├── .gitignore ├── LICENSE ├── README.md ├── __init__.py ├── assets ├── 2023-08-27-20-25-43.png ├── 2023-08-27-22-11-39.png ├── 2023-08-28-22-00-16.png ├── 2023-08-28-22-02-16.png ├── 2023-08-28-22-06-26.png ├── 2023-08-28-22-20-47.png ├── 2023-08-28-22-35-51.png ├── 2023-08-28-22-45-53.png ├── 2023-08-28-22-49-18.png ├── 2023-08-28-23-31-15.png ├── 2023-08-31-13-32-37.png ├── 2023-08-31-13-35-49.png ├── 2023-11-05-19-21-50.png └── 2023-11-05-19-35-53.png ├── docs └── Analysis-of-Login-Process-New.md ├── encrypt.js ├── examples ├── config.ini ├── get_captchas.py ├── get_postgraduate_lecture_list.py ├── login_to_dekt.py ├── login_to_ehall.py └── query_seu_points.py ├── requirements.txt ├── seu_auth.py ├── seu_auth_mobile.py └── seu_auth_newids.py /.gitignore: -------------------------------------------------------------------------------- 1 | __pycache__/ 2 | .idea/ 3 | .vscode/ 4 | *venv/ 5 | 6 | .python-version 7 | *test* 8 | *local* 9 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | GNU GENERAL PUBLIC LICENSE 2 | Version 3, 29 June 2007 3 | 4 | Copyright (C) 2007 Free Software Foundation, Inc. 5 | Everyone is permitted to copy and distribute verbatim copies 6 | of this license document, but changing it is not allowed. 7 | 8 | Preamble 9 | 10 | The GNU General Public License is a free, copyleft license for 11 | software and other kinds of works. 12 | 13 | The licenses for most software and other practical works are designed 14 | to take away your freedom to share and change the works. By contrast, 15 | the GNU General Public License is intended to guarantee your freedom to 16 | share and change all versions of a program--to make sure it remains free 17 | software for all its users. We, the Free Software Foundation, use the 18 | GNU General Public License for most of our software; it applies also to 19 | any other work released this way by its authors. You can apply it to 20 | your programs, too. 21 | 22 | When we speak of free software, we are referring to freedom, not 23 | price. Our General Public Licenses are designed to make sure that you 24 | have the freedom to distribute copies of free software (and charge for 25 | them if you wish), that you receive source code or can get it if you 26 | want it, that you can change the software or use pieces of it in new 27 | free programs, and that you know you can do these things. 28 | 29 | To protect your rights, we need to prevent others from denying you 30 | these rights or asking you to surrender the rights. Therefore, you have 31 | certain responsibilities if you distribute copies of the software, or if 32 | you modify it: responsibilities to respect the freedom of others. 33 | 34 | For example, if you distribute copies of such a program, whether 35 | gratis or for a fee, you must pass on to the recipients the same 36 | freedoms that you received. You must make sure that they, too, receive 37 | or can get the source code. And you must show them these terms so they 38 | know their rights. 39 | 40 | Developers that use the GNU GPL protect your rights with two steps: 41 | (1) assert copyright on the software, and (2) offer you this License 42 | giving you legal permission to copy, distribute and/or modify it. 43 | 44 | For the developers' and authors' protection, the GPL clearly explains 45 | that there is no warranty for this free software. For both users' and 46 | authors' sake, the GPL requires that modified versions be marked as 47 | changed, so that their problems will not be attributed erroneously to 48 | authors of previous versions. 49 | 50 | Some devices are designed to deny users access to install or run 51 | modified versions of the software inside them, although the manufacturer 52 | can do so. This is fundamentally incompatible with the aim of 53 | protecting users' freedom to change the software. The systematic 54 | pattern of such abuse occurs in the area of products for individuals to 55 | use, which is precisely where it is most unacceptable. Therefore, we 56 | have designed this version of the GPL to prohibit the practice for those 57 | products. If such problems arise substantially in other domains, we 58 | stand ready to extend this provision to those domains in future versions 59 | of the GPL, as needed to protect the freedom of users. 60 | 61 | Finally, every program is threatened constantly by software patents. 62 | States should not allow patents to restrict development and use of 63 | software on general-purpose computers, but in those that do, we wish to 64 | avoid the special danger that patents applied to a free program could 65 | make it effectively proprietary. To prevent this, the GPL assures that 66 | patents cannot be used to render the program non-free. 67 | 68 | The precise terms and conditions for copying, distribution and 69 | modification follow. 70 | 71 | TERMS AND CONDITIONS 72 | 73 | 0. Definitions. 74 | 75 | "This License" refers to version 3 of the GNU General Public License. 76 | 77 | "Copyright" also means copyright-like laws that apply to other kinds of 78 | works, such as semiconductor masks. 79 | 80 | "The Program" refers to any copyrightable work licensed under this 81 | License. Each licensee is addressed as "you". "Licensees" and 82 | "recipients" may be individuals or organizations. 83 | 84 | To "modify" a work means to copy from or adapt all or part of the work 85 | in a fashion requiring copyright permission, other than the making of an 86 | exact copy. The resulting work is called a "modified version" of the 87 | earlier work or a work "based on" the earlier work. 88 | 89 | A "covered work" means either the unmodified Program or a work based 90 | on the Program. 91 | 92 | To "propagate" a work means to do anything with it that, without 93 | permission, would make you directly or secondarily liable for 94 | infringement under applicable copyright law, except executing it on a 95 | computer or modifying a private copy. Propagation includes copying, 96 | distribution (with or without modification), making available to the 97 | public, and in some countries other activities as well. 98 | 99 | To "convey" a work means any kind of propagation that enables other 100 | parties to make or receive copies. Mere interaction with a user through 101 | a computer network, with no transfer of a copy, is not conveying. 