[Feature]: Support BiliBili Cookie injection to unlock 1080p/4K streams and bypass WAF risk control (-352)

[Aquarius-Situla]

Type of request

New feature

What problem would this solve?

Currently, watching BiliBili videos on TypeType suffers from two major limitations:

1. Low Video Quality (Capped at 360p / 480p):
   Unauthenticated BiliBili video stream requests are restricted to 360p or 480p by Bilibili's official guest policy (try_look=1). There is currently no way to supply account credentials or cookies, making HD/4K playback impossible even for users with Bilibili accounts or VIP status.

2. Datacenter IP Risk Control (-352):
   When hosting TypeType on cloud VPS / datacenter server IPs (ByteVirt, Hetzner, AWS, etc.), Bilibili's anti-scraping WAF frequently intercepts extraction requests with:
   {"code": -352, "message": "风控校验失败"}
   This causes channel feeds and search results to return 0 items.

What would you like to see?

I would like to see a mechanism to inject BiliBili account cookies into TypeType, similar to how YouTube authentication is handled.

The underlying PipePipe / NewPipeExtractor engine already supports BiliBili tokens natively:

// BiliBiliStreamExtractor.java:
if (ServiceList.BiliBili.hasTokens() && ServiceList.BiliBili.getCookieFunctions().contains("high_res")) {
    headers.put("Cookie", Collections.singletonList(ServiceList.BiliBili.getTokens()));
} else if (this.isPremiumContent != 1) {
    params.put("try_look", "1"); // forces guest low resolution!
}

Suggested implementation options:

1. Environment Variables:
   Allow configuring BILIBILI_COOKIE (or SESSDATA, bili_jct, buvid3) in docker-compose.yml. On server boot, TypeType-Server can pass this to:

   ServiceList.BiliBili.setTokens(configuredBilibiliCookie);

2. Admin Web Settings:
   Allow instance administrators to paste the cookie string under /admin/settings.
3. Optional QR Code / Remote Login:
   Similar to YouTube Remote Browser, provide a QR code login flow to capture and store cookies automatically.

Benefits:

• Unlocks official 1080p, 1080p60, and 4K streams for users with Bilibili accounts.
• Effectively bypasses WAF risk control -352 for self-hosted instances on cloud VPS.

Area

Token / remote login

[Priveetee]

It's already in beta, so if u can test it, it'd be cool to get some feedback. Otherwise, just wait for the next release ;p (I don't have a Bilibili account, so I can't test it myself! :0)

How to setup beta

[Priveetee]

Or u can test it directly on the beta, Beta Website Public Instance