Instagram Signed_body

RoundedPixels said:

Here are a couple methods I have found:
These are assuming you're using the requests in a bot and not for actual signing.

1. Instead of sending the requests straight to the API, send them to the website that hosts the client. Look at Iconosquare and their requests when liking a pic. All requests are sent to: iconosquare.cm/controller_ajax.php. In the body you need to include "action=postLike" (or whatever) and the id of the user/photo. Mess around with that and it will work, but the problem is this method will only work with whatever website you're using. a different site can't sign for you.

2. You don't really need to get your requests signed. The API has a glitch that I found. If you maxed out your token for the unsigned limit (20 follows, 30 likes, etc), you can just revoke access to the app, then re-authenticate it. I added this feature to my bot and it works like a charm.
I just have about 10 clients that authenticate, then it does all the following it can, then it revokes access, then re-authenticates it.

To revoke access, just POST all your tokens to this url (include your login cookie in the request, obviously):
instagram.cm/oauth/revoke_access (I can't post urls so add an O between C and M)
and in the body, add the key "token" with a value of the token you want to revoke.
Then after revoking all, re-authenticate.

Hope these workarounds helped.

Click to expand...