102 | 103 | An interactive user interface displays "Appropriate Legal Notices" 104 | to the extent that it includes a convenient and prominently visible 105 | feature that (1) displays an appropriate copyright notice, and (2) 106 | tells the user that there is no warranty for the work (except to the 107 | extent that warranties are provided), that licensees may convey the 108 | work under this License, and how to view a copy of this License. If 109 | the interface presents a list of user commands or options, such as a 110 | menu, a prominent item in the list meets this criterion. 111 | 112 | 1. Source Code. 113 | 114 | The "source code" for a work means the preferred form of the work 115 | for making modifications to it. "Object code" means any non-source 116 | form of a work. 117 | 118 | A "Standard Interface" means an interface that either is an official 119 | standard defined by a recognized standards body, or, in the case of 120 | interfaces specified for a particular programming language, one that 121 | is widely used among developers working in that language. 122 | 123 | The "System Libraries" of an executable work include anything, other 124 | than the work as a whole, that (a) is included in the normal form of 125 | packaging a Major Component, but which is not part of that Major 126 | Component, and (b) serves only to enable use of the work with that 127 | Major Component, or to implement a Standard Interface for which an 128 | implementation is available to the public in source code form. A 129 | "Major Component", in this context, means a major essential component 130 | (kernel, window system, and so on) of the specific operating system 131 | (if any) on which the executable work runs, or a compiler used to 132 | produce the work, or an object code interpreter used to run it. 133 | 134 | The "Corresponding Source" for a work in object code form means all 135 | the source code needed to generate, install, and (for an executable 136 | work) run the object code and to modify the work, including scripts to 137 | control those activities. However, it does not include the work's 138 | System Libraries, or general-purpose tools or generally available free 139 | programs which are used unmodified in performing those activities but 140 | which are not part of the work. For example, Corresponding Source 141 | includes interface definition files associated with source files for 142 | the work, and the source code for shared libraries and dynamically 143 | linked subprograms that the work is specifically designed to require, 144 | such as by intimate data communication or control flow between those 145 | subprograms and other parts of the work. 146 | 147 | The Corresponding Source need not include anything that users 148 | can regenerate automatically from other parts of the Corresponding 149 | Source. 150 | 151 | The Corresponding Source for a work in source code form is that 152 | same work. 153 | 154 | 2. Basic Permissions. 155 | 156 | All rights granted under this License are granted for the term of 157 | copyright on the Program, and are irrevocable provided the stated 158 | conditions are met. This License explicitly affirms your unlimited 159 | permission to run the unmodified Program. The output from running a 160 | covered work is covered by this License only if the output, given its 161 | content, constitutes a covered work. This License acknowledges your 162 | rights of fair use or other equivalent, as provided by copyright law. 163 | 164 | You may make, run and propagate covered works that you do not 165 | convey, without conditions so long as your license otherwise remains 166 | in force. You may convey covered works to others for the sole purpose 167 | of having them make modifications exclusively for you, or provide you 168 | with facilities for running those works, provided that you comply with 169 | the terms of this License in conveying all material for which you do 170 | not control copyright. Those thus making or running the covered works 171 | for you must do so exclusively on your behalf, under your direction 172 | and control, on terms that prohibit them from making any copies of 173 | your copyrighted material outside their relationship with you. 174 | 175 | Conveying under any other circumstances is permitted solely under 176 | the conditions stated below. Sublicensing is not allowed; section 10 177 | makes it unnecessary. 178 | 179 | 3. Protecting Users' Legal Rights From Anti-Circumvention Law. 180 | 181 | No covered work shall be deemed part of an effective technological 182 | measure under any applicable law fulfilling obligations under article 183 | 11 of the WIPO copyright treaty adopted on 20 December 1996, or 184 | similar laws prohibiting or restricting circumvention of such 185 | measures. 186 | 187 | When you convey a covered work, you waive any legal power to forbid 188 | circumvention of technological measures to the extent such circumvention 189 | is effected by exercising rights under this License with respect to 190 | the covered work, and you disclaim any intention to limit operation or 191 | modification of the work as a means of enforcing, against the work's 192 | users, your or third parties' legal rights to forbid circumvention of 193 | technological measures. 194 | 195 | 4. Conveying Verbatim Copies. 196 | 197 | You may convey verbatim copies of the Program's source code as you 198 | receive it, in any medium, provided that you conspicuously and 199 | appropriately publish on each copy an appropriate copyright notice; 200 | keep intact all notices stating that this License and any 201 | non-permissive terms added in accord with section 7 apply to the code; 202 | keep intact all notices of the absence of any warranty; and give all 203 | recipients a copy of this License along with the Program. 