@neteasecloudmusicapienhanced/api 4.31.0 → 4.32.1

package/util/client-sign.js

@@ -1,169 +1,169 @@
-const crypto = require('crypto')
-const os = require('os')
-
-class AdvancedClientSignGenerator {
-  /**
-   * 获取本机MAC地址
-   */
-  static getRealMacAddress() {
-    try {
-      const interfaces = os.networkInterfaces()
-      for (let interfaceName in interfaces) {
-        const interfaceItem = interfaces[interfaceName]
-        for (let i = 0; i < interfaceItem.length; i++) {
-          const alias = interfaceItem[i]
-          // 排除内部地址和无效地址
-          if (
-            alias.mac &&
-            alias.mac !== '00:00:00:00:00:00' &&
-            !alias.internal
-          ) {
-            return alias.mac.toUpperCase()
-          }
-        }
-      }
-      return null
-    } catch (error) {
-      console.warn('获取MAC地址失败:', error.message)
-      return null
-    }
-  }
-
-  /**
-   * 生成随机MAC地址
-   */
-  static generateRandomMac() {
-    const chars = '0123456789ABCDEF'
-    let mac = ''
-    for (let i = 0; i < 6; i++) {
-      if (i > 0) mac += ':'
-      mac +=
-        chars[Math.floor(Math.random() * 16)] +
-        chars[Math.floor(Math.random() * 16)]
-    }
-    // 确保第一个字节是单播地址（最低位为0）
-    const firstByte = parseInt(mac.substring(0, 2), 16)
-    const unicastFirstByte = (firstByte & 0xfe)
-      .toString(16)
-      .padStart(2, '0')
-      .toUpperCase()
-    return unicastFirstByte + mac.substring(2)
-  }
-
-  /**
-   * 获取MAC地址（优先真实，否则随机）
-   */
-  static getMacAddress() {
-    const realMac = this.getRealMacAddress()
-    if (realMac) {
-      return realMac
-    }
-    console.warn('无法获取真实MAC地址，使用随机生成')
-    return this.generateRandomMac()
-  }
-
-  /**
-   * 字符串转HEX编码
-   */
-  static stringToHex(str) {
-    return Buffer.from(str, 'utf8').toString('hex').toUpperCase()
-  }
-
-  /**
-   * SHA-256哈希
-   */
-  static sha256(data) {
-    return crypto.createHash('sha256').update(data, 'utf8').digest('hex')
-  }
-
-  /**
-   * 生成随机设备ID
-   */
-  static generateRandomDeviceId() {
-    const partLengths = [4, 4, 4, 4, 4, 4, 4, 5] // 各部分长度
-    const chars = '0123456789ABCDEF'
-
-    const parts = partLengths.map((length) => {
-      let part = ''
-      for (let i = 0; i < length; i++) {
-        part += chars[Math.floor(Math.random() * 16)]
-      }
-      return part
-    })
-
-    return parts.join('_')
-  }
-
-  /**
-   * 生成随机clientSign（优先使用真实MAC，否则随机）
-   */
-  static generateRandomClientSign(secretKey = '') {
-    // 获取MAC地址（优先真实，否则随机）
-    const macAddress = this.getMacAddress()
-
-    // 生成随机设备ID
-    const deviceId = this.generateRandomDeviceId()
-
-    // 转换设备ID为HEX
-    const hexDeviceId = this.stringToHex(deviceId)
-
-    // 构造签名字符串
-    const signString = `${macAddress}@@@${hexDeviceId}`
-
-    // 生成哈希
-    const hash = this.sha256(signString + secretKey)
-
-    return `${signString}@@@@@@${hash}`
-  }
-
-  /**
-   * 批量生成多个随机签名
-   */
-  static generateMultipleRandomSigns(count, secretKey = '') {
-    const signs = []
-    for (let i = 0; i < count; i++) {
