RBM - FB Token Fetcher

RBM - FB Token Fetcher is a Google Chrome extension designed to quickly fetch a short-lived Facebook token using your Facebook ID (email/phone), password, and (if needed) a 2FA key (TOTP). The extension leverages Facebook’s mobile API to authenticate and retrieve tokens while handling two-factor authentication (via SMS or TOTP).

Features

• Simple Authentication Flow:
  You can enter your Facebook credentials and (optionally) your 2FA key, and the extension will get your short-lived tokens.

• 2FA Handling:
  Supports both SMS-based and TOTP-based two-factor authentication.

  • If 2FA is required, you’ll be prompted to enter the SMS code or the code generated from your authenticator app.

• Country Auto-Detection:
  Automatically detects your country using the ipinfo.io API.

• User-Friendly Interface:
  Clean, responsive UI styled with Facebook-inspired colors.

Files

• manifest.json:
  The Chrome extension manifests defining permissions, icons, and popup settings.

• popup.html:
  The HTML file for the extension's popup interface.

• popup.js:
  The JavaScript code that handles:

  • Fetching the short-lived token from Facebook.
  • Processing two-factor authentication.
  • Displaying tokens and error messages.

• styles.css:
  The CSS file that styles the popup UI.

How It Works

1. Authentication:
   The extension sends a POST request to https://b-api.facebook.com/method/auth.login with your credentials.

   • If Facebook requires two-factor authentication (2FA), it returns an error (code 406) with instructions.
   • Depending on the response, the extension prompts for either an SMS code or a TOTP code.

2. Token Retrieval:
   Once authenticated, the extension attempts to retrieve both a Lite Token and an Android Token using additional API calls.

   • If additional tokens are not returned, the original access token is used as a fallback.

3. Token Display:
   The fetched tokens are shown in the popup, and you can copy them to your clipboard with a click of a button.