204 | 205 | You may charge any price or no price for each copy that you convey, 206 | and you may offer support or warranty protection for a fee. 207 | 208 | 5. Conveying Modified Source Versions. 209 | 210 | You may convey a work based on the Program, or the modifications to 211 | produce it from the Program, in the form of source code under the 212 | terms of section 4, provided that you also meet all of these conditions: 213 | 214 | a) The work must carry prominent notices stating that you modified 215 | it, and giving a relevant date. 216 | 217 | b) The work must carry prominent notices stating that it is 218 | released under this License and any conditions added under section 219 | 7. This requirement modifies the requirement in section 4 to 220 | "keep intact all notices". 221 | 222 | c) You must license the entire work, as a whole, under this 223 | License to anyone who comes into possession of a copy. This 224 | License will therefore apply, along with any applicable section 7 225 | additional terms, to the whole of the work, and all its parts, 226 | regardless of how they are packaged. This License gives no 227 | permission to license the work in any other way, but it does not 228 | invalidate such permission if you have separately received it. 229 | 230 | d) If the work has interactive user interfaces, each must display 231 | Appropriate Legal Notices; however, if the Program has interactive 232 | interfaces that do not display Appropriate Legal Notices, your 233 | work need not make them do so. 234 | 235 | A compilation of a covered work with other separate and independent 236 | works, which are not by their nature extensions of the covered work, 237 | and which are not combined with it such as to form a larger program, 238 | in or on a volume of a storage or distribution medium, is called an 239 | "aggregate" if the compilation and its resulting copyright are not 240 | used to limit the access or legal rights of the compilation's users 241 | beyond what the individual works permit. Inclusion of a covered work 242 | in an aggregate does not cause this License to apply to the other 243 | parts of the aggregate. 244 | 245 | 6. Conveying Non-Source Forms. 246 | 247 | You may convey a covered work in object code form under the terms 248 | of sections 4 and 5, provided that you also convey the 249 | machine-readable Corresponding Source under the terms of this License, 250 | in one of these ways: 251 | 252 | a) Convey the object code in, or embodied in, a physical product 253 | (including a physical distribution medium), accompanied by the 254 | Corresponding Source fixed on a durable physical medium 255 | customarily used for software interchange. 256 | 257 | b) Convey the object code in, or embodied in, a physical product 258 | (including a physical distribution medium), accompanied by a 259 | written offer, valid for at least three years and valid for as 260 | long as you offer spare parts or customer support for that product 261 | model, to give anyone who possesses the object code either (1) a 262 | copy of the Corresponding Source for all the software in the 263 | product that is covered by this License, on a durable physical 264 | medium customarily used for software interchange, for a price no 265 | more than your reasonable cost of physically performing this 266 | conveying of source, or (2) access to copy the 267 | Corresponding Source from a network server at no charge. 268 | 269 | c) Convey individual copies of the object code with a copy of the 270 | written offer to provide the Corresponding Source. This 271 | alternative is allowed only occasionally and noncommercially, and 272 | only if you received the object code with such an offer, in accord 273 | with subsection 6b. 274 | 275 | d) Convey the object code by offering access from a designated 276 | place (gratis or for a charge), and offer equivalent access to the 277 | Corresponding Source in the same way through the same place at no 278 | further charge. You need not require recipients to copy the 279 | Corresponding Source along with the object code. If the place to 280 | copy the object code is a network server, the Corresponding Source 281 | may be on a different server (operated by you or a third party) 282 | that supports equivalent copying facilities, provided you maintain 283 | clear directions next to the object code saying where to find the 284 | Corresponding Source. Regardless of what server hosts the 285 | Corresponding Source, you remain obligated to ensure that it is 286 | available for as long as needed to satisfy these requirements. 287 | 288 | e) Convey the object code using peer-to-peer transmission, provided 289 | you inform other peers where the object code and Corresponding 290 | Source of the work are being offered to the general public at no 291 | charge under subsection 6d. 292 | 293 | A separable portion of the object code, whose source code is excluded 294 | from the Corresponding Source as a System Library, need not be 295 | included in conveying the object code work. 296 | 297 | A "User Product" is either (1) a "consumer product", which means any 298 | tangible personal property which is normally used for personal, family, 299 | or household purposes, or (2) anything designed or sold for incorporation 300 | into a dwelling. In determining whether a product is a consumer product, 301 | doubtful cases shall be resolved in favor of coverage. For a particular 302 | product received by a particular user, "normally used" refers to a 303 | typical or common use of that class of product, regardless of the status 304 | of the particular user or of the way in which the particular user 305 | actually uses, or expects or is expected to use, the product. A product 306 | is a consumer product regardless of whether the product has substantial 307 | commercial, industrial or non-consumer uses, unless such uses represent 308 | the only significant mode of use of the product. 