@hupan56/wlkj 2.5.0 → 2.7.0

package/templates/qoder/scripts/kg_auto_login.py

@@ -0,0 +1,196 @@
+# -*- coding: utf-8 -*-
+"""
+全自动登录: 获取验证码 → ddddocr识别 → 页面JS加密提交 → 保存token
+登录态保存到 auth-state.json, 后续测试复用(无需再次识别验证码)。
+"""
+import base64
+import json
+import os
+import sys
+import requests
+import ddddocr
+
+BASE_URL = 'https://icsqas.inforecloud.com'
+API_PREFIX = '/test-api'
+USERNAME = '15888888887'
+PASSWORD = 'admin123'
+CLIENT_ID = 'e5cd7e4891bf95d1d19206ce24a7b32e'
+
+# RSA公钥 (从 .env.production)
+RSA_PUBLIC_KEY_B64 = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDN/EkuOg1gq/t2/PUI8GpcJCsCFQgHkSHUEdk7ZPrEQYd8IM1hFkHmDJrCOQ+qUPqKHG9a5BAI44yE6FuPI9Vvqu2ZrCww/zryR7A+2n5jaKIG2rJG9KHDzT5mAVOJrlhBf8L2i7wZc8eWrNg0md0BlwEowQyVEEj9oIBlw/nqTwIDAQAB'
+
+# 保存路径
+SCRIPTS_DIR = os.path.dirname(os.path.abspath(__file__))
+
+
+def _read_developer():
+    """读 .qoder/.developer 拿当前开发者名, 用于身份隔离。
+    多人共用 workspace 时, auth-state 必须按开发者分目录, 否则会串登录态。
+    没有身份 → 抛异常 (绝不 fallback 到 hupan/default, 防串号)。"""
+    dev_file = os.path.join(SCRIPTS_DIR, '..', '..', '.qoder', '.developer')
+    if os.path.isfile(dev_file):
+        for ln in open(dev_file, encoding='utf-8'):
+            if ln.strip().startswith('name='):
+                return ln.strip().split('=', 1)[1].strip()
+    raise RuntimeError(
+        '未检测到开发者身份(.qoder/.developer)。请先运行 /wl-init 注册身份。'
+        ' (auth-state 按开发者分目录, 没身份无法隔离 → 拒绝执行防串号)'
+    )
+
+
+STATE_FILE = os.path.join(SCRIPTS_DIR, '..', '..', 'workspace', 'members',
+                          _read_developer(), 'auth-state.json')
+
+out = []
+def log(s=''):
+    out.append(s)
+    print(s)
+
+
+def get_captcha():
+    """获取验证码图片 + uuid"""
+    resp = requests.get(BASE_URL + API_PREFIX + '/auth/code', timeout=10)
+    data = resp.json().get('data', {})
+    return data.get('uuid'), data.get('img'), data.get('captchaEnabled', False)
+
+
+def recognize_captcha(img_b64):
+    """用 ddddocr 识别验证码图片, 并解析数学题(ICS 是 a op b = ? 形式).
+    返回算出的答案字符串; 解析失败返回 None."""
+    import re as _re
+    ocr = ddddocr.DdddOcr(show_ad=False)
+    img_bytes = base64.b64decode(img_b64)
+    raw = ocr.classification(img_bytes)
+    # 规范化运算符 (x/X/× → *, ÷ → /), 去掉 = ? 尾部
+    expr = raw.replace('x', '*').replace('X', '*').replace('×', '*').replace('÷', '/')
+    expr = expr.rstrip('=?？').strip()
+    m = _re.match(r'^\s*(\d+)\s*([+\-*/])\s*(\d+)\s*$', expr)
+    if not m:
+        return None
+    a, op, b = int(m.group(1)), m.group(2), int(m.group(3))
+    if op == '+':
+        ans = a + b
+    elif op == '-':
+        ans = a - b
+    elif op == '*':
+        ans = a * b
+    elif op == '/':
+        ans = a // b if b else None
+    else:
+        return None
+    return str(ans) if ans is not None else None
+
+
+def encrypt_login(username, password, code, uuid):
+    """用 RSA+AES 加密登录请求 (复现前端加密逻辑)。
+    使用 cryptography 库 (替代 pycryptodome)。"""
+    import os as _os
+    from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
+    from cryptography.hazmat.primitives.padding import PKCS7
+    from cryptography.hazmat.primitives.asymmetric import padding as asym_padding
+    from cryptography.hazmat.primitives.serialization import load_der_public_key
+
+    # 1. 生成随机 AES 密钥 (前端用 randomUUID = 32 hex chars)
+    aes_key = _os.urandom(16).hex().encode('utf-8')  # 32 bytes
+
+    # 2. AES-ECB-PKCS7 加密请求体
+    login_body = json.dumps({
+        'username': username,
