBlackboxBypass()
+    {
+        withBlackboxBypass = true;
+        return this;
+    }
+
     public GameforgeClientBuilder WithCertificateFromResources()
     {
         return WithCertificateFromFile(Path.Combine(AppDomain.CurrentDomain.BaseDirectory, "Resources", "certificate.pem"));
@@ -90,19 +97,17 @@ public GameforgeClientBuilder WithChromeVersionFromApi()
     public GameforgeClientBuilder WithInstallationIdFromRegistry()
     {
         if (!OperatingSystem.IsWindows())
-            throw new InvalidOperationException("Installation ID is required on non-Windows platforms");
+            throw new InvalidOperationException("InstallationIdFromRegistry is only available on Windows platforms");
 
-        using (var key = Registry.CurrentUser.OpenSubKey(@"SOFTWARE\Gameforge4d\GameforgeClient\MainApp"))
+        using (var key = Microsoft.Win32.Registry.CurrentUser.OpenSubKey(@"SOFTWARE\Gameforge4d\GameforgeClient\MainApp"))
         {
             installationId = key?.GetValue("InstallationId")?.ToString();
         }
 
         if (string.IsNullOrWhiteSpace(installationId))
         {
-            using (var key = Registry.LocalMachine.OpenSubKey(@"SOFTWARE\WOW6432Node\Gameforge4d\GameforgeClient\MainApp"))
-            {
-                installationId = key?.GetValue("InstallationId")?.ToString();
-            }
+            using var key = Microsoft.Win32.Registry.LocalMachine.OpenSubKey(@"SOFTWARE\WOW6432Node\Gameforge4d\GameforgeClient\MainApp");
+            installationId = key?.GetValue("InstallationId")?.ToString();
         }
 
         return this;
@@ -138,6 +143,6 @@ public GameforgeClient Build()
         if (certificate is null)
             throw new InvalidOperationException("Certificate is required");
 
-        return new GameforgeClient(new GameforgeClientSettings(installationId, chromeVersion, gameforgeVersion, certificate!, fingerprint!));
+        return new GameforgeClient(new GameforgeClientSettings(installationId, chromeVersion, gameforgeVersion, certificate!, withBlackboxBypass, fingerprint!));
     }
 }

src/GameforgeConnector/GameforgeClientSession.cs

@@ -86,7 +86,7 @@ public async Task<List<GameAccount>> GetAccountsAsync()
         {
             ["platformGameAccountId"] = account.Id,
             ["gsid"] = id,
-            ["blackbox"] = Blackbox.Encrypt(id, account.Id, fp),
+            ["blackbox"] = settings.BlackboxBypass ? new JObject() : Blackbox.Encrypt(id, account.Id, fp),
             ["gameId"] = GetGameId(account.Game)
         };
 
@@ -161,10 +161,14 @@ private async Task<bool> SendIovationOptions()
 
     private async Task<bool> SendIovation(string accountId)
     {
+        var fp = await settings.Fingerprint.CopyAndRefresh();
+        
         if (!await SendIovationOptions())
             return false;
 
-        var fp = await settings.Fingerprint.CopyAndRefresh();
+        if (settings.BlackboxBypass)
+            return true;
+        
         var content = new JObject
         {
             ["accountId"] = accountId,
@@ -176,6 +180,8 @@ private async Task<bool> SendIovation(string accountId)
 
         request.Content = new StringContent(content.ToString(Formatting.None), Encoding.UTF8, "application/json");
 
+        request.Headers.TryAddWithoutValidation("Accept", "*/*");
+        request.Headers.TryAddWithoutValidation("Accept-Language", "en-US,en,q=0.9");
         request.Headers.TryAddWithoutValidation("User-Agent", "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36");
         request.Headers.TryAddWithoutValidation("TNT-Installation-Id", settings.InstallationId);
         request.Headers.TryAddWithoutValidation("Origin", "spark://www.gameforge.com");