309 | 310 | "Installation Information" for a User Product means any methods, 311 | procedures, authorization keys, or other information required to install 312 | and execute modified versions of a covered work in that User Product from 313 | a modified version of its Corresponding Source. The information must 314 | suffice to ensure that the continued functioning of the modified object 315 | code is in no case prevented or interfered with solely because 316 | modification has been made. 317 | 318 | If you convey an object code work under this section in, or with, or 319 | specifically for use in, a User Product, and the conveying occurs as 320 | part of a transaction in which the right of possession and use of the 321 | User Product is transferred to the recipient in perpetuity or for a 322 | fixed term (regardless of how the transaction is characterized), the 323 | Corresponding Source conveyed under this section must be accompanied 324 | by the Installation Information. But this requirement does not apply 325 | if neither you nor any third party retains the ability to install 326 | modified object code on the User Product (for example, the work has 327 | been installed in ROM). 328 | 329 | The requirement to provide Installation Information does not include a 330 | requirement to continue to provide support service, warranty, or updates 331 | for a work that has been modified or installed by the recipient, or for 332 | the User Product in which it has been modified or installed. Access to a 333 | network may be denied when the modification itself materially and 334 | adversely affects the operation of the network or violates the rules and 335 | protocols for communication across the network. 336 | 337 | Corresponding Source conveyed, and Installation Information provided, 338 | in accord with this section must be in a format that is publicly 339 | documented (and with an implementation available to the public in 340 | source code form), and must require no special password or key for 341 | unpacking, reading or copying. 342 | 343 | 7. Additional Terms. 344 | 345 | "Additional permissions" are terms that supplement the terms of this 346 | License by making exceptions from one or more of its conditions. 347 | Additional permissions that are applicable to the entire Program shall 348 | be treated as though they were included in this License, to the extent 349 | that they are valid under applicable law. If additional permissions 350 | apply only to part of the Program, that part may be used separately 351 | under those permissions, but the entire Program remains governed by 352 | this License without regard to the additional permissions. 353 | 354 | When you convey a copy of a covered work, you may at your option 355 | remove any additional permissions from that copy, or from any part of 356 | it. (Additional permissions may be written to require their own 357 | removal in certain cases when you modify the work.) You may place 358 | additional permissions on material, added by you to a covered work, 359 | for which you have or can give appropriate copyright permission. 360 | 361 | Notwithstanding any other provision of this License, for material you 362 | add to a covered work, you may (if authorized by the copyright holders of 363 | that material) supplement the terms of this License with terms: 364 | 365 | a) Disclaiming warranty or limiting liability differently from the 366 | terms of sections 15 and 16 of this License; or 367 | 368 | b) Requiring preservation of specified reasonable legal notices or 369 | author attributions in that material or in the Appropriate Legal 370 | Notices displayed by works containing it; or 371 | 372 | c) Prohibiting misrepresentation of the origin of that material, or 373 | requiring that modified versions of such material be marked in 374 | reasonable ways as different from the original version; or 375 | 376 | d) Limiting the use for publicity purposes of names of licensors or 377 | authors of the material; or 378 | 379 | e) Declining to grant rights under trademark law for use of some 380 | trade names, trademarks, or service marks; or 381 | 382 | f) Requiring indemnification of licensors and authors of that 383 | material by anyone who conveys the material (or modified versions of 384 | it) with contractual assumptions of liability to the recipient, for 385 | any liability that these contractual assumptions directly impose on 386 | those licensors and authors. 387 | 388 | All other non-permissive additional terms are considered "further 389 | restrictions" within the meaning of section 10. If the Program as you 390 | received it, or any part of it, contains a notice stating that it is 391 | governed by this License along with a term that is a further 392 | restriction, you may remove that term. If a license document contains 393 | a further restriction but permits relicensing or conveying under this 394 | License, you may add to a covered work material governed by the terms 395 | of that license document, provided that the further restriction does 396 | not survive such relicensing or conveying. 397 | 398 | If you add terms to a covered work in accord with this section, you 399 | must place, in the relevant source files, a statement of the 400 | additional terms that apply to those files, or a notice indicating 401 | where to find the applicable terms. 402 | 403 | Additional terms, permissive or non-permissive, may be stated in the 404 | form of a separately written license, or stated as exceptions; 405 | the above requirements apply either way. 406 | 407 | 8. Termination. 408 | 409 | You may not propagate or modify a covered work except as expressly 410 | provided under this License. Any attempt otherwise to propagate or 411 | modify it is void, and will automatically terminate your rights under 412 | this License (including any patent licenses granted under the third 413 | paragraph of section 11). 