-      signs.push(this.generateRandomClientSign(secretKey))
-    }
-    return signs
-  }
-
-  /**
-   * 使用指定参数生成签名
-   */
-  static generateWithCustomDeviceId(macAddress, deviceId, secretKey = '') {
-    const hexDeviceId = this.stringToHex(deviceId)
-    const signString = `${macAddress}@@@${hexDeviceId}`
-    const hash = this.sha256(signString + secretKey)
-    return `${signString}@@@@@@${hash}`
-  }
-
-  /**
-   * 验证签名格式是否正确
-   */
-  static validateClientSign(clientSign) {
-    try {
-      const parts = clientSign.split('@@@@@@')
-      if (parts.length !== 2) return false
-
-      const [infoPart, hash] = parts
-      const infoParts = infoPart.split('@@@')
-      if (infoParts.length !== 2) return false
-
-      const [mac, hexDeviceId] = infoParts
-
-      // 验证MAC地址格式
-      const macRegex = /^([0-9A-F]{2}:){5}[0-9A-F]{2}$/
-      if (!macRegex.test(mac)) return false
-
-      // 验证哈希格式
-      const hashRegex = /^[0-9a-f]{64}$/
-      if (!hashRegex.test(hash)) return false
-
-      return true
-    } catch (error) {
-      return false
-    }
-  }
-}
-
-module.exports = AdvancedClientSignGenerator
+const crypto = require('crypto')
+const os = require('os')
+
+class AdvancedClientSignGenerator {
+  /**
+   * 获取本机MAC地址
+   */
+  static getRealMacAddress() {
+    try {
+      const interfaces = os.networkInterfaces()
+      for (let interfaceName in interfaces) {
+        const interfaceItem = interfaces[interfaceName]
+        for (let i = 0; i < interfaceItem.length; i++) {
+          const alias = interfaceItem[i]
+          // 排除内部地址和无效地址
+          if (
+            alias.mac &&
+            alias.mac !== '00:00:00:00:00:00' &&
+            !alias.internal
+          ) {
+            return alias.mac.toUpperCase()
+          }
+        }
+      }
+      return null
+    } catch (error) {
+      console.warn('获取MAC地址失败:', error.message)
+      return null
+    }
+  }
+
+  /**
+   * 生成随机MAC地址
+   */
+  static generateRandomMac() {
+    const chars = '0123456789ABCDEF'
+    let mac = ''
+    for (let i = 0; i < 6; i++) {
+      if (i > 0) mac += ':'
+      mac +=
+        chars[Math.floor(Math.random() * 16)] +
+        chars[Math.floor(Math.random() * 16)]
+    }
+    // 确保第一个字节是单播地址（最低位为0）
+    const firstByte = parseInt(mac.substring(0, 2), 16)
+    const unicastFirstByte = (firstByte & 0xfe)
+      .toString(16)
+      .padStart(2, '0')
+      .toUpperCase()
+    return unicastFirstByte + mac.substring(2)
+  }
+
+  /**
+   * 获取MAC地址（优先真实，否则随机）
+   */
+  static getMacAddress() {
+    const realMac = this.getRealMacAddress()
+    if (realMac) {
+      return realMac
+    }
+    console.warn('无法获取真实MAC地址，使用随机生成')
+    return this.generateRandomMac()
+  }
+
+  /**
+   * 字符串转HEX编码
+   */
+  static stringToHex(str) {
+    return Buffer.from(str, 'utf8').toString('hex').toUpperCase()
+  }
+
+  /**
+   * SHA-256哈希
+   */
+  static sha256(data) {
+    return crypto.createHash('sha256').update(data, 'utf8').digest('hex')
+  }
+
+  /**
+   * 生成随机设备ID
+   */