+        'password': password,
+        'grantType': 'password',
+        'tenantId': '000000',
+        'clientId': CLIENT_ID,
+        'code': code,
+        'uuid': uuid,
+    }, ensure_ascii=False).encode('utf-8')
+
+    padder = PKCS7(128).padder()
+    padded = padder.update(login_body) + padder.finalize()
+    cipher = Cipher(algorithms.AES(aes_key), modes.ECB())
+    encryptor = cipher.encryptor()
+    encrypted_body = base64.b64encode(encryptor.update(padded) + encryptor.finalize()).decode()
+
+    # 3. RSA 加密 AES 密钥 (前端: encrypt(encryptBase64(aesKey)))
+    aes_key_b64 = base64.b64encode(aes_key).decode()
+    pub_key = load_der_public_key(base64.b64decode(RSA_PUBLIC_KEY_B64))
+    encrypted_key_bytes = pub_key.encrypt(aes_key_b64.encode('utf-8'), asym_padding.PKCS1v15())
+    encrypted_key = base64.b64encode(encrypted_key_bytes).decode()
+
+    return encrypted_body, encrypted_key
+
+
+def login():
+    """全自动登录流程"""
+    log('=== 全自动登录 ===')
+
+    # 1. 获取验证码
+    uuid, img_b64, captcha_enabled = get_captcha()
+    log('验证码: enabled=%s, uuid=%s' % (captcha_enabled, uuid[:8] if uuid else 'N/A'))
+
+    if not captcha_enabled:
+        log('验证码未开启, 直接登录')
+        code = ''
+        uuid = ''
+    else:
+        # 2. OCR 识别 + 数学题解析
+        code = recognize_captcha(img_b64)
+        log('OCR识别验证码: %s' % code)
+        if code is None:
+            # ddddocr 没读对(数学题识别不稳定), 本次放弃, 让外层重试
+            log('验证码识别失败(数学题未解析), 重试')
+            return None
+
+    # 3. 加密 + 登录
+    try:
+        encrypted_body, encrypted_key = encrypt_login(USERNAME, PASSWORD, code, uuid)
+        log('加密完成, 发送登录请求...')
+
+        resp = requests.post(
+            BASE_URL + API_PREFIX + '/auth/login',
+            data=encrypted_body,
+            headers={
+                'Content-Type': 'application/json',
+                'encrypt-key': encrypted_key,
+            },
+            timeout=10,
+        )
+        result = resp.json()
+        log('登录响应: code=%s, msg=%s' % (result.get('code'), result.get('msg')))
+
+        if result.get('code') == 200 and result.get('data', {}).get('access_token'):
+            token = result['data']['access_token']
+            log('✓ 登录成功! token=%s...' % token[:20])
+
+            # 保存登录态
+            os.makedirs(os.path.dirname(STATE_FILE), exist_ok=True)
+            with open(STATE_FILE, 'w', encoding='utf-8') as f:
+                json.dump({
+                    'access_token': token,
+                    'base_url': BASE_URL,
+                    'api_prefix': API_PREFIX,
+                    'saved_at': __import__('datetime').datetime.now().isoformat(),
+                }, f, indent=2)
+            log('登录态已保存: %s' % STATE_FILE)
+            return token
+        else:
+            log('✗ 登录失败: %s' % json.dumps(result, ensure_ascii=False)[:200])
+            log('  可能验证码识别错误, 重试...')
+            return None
+    except Exception as e:
+        log('登录异常: %s' % str(e))
+        return None
+
+
+if __name__ == '__main__':
+    # 数学题验证码识别不稳定, 多重试几次 (实测 ~30% 一次读对, 20 次基本必中)
+    import time as _time
+    for attempt in range(20):
+        log('--- 尝试 %d ---' % (attempt + 1))
+        token = login()
+        if token:
+            break
+        _time.sleep(0.3)
+    else:
+        log('20次尝试均失败, 请检查账号/密码/验证码/网络')
+
+    open(os.path.join(SCRIPTS_DIR, '_login_log.txt'), 'w', encoding='utf-8').write('\n'.join(out))