414 | 415 | However, if you cease all violation of this License, then your 416 | license from a particular copyright holder is reinstated (a) 417 | provisionally, unless and until the copyright holder explicitly and 418 | finally terminates your license, and (b) permanently, if the copyright 419 | holder fails to notify you of the violation by some reasonable means 420 | prior to 60 days after the cessation. 421 | 422 | Moreover, your license from a particular copyright holder is 423 | reinstated permanently if the copyright holder notifies you of the 424 | violation by some reasonable means, this is the first time you have 425 | received notice of violation of this License (for any work) from that 426 | copyright holder, and you cure the violation prior to 30 days after 427 | your receipt of the notice. 428 | 429 | Termination of your rights under this section does not terminate the 430 | licenses of parties who have received copies or rights from you under 431 | this License. If your rights have been terminated and not permanently 432 | reinstated, you do not qualify to receive new licenses for the same 433 | material under section 10. 434 | 435 | 9. Acceptance Not Required for Having Copies. 436 | 437 | You are not required to accept this License in order to receive or 438 | run a copy of the Program. Ancillary propagation of a covered work 439 | occurring solely as a consequence of using peer-to-peer transmission 440 | to receive a copy likewise does not require acceptance. However, 441 | nothing other than this License grants you permission to propagate or 442 | modify any covered work. These actions infringe copyright if you do 443 | not accept this License. Therefore, by modifying or propagating a 444 | covered work, you indicate your acceptance of this License to do so. 445 | 446 | 10. Automatic Licensing of Downstream Recipients. 447 | 448 | Each time you convey a covered work, the recipient automatically 449 | receives a license from the original licensors, to run, modify and 450 | propagate that work, subject to this License. You are not responsible 451 | for enforcing compliance by third parties with this License. 452 | 453 | An "entity transaction" is a transaction transferring control of an 454 | organization, or substantially all assets of one, or subdividing an 455 | organization, or merging organizations. If propagation of a covered 456 | work results from an entity transaction, each party to that 457 | transaction who receives a copy of the work also receives whatever 458 | licenses to the work the party's predecessor in interest had or could 459 | give under the previous paragraph, plus a right to possession of the 460 | Corresponding Source of the work from the predecessor in interest, if 461 | the predecessor has it or can get it with reasonable efforts. 462 | 463 | You may not impose any further restrictions on the exercise of the 464 | rights granted or affirmed under this License. For example, you may 465 | not impose a license fee, royalty, or other charge for exercise of 466 | rights granted under this License, and you may not initiate litigation 467 | (including a cross-claim or counterclaim in a lawsuit) alleging that 468 | any patent claim is infringed by making, using, selling, offering for 469 | sale, or importing the Program or any portion of it. 470 | 471 | 11. Patents. 472 | 473 | A "contributor" is a copyright holder who authorizes use under this 474 | License of the Program or a work on which the Program is based. The 475 | work thus licensed is called the contributor's "contributor version". 476 | 477 | A contributor's "essential patent claims" are all patent claims 478 | owned or controlled by the contributor, whether already acquired or 479 | hereafter acquired, that would be infringed by some manner, permitted 480 | by this License, of making, using, or selling its contributor version, 481 | but do not include claims that would be infringed only as a 482 | consequence of further modification of the contributor version. For 483 | purposes of this definition, "control" includes the right to grant 484 | patent sublicenses in a manner consistent with the requirements of 485 | this License. 486 | 487 | Each contributor grants you a non-exclusive, worldwide, royalty-free 488 | patent license under the contributor's essential patent claims, to 489 | make, use, sell, offer for sale, import and otherwise run, modify and 490 | propagate the contents of its contributor version. 491 | 492 | In the following three paragraphs, a "patent license" is any express 493 | agreement or commitment, however denominated, not to enforce a patent 494 | (such as an express permission to practice a patent or covenant not to 495 | sue for patent infringement). To "grant" such a patent license to a 496 | party means to make such an agreement or commitment not to enforce a 497 | patent against the party. 498 | 499 | If you convey a covered work, knowingly relying on a patent license, 500 | and the Corresponding Source of the work is not available for anyone 501 | to copy, free of charge and under the terms of this License, through a 502 | publicly available network server or other readily accessible means, 503 | then you must either (1) cause the Corresponding Source to be so 504 | available, or (2) arrange to deprive yourself of the benefit of the 505 | patent license for this particular work, or (3) arrange, in a manner 506 | consistent with the requirements of this License, to extend the patent 507 | license to downstream recipients. "Knowingly relying" means you have 508 | actual knowledge that, but for the patent license, your conveying the 509 | covered work in a country, or your recipient's use of the covered work 510 | in a country, would infringe one or more identifiable patents in that 511 | country that you have reason to believe are valid. 