277 lines
15 KiB
Python
277 lines
15 KiB
Python
# Source: https://github.com/3ixi/CodeScripts/blob/main/cloud_auth.py
|
||
# Raw: https://raw.githubusercontent.com/3ixi/CodeScripts/main/cloud_auth.py
|
||
# Repo: 3ixi/CodeScripts
|
||
# Path: cloud_auth.py
|
||
# UploadedAt: 2025-09-23T14:07:43+08:00
|
||
# SHA256: eb2f681e407a991c4a909c9f58a74cd58726b3204bbaa0f721a9fc015d53551c
|
||
# Category: APP版/抓包
|
||
# Evidence: cookie/token/authorization/header
|
||
|
||
#!/usr/bin/env python3
|
||
# -*- coding: utf-8 -*-
|
||
"""
|
||
3iXi云函数认证模块
|
||
用于与3iXi认证服务器进行安全通信，云端加密敏感信息
|
||
创建日期：2025-09-08
|
||
模块作者：3iXi
|
||
项目主页：https://github.com/3ixi/CloudScripts
|
||
获取授权码：https://3ixi.top
|
||
|
||
安全说明：
|
||
- 本模块仅用于与云函数认证服务器进行安全通信
|
||
- 不会收集或上传用户的个人账号数据
|
||
- 所有敏感信息均在云端加密处理
|
||
- 仅传输必要的认证信息，保护用户隐私
|
||
"""
|
||
|
||
import os
|
||
import json
|
||
import time
|
||
import uuid
|
||
import base64
|
||
import sys
|
||
from datetime import datetime, timezone, timedelta
|
||
|
||
def check_required_packages():
|
||
missing_packages = []
|
||
|
||
try:
|
||
import requests
|
||
except ImportError:
|
||
missing_packages.append('requests')
|
||
|
||
try:
|
||
from Crypto.Cipher import AES
|
||
from Crypto.Util.Padding import pad, unpad
|
||
from Crypto.PublicKey import RSA
|
||
from Crypto.Cipher import PKCS1_v1_5
|
||
except ImportError:
|
||
missing_packages.append('pycryptodome')
|
||
|
||
if missing_packages:
|
||
print("❌ 缺少必需的依赖库，请安装以下库：")
|
||
print()
|
||
for package in missing_packages:
|
||
print(f" pip install {package}")
|
||
print()
|
||
print("安装完成后请重新运行脚本。")
|
||
sys.exit(1)
|
||
|
||
check_required_packages()
|
||
|
||
import requests
|
||
from Crypto.Cipher import AES
|
||
from Crypto.Util.Padding import pad, unpad
|
||
|
||
PRIMARY_BASE_URL = "https://3ixi.top"
|
||
BACKUP_BASE_URL = "https://cloud.3ixi.top"
|
||
|
||
class CloudAuth:
|
||
def __init__(self):
|
||
self.base_urls = [PRIMARY_BASE_URL, BACKUP_BASE_URL]
|
||
self.current_url_index = 0
|
||
self.auth_code = None
|
||
self.session = requests.Session()
|
||
self._load_auth_code()
|
||
|
||
if self.auth_code:
|
||
self._verify_auth_code()
|
||
|
||
def _set_connection(self):
|
||
key_fragments = {
|
||
'prefix': 'QGp3','middle1': 'PFUk','middle2': 'MERJYmQp','suffix': 'ZW4pPw==',}
|
||
|
||
sequence = ['prefix', 'middle1', 'middle2', 'suffix']
|
||
encoded_key = ''.join([key_fragments[part] for part in sequence])
|
||
|
||
try:
|
||
decoded_key = base64.b64decode(encoded_key).decode('utf-8')
|
||
if len(decoded_key) == 16:
|
||
return decoded_key
|
||
except:
|
||
pass
|
||
|
||
backup_data = [64, 106, 119, 60, 85, 36, 48, 68, 73, 98, 100, 41, 101, 110, 41, 63]
|
||
return ''.join([chr(x) for x in backup_data])
|
||
|
||
def _switch_to_next_url(self):
|
||
self.current_url_index = (self.current_url_index + 1) % len(self.base_urls)
|
||
return self.base_urls[self.current_url_index]
|
||
|
||
def _get_current_url(self):
|
||
return self.base_urls[self.current_url_index].rstrip('/')
|
||
|
||
def _load_auth_code(self):
|
||
self.auth_code = os.getenv('CloudAuth')
|
||
if not self.auth_code:
|
||
raise ValueError("未找到环境变量'CloudAuth'，请访问https://3ixi.top获取授权码")
|
||
|
||
try:
|
||
uuid.UUID(self.auth_code)
|
||
except ValueError:
|
||
raise ValueError("授权码格式无效，请访问https://3ixi.top重新获取")
|
||
|
||
def _get_timestamp(self):
|
||
timestamp_ms = int(time.time() * 1000)
|
||
timestamp_bytes = timestamp_ms.to_bytes(8, byteorder='big') + b'\x00' * 8
|
||
return timestamp_bytes, timestamp_ms
|
||
|
||
def _aes_encrypt(self, data):
|
||
timestamp_data, timestamp_ms = self._get_timestamp()
|
||
|
||
cipher = AES.new(self._set_connection().encode('utf-8'), AES.MODE_CBC, timestamp_data)
|
||
|
||
padded_data = pad(data.encode('utf-8'), AES.block_size)
|
||
encrypted_data = cipher.encrypt(padded_data)
|
||
|
||
encrypted_b64 = base64.b64encode(encrypted_data).decode('utf-8')
|
||
random_hex = hex(timestamp_ms)[2:]
|
||
|
||
return encrypted_b64, random_hex
|
||
|
||
def _aes_decrypt(self, encrypted_data, random_hex):
|
||
timestamp_ms = int(random_hex, 16)
|
||
timestamp_bytes = timestamp_ms.to_bytes(8, byteorder='big') + b'\x00' * 8
|
||
|
||
