Curl-impersonate: Special build of curl that can impersonate the major browsers

There's a fork of this that has some great improvements over to the top of the original and it is also actively maintained: https://github.com/lexiforest/curl-impersonate

There's also Python bindings for the fork for anyone who uses Python: https://github.com/lexiforest/curl_cffi

I suppose it does make sense that a "make curl look like a browser" program would get sponsored by "bypass bot detection" services...

Easy. Just make a small fragment shader to produce a token in your client. No bot is going to waste GPU resources to compile your shader.

Can't a bot just collect a few real tokens and then send those instead of trying to run the shader?

How do you automate that? Just generate a new token for each day.

replay attacks are some of the easiest to automate