512 | 513 | If, pursuant to or in connection with a single transaction or 514 | arrangement, you convey, or propagate by procuring conveyance of, a 515 | covered work, and grant a patent license to some of the parties 516 | receiving the covered work authorizing them to use, propagate, modify 517 | or convey a specific copy of the covered work, then the patent license 518 | you grant is automatically extended to all recipients of the covered 519 | work and works based on it. 520 | 521 | A patent license is "discriminatory" if it does not include within 522 | the scope of its coverage, prohibits the exercise of, or is 523 | conditioned on the non-exercise of one or more of the rights that are 524 | specifically granted under this License. You may not convey a covered 525 | work if you are a party to an arrangement with a third party that is 526 | in the business of distributing software, under which you make payment 527 | to the third party based on the extent of your activity of conveying 528 | the work, and under which the third party grants, to any of the 529 | parties who would receive the covered work from you, a discriminatory 530 | patent license (a) in connection with copies of the covered work 531 | conveyed by you (or copies made from those copies), or (b) primarily 532 | for and in connection with specific products or compilations that 533 | contain the covered work, unless you entered into that arrangement, 534 | or that patent license was granted, prior to 28 March 2007. 535 | 536 | Nothing in this License shall be construed as excluding or limiting 537 | any implied license or other defenses to infringement that may 538 | otherwise be available to you under applicable patent law. 539 | 540 | 12. No Surrender of Others' Freedom. 541 | 542 | If conditions are imposed on you (whether by court order, agreement or 543 | otherwise) that contradict the conditions of this License, they do not 544 | excuse you from the conditions of this License. If you cannot convey a 545 | covered work so as to satisfy simultaneously your obligations under this 546 | License and any other pertinent obligations, then as a consequence you may 547 | not convey it at all. For example, if you agree to terms that obligate you 548 | to collect a royalty for further conveying from those to whom you convey 549 | the Program, the only way you could satisfy both those terms and this 550 | License would be to refrain entirely from conveying the Program. 551 | 552 | 13. Use with the GNU Affero General Public License. 553 | 554 | Notwithstanding any other provision of this License, you have 555 | permission to link or combine any covered work with a work licensed 556 | under version 3 of the GNU Affero General Public License into a single 557 | combined work, and to convey the resulting work. The terms of this 558 | License will continue to apply to the part which is the covered work, 559 | but the special requirements of the GNU Affero General Public License, 560 | section 13, concerning interaction through a network will apply to the 561 | combination as such. 562 | 563 | 14. Revised Versions of this License. 564 | 565 | The Free Software Foundation may publish revised and/or new versions of 566 | the GNU General Public License from time to time. Such new versions will 567 | be similar in spirit to the present version, but may differ in detail to 568 | address new problems or concerns. 569 | 570 | Each version is given a distinguishing version number. If the 571 | Program specifies that a certain numbered version of the GNU General 572 | Public License "or any later version" applies to it, you have the 573 | option of following the terms and conditions either of that numbered 574 | version or of any later version published by the Free Software 575 | Foundation. If the Program does not specify a version number of the 576 | GNU General Public License, you may choose any version ever published 577 | by the Free Software Foundation. 578 | 579 | If the Program specifies that a proxy can decide which future 580 | versions of the GNU General Public License can be used, that proxy's 581 | public statement of acceptance of a version permanently authorizes you 582 | to choose that version for the Program. 583 | 584 | Later license versions may give you additional or different 585 | permissions. However, no additional obligations are imposed on any 586 | author or copyright holder as a result of your choosing to follow a 587 | later version. 588 | 589 | 15. Disclaimer of Warranty. 590 | 591 | THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY 592 | APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT 593 | HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY 594 | OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, 595 | THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 596 | PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM 597 | IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF 598 | ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 599 | 600 | 16. Limitation of Liability. 601 | 602 | IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING 603 | WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS 604 | THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY 605 | GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE 606 | USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF 607 | DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD 608 | PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), 609 | EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF 610 | SUCH DAMAGES. 611 | 612 | 17. Interpretation of Sections 15 and 16. 613 | 614 | If the disclaimer of warranty and limitation of liability provided 615 | above cannot be given local legal effect according to their terms, 616 | reviewing courts shall apply local law that most closely approximates 617 | an absolute waiver of all civil liability in connection with the 618 | Program, unless a warranty or assumption of liability accompanies a 619 | copy of the Program in return for a fee. 620 | 621 | END OF TERMS AND CONDITIONS 622 | 623 | How to Apply These Terms to Your New Programs 624 | 625 | If you develop a new program, and you want it to be of the greatest 626 | possible use to the public, the best way to achieve this is to make it 627 | free software which everyone can redistribute and change under these terms. 