+  static generateRandomDeviceId() {
+    const partLengths = [4, 4, 4, 4, 4, 4, 4, 5] // 各部分长度
+    const chars = '0123456789ABCDEF'
+
+    const parts = partLengths.map((length) => {
+      let part = ''
+      for (let i = 0; i < length; i++) {
+        part += chars[Math.floor(Math.random() * 16)]
+      }
+      return part
+    })
+
+    return parts.join('_')
+  }
+
+  /**
+   * 生成随机clientSign（优先使用真实MAC，否则随机）
+   */
+  static generateRandomClientSign(secretKey = '') {
+    // 获取MAC地址（优先真实，否则随机）
+    const macAddress = this.getMacAddress()
+
+    // 生成随机设备ID
+    const deviceId = this.generateRandomDeviceId()
+
+    // 转换设备ID为HEX
+    const hexDeviceId = this.stringToHex(deviceId)
+
+    // 构造签名字符串
+    const signString = `${macAddress}@@@${hexDeviceId}`
+
+    // 生成哈希
+    const hash = this.sha256(signString + secretKey)
+
+    return `${signString}@@@@@@${hash}`
+  }
+
+  /**
+   * 批量生成多个随机签名
+   */
+  static generateMultipleRandomSigns(count, secretKey = '') {
+    const signs = []
+    for (let i = 0; i < count; i++) {
+      signs.push(this.generateRandomClientSign(secretKey))
+    }
+    return signs
+  }
+
+  /**
+   * 使用指定参数生成签名
+   */
+  static generateWithCustomDeviceId(macAddress, deviceId, secretKey = '') {
+    const hexDeviceId = this.stringToHex(deviceId)
+    const signString = `${macAddress}@@@${hexDeviceId}`
+    const hash = this.sha256(signString + secretKey)
+    return `${signString}@@@@@@${hash}`
+  }
+
+  /**
+   * 验证签名格式是否正确
+   */
+  static validateClientSign(clientSign) {
+    try {
+      const parts = clientSign.split('@@@@@@')
+      if (parts.length !== 2) return false
+
+      const [infoPart, hash] = parts
+      const infoParts = infoPart.split('@@@')
+      if (infoParts.length !== 2) return false
+
+      const [mac, hexDeviceId] = infoParts
+
+      // 验证MAC地址格式
+      const macRegex = /^([0-9A-F]{2}:){5}[0-9A-F]{2}$/
+      if (!macRegex.test(mac)) return false
+
+      // 验证哈希格式
+      const hashRegex = /^[0-9a-f]{64}$/
+      if (!hashRegex.test(hash)) return false
+
+      return true
+    } catch (error) {
+      return false
+    }
+  }
+}
+
+module.exports = AdvancedClientSignGenerator

package/util/config.json

@@ -1,20 +1,20 @@
-{
-  "resourceTypeMap": {
-    "0": "R_SO_4_",
-    "1": "R_MV_5_",
-    "2": "A_PL_0_",
-    "3": "R_AL_3_",
-    "4": "A_DJ_1_",
-    "5": "R_VI_62_",
-    "6": "A_EV_2_",
-    "7": "A_DR_14_"
-  },
-  "APP_CONF": {
-    "apiDomain": "https://interface.music.163.com",
-    "domain": "https://music.163.com",
-    "encrypt": true,
-    "encryptResponse": false,
-    "clientSign": "18:C0:4D:B9:8F:FE@@@453832335F384641365F424635335F303030315F303031425F343434415F343643365F333638332@@@@@@6ff673ef74955b38bce2fa8562d95c976ed4758b1227c4e9ee345987cee17bc9",
-    "checkToken": "9ca17ae2e6ffcda170e2e6ee8af14fbabdb988f225b3868eb2c15a879b9a83d274a790ac8ff54a97b889d5d42af0feaec3b92af58cff99c470a7eafd88f75e839a9ea7c14e909da883e83fb692a3abdb6b92adee9e"
-  }
-}
+{
+  "resourceTypeMap": {
+    "0": "R_SO_4_",
