I want to write a bot that will collect mana on my accounts on the https://trovo.live , but I ran into the following problem

When trying to log in to the trovo.live site, one of the js scripts generates a link to which the request will be sent. All data in the link is static for each request, except for sigs.

request answer - {'msg': 'invalid sig', 'ret': 1008}

https://intlsdk.trovo.live/account/login?app_id=8b0db5b2a40694f0ac1a0931549ba259&os=3&account_plat_type=1&lang_type=EN&source=11&sig=6600b5ba43362e93246b5776e75a8302

When sending a request, a link is generated that contains a sig (hashed data that I could not find and it is not clear who hashes the client or server). The request body consists of an email/phone number and a hashed password using MD5 (hashed on the client side). The sig changes each time a password is change.

    payload = {
        "account": email,
        "account_type": 1,
        "phone_area_code": "1",
        "password": make_hash(password)
    }

I would be very grateful to anyone who will describe how this process takes place if possible

P.S. this is planned to be implemented on python requests