fix: allanime aareq runtime fetch (#333)

* fix: fetch AllAnime aaReq crypto values at runtime

AllAnime rotates the epoch and the encryption secrets used to sign the aaReq
token every few days. With those values hardcoded, episode sources stop
resolving after each rotation and playback fails.

Fetch the current values at runtime instead: epoch and partB come from
window.__aaCrypto on the mkissa frontend, and the key mask is the lone hex
constant in the app chunk it statically imports. The result is cached for the
epoch window and falls back to the last known good hardcoded values when the
fetch fails, so playback keeps working even if the site is unreachable.

* feat: report AllAnime aaReq crypto refresh through an info callback

Add an optional info_callback to BaseProvider and get_provider, mirroring the
callback the Downloader already uses. The AllAnime provider calls it to report
whether it fetched fresh crypto values or fell back to the hardcoded ones,
including the active epoch and the first bytes of the fetched hash.

Wire the CLI to pass logger.info as this callback wherever it builds a provider
(get_prefered_providers and the MAL and AniList proxies), so the messages
surface at -V verbosity and in the log file.

* refactor: extract AllAnime aaReq crypto into its own class

Move the runtime aaReq crypto (fetching and caching the rotating values, token
generation, tobeparsed decryption and the last known good fallback values) out
of the provider module and into a dedicated AllAnimeCrypto class in its own
file. The provider builds it in its constructor and delegates to it, so the
crypto lives in one place instead of module level state and loose functions
scattered through the provider.

No behaviour change: episode sources and the -V info logging work exactly as
before.

* feat: fetch the AllAnime source query hash and drop the unused buildId

The two remaining hardcoded aaReq values are no longer pinned:

- The persisted-query hash is now derived at runtime. The source query is
  assembled from its template and fragments in the app chunk (the same chunk
  the mask comes from) and sha256'd, falling back to the last known good hash
  if the template cannot be fully resolved.
- buildId is dropped entirely. The api does not check it, it only exists
  obfuscated in the chunk, and the source request is accepted without it, so
  the payload and iv no longer carry it.

* misc: merge allanime crypto into provider

* version: bump

---------

Co-authored-by: sdaqo <sdaqo.dev@protonmail.com>

Author: ubejdullah

api/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "anipy-api"
-version = "3.8.13"
+version = "3.8.14"
 description = "api for anipy-cli"
 authors = ["sdaqo <sdaqo.dev@protonmail.com>"]
 license = "GPL-3.0"

api/src/anipy_api/__init__.py

@@ -1,2 +1,2 @@
 __appname__ = "anipy-api"
-__version__ = "3.8.13"
+__version__ = "3.8.14"

api/src/anipy_api/provider/base.py

@@ -1,7 +1,7 @@
 from abc import ABC, abstractmethod
 from dataclasses import dataclass
 from enum import Enum
-from typing import List, Optional, Set, Union, Dict
+from typing import List, Optional, Protocol, Set, Union, Dict
 
 from requests import Request, Session, ConnectionError as RequestConnectionError
 
@@ -105,6 +105,18 @@ def __hash__(self) -> int:
         return hash(self.url)
 
 
+class InfoCallback(Protocol):
+    """Callback that accepts a message argument, and an exception."""
+
+    def __call__(self, message: str, exc_info: Optional[BaseException] = None):
+        """
+        Args:
+            message: Message argument passed to the callback
+            exc_info: An exception to pass for logging
+        """
+        ...
+
+
 class BaseProvider(ABC):
     """
     This is the abstract base class for all the providers,
@@ -125,15 +137,24 @@ class BaseProvider(ABC):
     BASE_URL: str
     FILTER_CAPS: FilterCapabilities
 
-    def __init__(self, base_url_override: Optional[str] = None):
+    def __init__(
+        self,
+        base_url_override: Optional[str] = None,
+        info_callback: Optional[InfoCallback] = None,
+    ):
         """__init__ of BaseProvider
 
         Args:
             base_url_override: Override the url used by the provider.
+            info_callback: A callback with a message argument, that gets called
+                on certain events (e.g. when a provider refreshes api tokens).
         """
         if base_url_override is not None:
             self.BASE_URL = base_url_override
 
+        self._info_callback: InfoCallback = info_callback or (
+            lambda message, exc_info=None: None
+        )
         self._generate_new_session()
 
     def __init_subclass__(cls) -> None:

api/src/anipy_api/provider/provider.py

@@ -5,6 +5,7 @@
 
 if TYPE_CHECKING:
     from anipy_api.provider import BaseProvider
+    from anipy_api.provider.base import InfoCallback
 
 
 def list_providers() -> Iterator[Type["BaseProvider"]]:
@@ -38,17 +39,20 @@ def get_prefered_providers(mode: str) -> Iterator["BaseProvider"]:
 
 
 def get_provider(
-    name: str, base_url_override: Optional[str] = None
+    name: str,
+    base_url_override: Optional[str] = None,
+    info_callback: Optional["InfoCallback"] = None,
 ) -> Optional["BaseProvider"]:
     """Get a provider by name.
 
     Arguments:
         name: Name of the provider to get
         base_url_override: Override the url used by the provider.
+        info_callback: A callback that gets called on certain provider events.
 
     Returns:
         The provider by name, if it exsists
     """
     for p in list_providers():
         if p.NAME == name:
-            return p(base_url_override)
+            return p(base_url_override, info_callback)