lastpass library suddenly stopped working

[anton-hajdu]

Hi,

I am using lastpass-python in my projects, but today morning stopped working and I am unable get credentials from lastpass.

Looks like they changed something in lastpass ...

I tried this with more accounts, with more computers, within more networks...

Thanks

[Mast3rSensei]

Stopped working for me as well!

[nineclicks]

https://lastpass.com/iterations.php is returning a 500 code

[TillerBurr]

https://lastpass.com/iterations.php is returning a 500 code

I can confirm. It works fine if you visit via a browser, but it's failing in the requests post here

lastpass-python/lastpass/fetcher.py

Lines 51 to 52 in 1ece13f

	response = web_client.post('https://lastpass.com/iterations.php',
	data={'email': username})

I've also tested a requests.get and still get a 500 status code.

Edit: Here's the kicker: I just tested using the ruby version of the repo and it works fine. Must be something with lastpass and requests, otherwise I can't figure out what's going on.

Edit2: The post works with urllib3, so it's apparently a requests specific issue

[nineclicks]

I think adding Chrome headers to the two POST requests in fetcher.py fixed it.

    headers = {'User-Agent': 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.76 Safari/537.36'} # This is chrome, you can set whatever browser you like
    response = web_client.post('https://lastpass.com/iterations.php',
                               data={'email': username},
                               headers=headers

    headers = {'User-Agent': 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.76 Safari/537.36'} # This is chrome, you can set whatever browser you like
    response = web_client.post('https://lastpass.com/login.php',
                               data=body,
                               headers=headers)

[TillerBurr]

That worked for me. I noticed that the default user agent for requests is python-requests. For those routes, they must be strictly denied access, because the URL https://lastpass.com/ works perfectly fine.

[anton-hajdu]

Works!

[raishahnawaz]

Worked for me as well

[xaelvil]

This worked for me too, @konomae, will you be pushing an update with this?
Thanks!

[konomae]

Thank you for reporting this!

This problem has been fixed:

• https://github.com/konomae/lastpass-python/releases/tag/v0.3.2
• https://pypi.org/project/lastpass-python/0.3.2/

Related:

• Add headers to post requests in fetcher.py #41
• Set User-Agent to lastpass-python/x.x.x #42
• v0.3.1...v0.3.2