628 | 629 | To do so, attach the following notices to the program. It is safest 630 | to attach them to the start of each source file to most effectively 631 | state the exclusion of warranty; and each file should have at least 632 | the "copyright" line and a pointer to where the full notice is found. 633 | 634 | 635 | Copyright (C) 636 | 637 | This program is free software: you can redistribute it and/or modify 638 | it under the terms of the GNU General Public License as published by 639 | the Free Software Foundation, either version 3 of the License, or 640 | (at your option) any later version. 641 | 642 | This program is distributed in the hope that it will be useful, 643 | but WITHOUT ANY WARRANTY; without even the implied warranty of 644 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 645 | GNU General Public License for more details. 646 | 647 | You should have received a copy of the GNU General Public License 648 | along with this program. If not, see . 649 | 650 | Also add information on how to contact you by electronic and paper mail. 651 | 652 | If the program does terminal interaction, make it output a short 653 | notice like this when it starts in an interactive mode: 654 | 655 | Copyright (C) 656 | This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. 657 | This is free software, and you are welcome to redistribute it 658 | under certain conditions; type `show c' for details. 659 | 660 | The hypothetical commands `show w' and `show c' should show the appropriate 661 | parts of the General Public License. Of course, your program's commands 662 | might be different; for a GUI interface, you would use an "about box". 663 | 664 | You should also get your employer (if you work as a programmer) or school, 665 | if any, to sign a "copyright disclaimer" for the program, if necessary. 666 | For more information on this, and how to apply and follow the GNU GPL, see 667 | . 668 | 669 | The GNU General Public License does not permit incorporating your program 670 | into proprietary programs. If your program is a subroutine library, you 671 | may consider it more useful to permit linking proprietary applications with 672 | the library. If this is what you want to do, use the GNU Lesser General 673 | Public License instead of this License. But first, please read 674 | . 675 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # SEU-Auth 2 | 3 | 东南大学身份认证页面的逆向、模拟登录，可用于其他自动化脚本的身份认证过程。 4 | 5 | - [SEU-Auth](#seu-auth) 6 | - [SEU 身份认证系统介绍](#seu-身份认证系统介绍) 7 | - [新版](#新版) 8 | - [旧版](#旧版) 9 | - [移动端](#移动端) 10 | - [目录说明](#目录说明) 11 | - [模拟登录脚本说明](#模拟登录脚本说明) 12 | - [新版](#新版-1) 13 | - [旧版](#旧版-1) 14 | - [移动端](#移动端-1) 15 | - [使用示例](#使用示例) 16 | - [详细过程分析](#详细过程分析) 17 | 18 | ## SEU 身份认证系统介绍 19 | 20 | 目前东南大学在使用的 Web 端身份认证系统有主要两个版本，分别是： 21 | 22 | - （下文中称为 **_新版身份认证系统_** ） 23 | 24 | ![](./assets/2023-08-31-13-32-37.png) 25 | 26 | - （下文中称为 **_旧版身份认证系统_** ） 27 | 28 | ![](./assets/2023-08-31-13-35-49.png) 29 | 30 | 现在一部分常用应用的身份认证已迁移到新版系统（比如[网上办事服务大厅](http://ehall.seu.edu.cn/)、[第二课堂](http://dekt.seu.edu.cn/)等），也还有不少还在使用旧版（比如[邮箱](https://mail.seu.edu.cn/)、[SRTP](http://cxcy.seu.edu.cn/)、网上办事服务大厅里的很多应用等），所以目前是两个版本的身份认证系统并存。 31 | 32 | 而且存在这样一种情况：访问网上办事服务大厅，经过新版身份认证登录，再访问其中的某个应用，还需要再经过旧版认证，所以本仓库对两个版本的身份认证都提供了实现。 33 | 34 | 除去 Web 端之外，还有 **_移动端身份认证系统_**，主要用于东大信息化 App 的登录，本仓库同样提供了实现与示例代码。 35 | 36 | ![](./assets/2023-11-05-19-21-50.png) 37 | 38 | 而更老的身份认证（）已经基本不会再使用。 39 | 40 | ### 新版 41 | 42 | 采用 RSA 加密用户密码，公钥通过单独的请求获取，Cookie 中需要附带与公钥相匹配的 UID。 43 | 44 | 登录流程如下： 45 | 46 | ```mermaid 47 | flowchart LR 48 | A[/"请求公钥\n保存对应的 Cookie"/] 49 | B[/"使用公钥加密用户密码"/] 50 | C[/"提交登录请求\n包含用户名、加密后的密码、Cookie"/] 51 | D[/"成功获取 TGT，完成登录"/] 52 | A-->B 53 | B-->C 54 | C-->D 55 | ``` 56 | 57 | 详细的登录过程分析见 [Wiki](https://github.com/Golevka2001/SEU-Auth/wiki/%E6%96%B0%E7%89%88%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E7%B3%BB%E7%BB%9F%E7%99%BB%E5%BD%95%E8%BF%87%E7%A8%8B%E5%88%86%E6%9E%90) 页面。 58 | 59 | ### 旧版 60 | 61 | 采用 AES 加密用户密码，密钥和 Ticket 等写在 HTML 里，Ticket 需要写在载荷中。 62 | 63 | 登录流程如下： 64 | 65 | ```mermaid 66 | flowchart LR 67 | A[/"从登录页面获取\n密钥、Ticket等"/] 68 | B[/"使用对称密钥加密用户密码"/] 69 | C[/"提交登录请求\n包含用户名、加密后的密码、Ticket"/] 70 | D[/"成功登录"/] 71 | A-->B 72 | B-->C 73 | C-->D 74 | ``` 75 | 76 | 【登录过程分析待更新】 77 | 78 | ### 移动端 79 | 80 | 采用……哦，根本不加密，直接明文传输用户密码。 81 | 82 | ![](assets/2023-11-05-19-35-53.png) 83 | 84 | 登录流程也十分简单： 85 | 86 | 用户输入用户名、密码后，附带设备名、序列号等一起发送给服务器。通过身份验证后，服务器返回 TGT 以及加密后的密码，由客户端保存，下次启动应用时发送设备序列号、一卡通号、加密后的密码完成登录。 87 | 88 | 需要注意的是，采用了单点登录的机制，启动应用时发起的登录请求的响应头中包含了一个 `ssoCookie` 字段，需要在后续的请求中作为 Cookie 附带（在脚本中需要手动添加）。 89 | 90 | ## 目录说明 91 | 92 | - [`assets/`](./assets/) 93 | - [`docs/`](./docs/) 94 | - [`Analysis-of-Login-Process-New.md`](./docs/Analysis-of-Login-Process-New.md)：新版身份认证系统登录过程分析 95 | - [`examples/`](./examples/) 96 | - [`config.ini`](./examples/config.ini)：示例脚本的配置文件（一卡通号、密码） 97 | - [`get_postgraduate_lecture_list.py`](./examples/get_postgraduate_lecture_list.py)：获取研究生素质讲座列表的示例脚本 98 | - [`get_captcha.py`](./examples/get_captcha.py)：获取验证码的示例脚本 99 | - [`get_seu_point.py`](./examples/get_seu_point.py)：查询东大信息化中的东豆余额的示例脚本 100 | - [`login_to_dekt.py`](./examples/login_to_dekt.py)：登录第二课堂的示例脚本 101 | - [`login_to_ehall.py`](./examples/login_to_ehall.py)：登录网上办事服务大厅的示例脚本 102 | - [`encrypt.js`](./encrypt.js)：AES 加密函数（来自 [CryptoJS](https://github.com/sytelus/CryptoJS)） 103 | - [`requirements.txt`](./requirements.txt)：依赖库 104 | - [`seu_auth_mobile.py`](./seu_auth_mobile.py)：移动端身份认证登录脚本 105 | - [`seu_auth_newids.py`](./seu_auth_newids.py)：旧版身份认证登录脚本 106 | - [`seu_auth.py`](./seu_auth.py)：新版身份认证登录脚本 107 | - [`LICENSE`](./LICENSE) 108 | - [`README.md`](./README.md) 109 | 110 | ## 模拟登录脚本说明 111 | 112 | ### 新版 113 | 114 | 在 [seu_auth.py](./seu_auth.py) 中实现了模拟登录[新版身份认证系统](https://auth.seu.edu.cn/dist/#/dist/main/login)，流程如下： 115 | 116 | 1. 函数 `get_pub_key()` 从服务器请求 RSA 公钥，存储与公钥相匹配的 Cookie； 117 | 2. 