I subscribed some time ago to a climbing magazine through Zinio. And I wanted to see how they implemented the authentication system in their app. (Lately in Spain we had some huge problem with the same topic: Metrovalencia)
Zinio app is based in Node.js. Wasn’t difficult to see under the hood. After so time I figure out the headers request
headers = {
'authority':'www.zinio.com',
'method':'POST',
'path':'/api/login?project=99',
'scheme':'https',
"authorization": "",
"X-ZINIO-User-Id": "",
"User-Agent": "Mozilla/5.0 ...",
"accept" : "*/*",
"accept-encoding" : "gzip, deflate, br",
"accept-language" : "en-US,en;q=0.9",
"content-length" : "53",
"content-type" : "application/json",
"origin" : "null"
}