This is a WIP documentation for the API powering the second-hand market place Willhaben.
For information on how to create an application token, which is required for almost every request, see applicationToken.md
Feel free to create issues and or pull requests.
Since the web version of willhaben only provides static text, we get the api specs through the mobile apps.
Because of the use of SSL-Pinning, mitmproxy alone, isn't enough to monitor the network traffic. If you want to help me document the rest of the endpoints or potential future changes in the API, I recommend the following tools (android):
- mitmproxy to monitor the network requests
- jadx to unpack the apk
- frida for ssl-unpinning code-injection
- frida_multiple_unpinning.js. This is one of the very few unpinning scripts that actually work. Httptoolkit also works if your phone is rooted and you don't have a problem with light mode GUIs (not-recommended).
- no idea, I have a rooted phone, sorry. But it's possible
See Redocly/openapi-starter for more information about how to build the documentation with redocly.