+    "1": "R_MV_5_",
+    "2": "A_PL_0_",
+    "3": "R_AL_3_",
+    "4": "A_DJ_1_",
+    "5": "R_VI_62_",
+    "6": "A_EV_2_",
+    "7": "A_DR_14_"
+  },
+  "APP_CONF": {
+    "apiDomain": "https://interface.music.163.com",
+    "domain": "https://music.163.com",
+    "encrypt": true,
+    "encryptResponse": false,
+    "clientSign": "18:C0:4D:B9:8F:FE@@@453832335F384641365F424635335F303030315F303031425F343434415F343643365F333638332@@@@@@6ff673ef74955b38bce2fa8562d95c976ed4758b1227c4e9ee345987cee17bc9",
+    "checkToken": "9ca17ae2e6ffcda170e2e6ee8af14fbabdb988f225b3868eb2c15a879b9a83d274a790ac8ff54a97b889d5d42af0feaec3b92af58cff99c470a7eafd88f75e839a9ea7c14e909da883e83fb692a3abdb6b92adee9e"
+  }
+}

package/util/crypto.js

@@ -1,135 +1,153 @@
-const CryptoJS = require('crypto-js')
-const forge = require('node-forge')
-const iv = '0102030405060708'
-const presetKey = '0CoJUm6Qyw8W8jud'
-const linuxapiKey = 'rFgB&h#%2?^eDg:Q'
-const base62 = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'
-const publicKey = `-----BEGIN PUBLIC KEY-----
-MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgtQn2JZ34ZC28NWYpAUd98iZ37BUrX/aKzmFbt7clFSs6sXqHauqKWqdtLkF2KexO40H1YTX8z2lSgBBOAxLsvaklV8k4cBFK9snQXE9/DDaFt6Rr7iVZMldczhC0JNgTz+SHXT6CBHuX3e9SdB1Ua44oncaTWz7OBGLbCiK45wIDAQAB
------END PUBLIC KEY-----`
-const eapiKey = 'e82ckenh8dichen8'
-
-const aesEncrypt = (text, mode, key, iv, format = 'base64') => {
-  let encrypted = CryptoJS.AES.encrypt(
-    CryptoJS.enc.Utf8.parse(text),
-    CryptoJS.enc.Utf8.parse(key),
-    {
-      iv: CryptoJS.enc.Utf8.parse(iv),
-      mode: CryptoJS.mode[mode.toUpperCase()],
-      padding: CryptoJS.pad.Pkcs7,
-    },
-  )
-  if (format === 'base64') {
-    return encrypted.toString()
-  }
-
-  return encrypted.ciphertext.toString().toUpperCase()
-}
-const aesDecrypt = (ciphertext, key, iv, format = 'base64') => {
-  let bytes
-  if (format === 'base64') {
-    bytes = CryptoJS.AES.decrypt(ciphertext, CryptoJS.enc.Utf8.parse(key), {
-      iv: CryptoJS.enc.Utf8.parse(iv),
-      mode: CryptoJS.mode.ECB,
-      padding: CryptoJS.pad.Pkcs7,
-    })
-  } else {
-    bytes = CryptoJS.AES.decrypt(
-      { ciphertext: CryptoJS.enc.Hex.parse(ciphertext) },
-      CryptoJS.enc.Utf8.parse(key),
-      {
-        iv: CryptoJS.enc.Utf8.parse(iv),
-        mode: CryptoJS.mode.ECB,
-        padding: CryptoJS.pad.Pkcs7,
-      },
-    )
-  }
-  return bytes.toString(CryptoJS.enc.Utf8)
-}
-const rsaEncrypt = (str, key) => {
-  const forgePublicKey = forge.pki.publicKeyFromPem(key)
-  const encrypted = forgePublicKey.encrypt(str, 'NONE')
-  return forge.util.bytesToHex(encrypted)
-}
-
-const weapi = (object) => {
-  const text = JSON.stringify(object)
-  let secretKey = ''
-  for (let i = 0; i < 16; i++) {
-    secretKey += base62.charAt(Math.round(Math.random() * 61))
-  }
-  return {
-    params: aesEncrypt(
-      aesEncrypt(text, 'cbc', presetKey, iv),
-      'cbc',
-      secretKey,
-      iv,
-    ),
-    encSecKey: rsaEncrypt(secretKey.split('').reverse().join(''), publicKey),
