sorare-login.py

import requests
import bcrypt

"""
pip3 install bcrypt
"""

def getSalt(email):
    url = "https://api.sorare.com/api/v1/users/" + email
    response = requests.get(url)
    return response.json()["salt"]

def login(hashedPassword, email, aud):
    headers = {
        'content-type': 'application/json',
    }

    json_data = {
        'operationName': 'SignInMutation',
        'variables': {
            'input': {
                'email': email,
                'password': hashedPassword.decode('utf-8'),
            },
        },
        'query': 'mutation SignInMutation($input: signInInput!) { signIn(input: $input) { currentUser { slug jwtToken(aud: "'+aud+'") { token expiredAt } } errors { message } } }',
    }

    response = requests.post('https://api.sorare.com/graphql', headers=headers, json=json_data)
    return response.json()

if __name__ == "__main__":
    aud = "<your-aud>"
    email = "<your-email>"
    password = "<your-password>".encode('utf-8')
    salt = getSalt(email).encode('utf-8')
    hashedPassword = bcrypt.hashpw(password, salt)
    response = login(hashedPassword, email, aud)
    print(response)