From e8c28db63d5677c470977f3e8c1c8c593b2a116d Mon Sep 17 00:00:00 2001
From: nocci <dev@sky-net.it>
Date: Sun, 8 Mar 2026 11:57:30 +0000
Subject: [PATCH] feat(auth): add client_secret to Epic Games OAuth requests

---
 epic-claimer-new.js | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/epic-claimer-new.js b/epic-claimer-new.js
index a585721..2b82ef2 100644
--- a/epic-claimer-new.js
+++ b/epic-claimer-new.js
@@ -50,7 +50,8 @@ const pollForTokens = async (deviceCode, maxAttempts = 30) => {
       const response = await axios.post('https://account-public-service-prod.ol.epicgames.com/account/api/oauth/token', {
         grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
         device_code: deviceCode,
-        client_id: '875a3b57d3a640a6b7f9b4e883463ab4',
+        client_id: '98f7e42c2e3a4f86a74eb43fbb41ed39',
+        client_secret: '0a2449a2-001a-451e-afec-3e812901c4d7',
       });
       if (response.data?.access_token) {
         console.log('✅ OAuth successful');
@@ -99,7 +100,8 @@ const getValidAuth = async ({ otpKey, reuseCookies, cookiesPath }) => {
 
   try {
     const params = new URLSearchParams();
-    params.append('clientId', '875a3b57d3a640a6b7f9b4e883463ab4');
+    params.append('clientId', '98f7e42c2e3a4f86a74eb43fbb41ed39');
+    params.append('clientSecret', '0a2449a2-001a-451e-afec-3e812901c4d7');
     params.append('scope', 'account.basicprofile account.userentitlements');
 
     deviceResponse = await axios.post('https://account-public-service-prod.ol.epicgames.com/account/api/oauth/deviceAuthorization', params.toString(), {
@@ -125,7 +127,8 @@ const getValidAuth = async ({ otpKey, reuseCookies, cookiesPath }) => {
       const refreshed = await axios.post('https://account-public-service-prod.ol.epicgames.com/account/api/oauth/token', {
         grant_type: 'refresh_token',
         refresh_token: tokens.refresh_token,
-        client_id: '875a3b57d3a640a6b7f9b4e883463ab4',
+        client_id: '98f7e42c2e3a4f86a74eb43fbb41ed39',
+        client_secret: '0a2449a2-001a-451e-afec-3e812901c4d7',
       });
       tokens.access_token = refreshed.data.access_token;
     } catch {