-  }
-}
-
-const linuxapi = (object) => {
-  const text = JSON.stringify(object)
-  return {
-    eparams: aesEncrypt(text, 'ecb', linuxapiKey, '', 'hex'),
-  }
-}
-
-const eapi = (url, object) => {
-  const text = typeof object === 'object' ? JSON.stringify(object) : object
-  const message = `nobody${url}use${text}md5forencrypt`
-  const digest = CryptoJS.MD5(message).toString()
-  const data = `${url}-36cd479b6b5-${text}-36cd479b6b5-${digest}`
-  return {
-    params: aesEncrypt(data, 'ecb', eapiKey, '', 'hex'),
-  }
-}
-const eapiResDecrypt = (encryptedParams) => {
-  // 使用aesDecrypt解密参数
-  try {
-    const decryptedData = aesDecrypt(encryptedParams, eapiKey, '', 'hex')
-    return JSON.parse(decryptedData)
-  } catch (error) {
-    console.log('eapiResDecrypt error:', error)
-    return null
-  }
-}
-const eapiReqDecrypt = (encryptedParams) => {
-  // 使用aesDecrypt解密参数
-  const decryptedData = aesDecrypt(encryptedParams, eapiKey, '', 'hex')
-  // 使用正则表达式解析出URL和数据
-  const match = decryptedData.match(/(.*?)-36cd479b6b5-(.*?)-36cd479b6b5-(.*)/)
-  if (match) {
-    const url = match[1]
-    const data = JSON.parse(match[2])
-    return { url, data }
-  }
-
-  // 如果没有匹配到，返回null
-  return null
-}
-const decrypt = (cipher) => {
-  const decipher = CryptoJS.AES.decrypt(
-    {
-      ciphertext: CryptoJS.enc.Hex.parse(cipher),
-    },
-    eapiKey,
-    {
-      mode: CryptoJS.mode.ECB,
-    },
-  )
-  const decryptedBytes = CryptoJS.enc.Utf8.stringify(decipher)
-  return decryptedBytes
-}
-
-module.exports = {
-  weapi,
-  linuxapi,
-  eapi,
-  decrypt,
-  aesEncrypt,
-  aesDecrypt,
-  eapiReqDecrypt,
-  eapiResDecrypt,
-}
+const CryptoJS = require('crypto-js')
+const forge = require('node-forge')
+const zlib = require('zlib')
+const iv = '0102030405060708'
+const presetKey = '0CoJUm6Qyw8W8jud'
+const linuxapiKey = 'rFgB&h#%2?^eDg:Q'
+const base62 = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'
+const publicKey = `-----BEGIN PUBLIC KEY-----
+MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgtQn2JZ34ZC28NWYpAUd98iZ37BUrX/aKzmFbt7clFSs6sXqHauqKWqdtLkF2KexO40H1YTX8z2lSgBBOAxLsvaklV8k4cBFK9snQXE9/DDaFt6Rr7iVZMldczhC0JNgTz+SHXT6CBHuX3e9SdB1Ua44oncaTWz7OBGLbCiK45wIDAQAB
+-----END PUBLIC KEY-----`
+const eapiKey = 'e82ckenh8dichen8'
+
+const aesEncrypt = (text, mode, key, iv, format = 'base64') => {
+  let encrypted = CryptoJS.AES.encrypt(
+    CryptoJS.enc.Utf8.parse(text),
+    CryptoJS.enc.Utf8.parse(key),
+    {
+      iv: CryptoJS.enc.Utf8.parse(iv),
+      mode: CryptoJS.mode[mode.toUpperCase()],
+      padding: CryptoJS.pad.Pkcs7,
+    },
+  )
+  if (format === 'base64') {
+    return encrypted.toString()
+  }
+
+  return encrypted.ciphertext.toString().toUpperCase()
+}
+const aesDecrypt = (ciphertext, key, iv, format = 'base64') => {
+  let bytes
+  if (format === 'base64') {
+    bytes = CryptoJS.AES.decrypt(ciphertext, CryptoJS.enc.Utf8.parse(key), {
+      iv: CryptoJS.enc.Utf8.parse(iv),
+      mode: CryptoJS.mode.ECB,
+      padding: CryptoJS.pad.Pkcs7,
