Instagram Signed_body

[wtfspiffed]

Anybody care to share their method of generating Signed_body ? Willing to pay as well.

 

[CriminalMind]

what is
[h=2]Instagram Signed_body ?[/h]

 

[Nattsurfaren]

A guy from instagram is sending a body to your door and you simply sign it.

 

[phatzilla]

It's a variable that's passed with every request from the instagram mobile API. Embedded and Encrypted within the APP.

 

[Impulse255]

I'm assuming it's because of the new Instagram API limitations

 

[RoundedPixels]

Here are a couple methods I have found:
These are assuming you're using the requests in a bot and not for actual signing.

1. Instead of sending the requests straight to the API, send them to the website that hosts the client. Look at Iconosquare and their requests when liking a pic. All requests are sent to: iconosquare.cm/controller_ajax.php. In the body you need to include "action=postLike" (or whatever) and the id of the user/photo. Mess around with that and it will work, but the problem is this method will only work with whatever website you're using. a different site can't sign for you.

2. You don't really need to get your requests signed. The API has a glitch that I found. If you maxed out your token for the unsigned limit (20 follows, 30 likes, etc), you can just revoke access to the app, then re-authenticate it. I added this feature to my bot and it works like a charm.
I just have about 10 clients that authenticate, then it does all the following it can, then it revokes access, then re-authenticates it.

To revoke access, just POST all your tokens to this url (include your login cookie in the request, obviously):
instagram.cm/oauth/revoke_access (I can't post urls so add an O between C and M)
and in the body, add the key "token" with a value of the token you want to revoke.
Then after revoking all, re-authenticate.

Hope these workarounds helped.

 

[CodingAndStuff]

Here are a couple methods I have found:
These are assuming you're using the requests in a bot and not for actual signing.

1. Instead of sending the requests straight to the API, send them to the website that hosts the client. Look at Iconosquare and their requests when liking a pic. All requests are sent to: iconosquare.cm/controller_ajax.php. In the body you need to include "action=postLike" (or whatever) and the id of the user/photo. Mess around with that and it will work, but the problem is this method will only work with whatever website you're using. a different site can't sign for you.

2. You don't really need to get your requests signed. The API has a glitch that I found. If you maxed out your token for the unsigned limit (20 follows, 30 likes, etc), you can just revoke access to the app, then re-authenticate it. I added this feature to my bot and it works like a charm.
I just have about 10 clients that authenticate, then it does all the following it can, then it revokes access, then re-authenticates it.

To revoke access, just POST all your tokens to this url (include your login cookie in the request, obviously):
instagram.cm/oauth/revoke_access (I can't post urls so add an O between C and M)
and in the body, add the key "token" with a value of the token you want to revoke.
Then after revoking all, re-authenticate.

Hope these workarounds helped.

He's asking for the signing method for Instagram's private API. Before anybody PM's me to ask for it, I'll go ahead and just tell you no, I'm not giving it to you. I'm making too much money on Instagram to share - sorry!

 

[CriminalMind]

oh i get it u askin for the hashkey that s gonna cost u though if u have the hashkey u can make bot

 

[Loadie]

Can't you just decompile the Android APK and get all the information you need?