i was trying to make a small bot that would log into my account on zalando.com website using python requests. But im having alot of trouble with authenticating my session.

The only thing i was able to find is that the website authenticates the user first and then loads the login page -> awaits a click event to execute some code then sends a post request with payload of the email, password and a long request token thingy. the request token is always constant, i assumed this from comparing it across many browsers and after a cookie wipe.

Heading straight to zalando.co.uk/login causes 2 GET requests -one to /authorize?some_ids_tokens_idonnt_know_about -one to /authenticate?TheSameRequestTokenThingyy

I guess that the solution of my problem starts from the first request. This boils my questions down to two questions? What javaScript functions calls these two requests? And how they generate these ids/tokens?

(I tried reverse engineering the javascript of the website and it was horrible, and its giving me terrible nightmares lol).