cipher = AES.new(self._set_connection().encode('utf-8'), AES.MODE_CBC, timestamp_bytes)
|
||
|
||
encrypted_bytes = base64.b64decode(encrypted_data)
|
||
decrypted_padded = cipher.decrypt(encrypted_bytes)
|
||
decrypted_data = unpad(decrypted_padded, AES.block_size)
|
||
|
||
return decrypted_data.decode('utf-8')
|
||
|
||
def _make_request(self, endpoint, data=None, method='POST'):
|
||
if data is None:
|
||
data = {}
|
||
|
||
data['auth_code'] = self.auth_code
|
||
json_data = json.dumps(data, ensure_ascii=False)
|
||
encrypted_data, random_hex = self._aes_encrypt(json_data)
|
||
|
||
headers = {
|
||
'Content-Type': 'application/json',
|
||
'random': random_hex
|
||
}
|
||
|
||
for _ in range(len(self.base_urls)):
|
||
current_url = self._get_current_url()
|
||
url = f"{current_url}{endpoint}"
|
||
|
||
try:
|
||
if method.upper() == 'GET':
|
||
response = self.session.get(url, headers=headers, timeout=30)
|
||
else:
|
||
response = self.session.post(url, json={'data': encrypted_data}, headers=headers, timeout=30)
|
||
|
||
response.raise_for_status()
|
||
|
||
response_data = response.json()
|
||
if 'data' in response_data:
|
||
decrypted_response = self._aes_decrypt(response_data['data'], random_hex)
|
||
return json.loads(decrypted_response)
|
||
else:
|
||
return response_data
|
||
|
||
except requests.RequestException as e:
|
||
print(f"请求失败: {e}")
|
||
self._switch_to_next_url()
|
||
print(f"尝试切换到备用地址")
|
||
except json.JSONDecodeError as e:
|
||
print(f"响应解析失败: {e}")
|
||
self._switch_to_next_url()
|
||
print(f"尝试切换到备用地址")
|
||
except Exception as e:
|
||
print(f"解密失败: {e}")
|
||
self._switch_to_next_url()
|
||
print(f"尝试切换到备用地址")
|
||
|
||
raise Exception("所有服务器地址均请求失败，请检查网络连接或服务器状态")
|
||
|
||
def _verify_auth_code(self):
|
||
try:
|
||
response = self._make_request('/api/verify')
|
||
|
||
if response.get('success'):
|
||
expire_date = response.get('expire_date')
|
||
if expire_date:
|
||
china_tz = timezone(timedelta(hours=8))
|
||
expire_dt = datetime.fromisoformat(expire_date.replace('Z', '+00:00'))
|
||
china_time = expire_dt.astimezone(china_tz)
|
||
|
||
print(f"📅 授权码截止日期: {china_time.strftime('%Y-%m-%d %H:%M:%S')}")
|
||
else:
|
||
print("✅ 授权码验证成功，但未获取到截止日期")
|
||
|
||
notifications = response.get('notifications', [])
|
||
if notifications:
|
||
print("\n" + "="*30)
|
||
print("📢 系统通知:")
|
||
for i, notification in enumerate(notifications, 1):
|
||
title = notification.get('title', '无标题')
|
||
content = notification.get('content', '无内容')
|
||
print(f"\n{i}. {title}")
|
||
print(f" {content}")
|
||
print("="*30)
|
||
|
||
else:
|
||
error_msg = response.get('error', '未知错误')
|
||
|
||
if '禁用' in error_msg:
|
||
disable_reason = response.get('disable_reason', '未知原因')
|
||
disabled_at = response.get('disabled_at', '')
|
||
|
||
print(f"❌ 授权码已被禁用")
|
||
print(f"📝 禁用原因: {disable_reason}")
|
||
|
||
if disabled_at:
|
||
try:
|
||
china_tz = timezone(timedelta(hours=8))
|
||
disabled_dt = datetime.fromisoformat(disabled_at.replace('Z', '+00:00'))
|
||
china_time = disabled_dt.astimezone(china_tz)
|
||
print(f"⏰ 禁用时间: {china_time.strftime('%Y-%m-%d %H:%M:%S')}")
|
||
except:
|
||
print(f"⏰ 禁用时间: {disabled_at}")
|
||
else:
|
||
print(f"❌ 授权码验证失败: {error_msg}")
|
||
|
||
raise Exception(f"授权码验证失败: {error_msg}")
|
||
|
||
except Exception as e:
|
||
if "授权码验证失败:" not in str(e):
|
||
print(f"❌ 授权码验证失败: {e}")
|
||
raise
|
||
|
||
def call_service(self, service_name, **kwargs):
|
||
data = {
|
||
'mod': service_name,
|
||
**kwargs
|
||
}
|
||
|
||
try:
|
||
response = self._make_request('/api/service', data)
|
||
|
||
if response.get('success'):
|
||
return response
|
||
else:
|
||
error_msg = response.get('error', '未知错误')
|
||
raise Exception(f"{service_name}服务调用失败: {error_msg}")
|
||
|
||
except Exception as e:
|
||
print(f"❌ {service_name}服务调用失败: {e}")
|
||
raise
|
||
|
||
|
||
def get_auth_client():
|
||
return CloudAuth()
|
||
|
||
|
||
def call_service(service_name, **kwargs):
|
||
client = get_auth_client()
|
||
return client.call_service(service_name, **kwargs)
|
||
|
||
|
||
if __name__ == "__main__":
|
||
print("3iXi认证模块")
|
||
print("=" * 30)
|
||
print("访问https://3ixi.top获取授权码") |