+    })
+  } else {
+    bytes = CryptoJS.AES.decrypt(
+      { ciphertext: CryptoJS.enc.Hex.parse(ciphertext) },
+      CryptoJS.enc.Utf8.parse(key),
+      {
+        iv: CryptoJS.enc.Utf8.parse(iv),
+        mode: CryptoJS.mode.ECB,
+        padding: CryptoJS.pad.Pkcs7,
+      },
+    )
+  }
+  return bytes
+}
+const rsaEncrypt = (str, key) => {
+  const forgePublicKey = forge.pki.publicKeyFromPem(key)
+  const encrypted = forgePublicKey.encrypt(str, 'NONE')
+  return forge.util.bytesToHex(encrypted)
+}
+
+const weapi = (object) => {
+  const text = JSON.stringify(object)
+  let secretKey = ''
+  for (let i = 0; i < 16; i++) {
+    secretKey += base62.charAt(Math.round(Math.random() * 61))
+  }
+  return {
+    params: aesEncrypt(
+      aesEncrypt(text, 'cbc', presetKey, iv),
+      'cbc',
+      secretKey,
+      iv,
+    ),
+    encSecKey: rsaEncrypt(secretKey.split('').reverse().join(''), publicKey),
+  }
+}
+
+const linuxapi = (object) => {
+  const text = JSON.stringify(object)
+  return {
+    eparams: aesEncrypt(text, 'ecb', linuxapiKey, '', 'hex'),
+  }
+}
+
+const eapi = (url, object) => {
+  const text = typeof object === 'object' ? JSON.stringify(object) : object
+  const message = `nobody${url}use${text}md5forencrypt`
+  const digest = CryptoJS.MD5(message).toString()
+  const data = `${url}-36cd479b6b5-${text}-36cd479b6b5-${digest}`
+  return {
+    params: aesEncrypt(data, 'ecb', eapiKey, '', 'hex'),
+  }
+}
+const eapiResDecrypt = (encryptedParams, aeapi = false) => {
+  // 使用aesDecrypt解密参数
+  try {
+    const decrypted = aesDecrypt(encryptedParams, eapiKey, '', 'hex') // WordArray
+
+    if (aeapi) {
+      // 带压缩的解密：先转 Base64 再解压
+      const decryptedBuffer = Buffer.from(
+        decrypted.toString(CryptoJS.enc.Base64),
+        'base64',
+      )
+      const decompressed = zlib.gunzipSync(decryptedBuffer)
+      return JSON.parse(decompressed.toString())
+    } else {
+      // 普通解密：直接转 UTF-8 字符串
+      return JSON.parse(decrypted.toString(CryptoJS.enc.Utf8))
+    }
+  } catch (error) {
+    console.log(`eapiResDecrypt error:`, error)
+    return null
+  }
+}
+const eapiReqDecrypt = (encryptedParams) => {
+  // 使用 aesDecrypt 解密参数
+  const decryptedData = aesDecrypt(
+    encryptedParams,
+    eapiKey,
+    '',
+    'hex',
+  ).toString(CryptoJS.enc.Utf8)
+  // 使用正则表达式解析出 URL 和数据
+  const match = decryptedData.match(/(.*?)-36cd479b6b5-(.*?)-36cd479b6b5-(.*)/)
+  if (match) {
+    const url = match[1]
+    const data = JSON.parse(match[2])
+    return { url, data }
+  }
+
+  // 如果没有匹配到，返回 null
+  return null
+}
+const decrypt = (cipher) => {
+  const decipher = CryptoJS.AES.decrypt(
+    {
+      ciphertext: CryptoJS.enc.Hex.parse(cipher),
+    },
+    eapiKey,
+    {
+      mode: CryptoJS.mode.ECB,
+    },
+  )
+  const decryptedBytes = CryptoJS.enc.Utf8.stringify(decipher)
+  return decryptedBytes
+}
+
+module.exports = {
+  weapi,
+  linuxapi,
+  eapi,
+  decrypt,
+  aesEncrypt,
+  aesDecrypt,
+  eapiReqDecrypt,
+  eapiResDecrypt,
+}