函数 `rsa_encrypt()` 对用户密码进行 RSA 加密； 118 | 3. 函数 `seu_login()` 中调用以上两个函数，向服务器发送用户名（一卡通号）、加密后的密码，以及先前获取到的 Cookie，模拟登录。 119 | 120 | web 请求使用到 [requests](https://pypi.org/project/requests/) 库，RSA 加密使用到 [pycryptodome](https://pypi.org/project/pycryptodome/) 库。 121 | 122 | ### 旧版 123 | 124 | 在 [seu_auth_newids.py](./seu_auth_newids.py) 中实现了模拟登录[旧版身份认证系统](https://newids.seu.edu.cn/authserver/login)，流程如下： 125 | 126 | 1. 函数 `get_login_data()` 从登录页面解析出 AES 密钥、Ticket 等信息； 127 | 2. 函数 `aes_encrypt()` 对用户密码进行 AES 加密； 128 | 3. 函数 `seu_login()` 中调用以上两个函数，向服务器发送用户名（一卡通号）、加密后的密码、Ticket 等，模拟登录。 129 | 130 | web 请求使用到 [requests](https://pypi.org/project/requests/) 库，HTML 解析使用到 [BeautifulSoup4](https://pypi.org/project/beautifulsoup4/) 库，AES 加密直接使用到请求返回的 [encrypt.js](./encrypt.js)（来自 [CryptoJS](https://github.com/sytelus/CryptoJS)），JavaScript 运行使用到 [Js2Py](https://pypi.org/project/Js2Py/)。 131 | 132 | ### 移动端 133 | 134 | 在 [seu_auth_mobile.py](./seu_auth_mobile.py) 中实现了模拟登录移动端身份认证系统，流程如下： 135 | 136 | 1. 函数 `get_user_info()` 用于获取已登录用户的身份信息； 137 | 2. 函数 `seu_login()` 向服务器发送用户名、密码以及其他设备信息（可不填），模拟登录，调用上一个函数验证是否成功登录。 138 | 139 | ## 使用示例 140 | 141 | 在 [examples/](./examples/) 中给出了以下几个使用示例，分别是： 142 | 143 | 1. [get_postgraduate_lecture_list.py](./examples/get_postgraduate_lecture_list.py)：获取研究生素质讲座列表（新版系统）； 144 | 2. [get_captcha.py](./examples/get_captcha.py)：获取研究生讲座系统、本科生选课系统的验证码（新版系统）； 145 | 3. [login_to_dekt.py](./examples/login_to_dekt.py)：登录东南大学第二课堂（新版系统）； 146 | 4. [login_to_ehall.py](./examples/login_to_ehall.py)：登录东南大学网上办事服务大厅（新版系统）； 147 | 5. [query_seu_points.py](./examples/query_seu_points.py)：查询东大信息化中的东豆余额（移动端）。 148 | 149 | _（注：括号中内容表示访问该应用所需要经过哪个身份认证系统）_ 150 | 151 | 项目 [zhjcreator/fetch_lecture](https://github.com/zhjcreator/fetch_lecture) 使用到新版认证脚本登录研究生素质讲座系统； 152 | 153 | 项目 [Golevka2001/Earn-SEU-Points-Daily](https://github.com/Golevka2001/Earn-SEU-Points_Daily) 使用到移动端认证脚本登录东大信息化 App。 154 | 155 | ## 详细过程分析 156 | 157 | 详细的登录过程分析见 [Wiki](https://github.com/Golevka2001/SEU-Auth/wiki/%E6%96%B0%E7%89%88%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E7%B3%BB%E7%BB%9F%E7%99%BB%E5%BD%95%E8%BF%87%E7%A8%8B%E5%88%86%E6%9E%90) 页面。 158 | -------------------------------------------------------------------------------- /__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/__init__.py -------------------------------------------------------------------------------- /assets/2023-08-27-20-25-43.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-27-20-25-43.png -------------------------------------------------------------------------------- /assets/2023-08-27-22-11-39.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-27-22-11-39.png -------------------------------------------------------------------------------- /assets/2023-08-28-22-00-16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-28-22-00-16.png -------------------------------------------------------------------------------- /assets/2023-08-28-22-02-16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-28-22-02-16.png -------------------------------------------------------------------------------- /assets/2023-08-28-22-06-26.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-28-22-06-26.png -------------------------------------------------------------------------------- /assets/2023-08-28-22-20-47.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-28-22-20-47.png -------------------------------------------------------------------------------- /assets/2023-08-28-22-35-51.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-28-22-35-51.png -------------------------------------------------------------------------------- /assets/2023-08-28-22-45-53.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-28-22-45-53.png -------------------------------------------------------------------------------- /assets/2023-08-28-22-49-18.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-28-22-49-18.png -------------------------------------------------------------------------------- /assets/2023-08-28-23-31-15.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-28-23-31-15.png -------------------------------------------------------------------------------- /assets/2023-08-31-13-32-37.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-31-13-32-37.png -------------------------------------------------------------------------------- /assets/2023-08-31-13-35-49.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-08-31-13-35-49.png -------------------------------------------------------------------------------- /assets/2023-11-05-19-21-50.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-11-05-19-21-50.png -------------------------------------------------------------------------------- /assets/2023-11-05-19-35-53.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Golevka2001/SEU-Auth/b9aa92913b600945e05b472bae5f874acc6276b3/assets/2023-11-05-19-35-53.png -------------------------------------------------------------------------------- /docs/Analysis-of-Login-Process-New.md: -------------------------------------------------------------------------------- 1 | # SEU-Auth Wiki -- 新版身份认证系统登录过程分析 2 | 3 | - [SEU-Auth Wiki -- 新版身份认证系统登录过程分析](#seu-auth-wiki----新版身份认证系统登录过程分析) 4 | - [在登录时，我的浏览器做了什么？](#在登录时我的浏览器做了什么) 5 | - [1. dist `GET`](#1-dist-get) 6 | - [2. umi.80c8f8c8.js `GET`](#2-umi80c8f8c8js-get) 7 | - [3. verifyTgt `POST`](#3-verifytgt-post) 8 | - [4. needCaptcha `GET`](#4-needcaptcha-get) 9 | - [5. getChiperKey `POST`](#5-getchiperkey-post) 10 | - [6. casLogin `POST`](#6-caslogin-post) 11 | - [打断点分析 JS 中的加密逻辑](#打断点分析-js-中的加密逻辑) 12 | - [统一身份认证的 RSA 加密用的什么库？](#统一身份认证的-rsa-加密用的什么库) 13 | 14 | 15 | ## 在登录时，我的浏览器做了什么？ 16 | 17 | 从访问[统一身份认证页面](https://auth.seu.edu.cn/dist/#/dist/main/login)到完成登录，浏览器共发起了以下请求（过滤掉了图片、样式表等静态资源）： 18 | 19 | ![](../assets/2023-08-27-20-25-43.png) 20 | 21 | 下面逐个来查看每个请求的作用。 22 | 23 | ### 1. dist `GET` 24 | 25 |
26 | Response 27 | 28 | ```html 29 | 30 | 31 | 32 | 33 | 37 | 38 | 39 | 42 | 45 | 46 | 47 |
48 | 49 | 50 | 51 | 52 | ``` 53 |
54 | 55 | 也就是所看到的登录页面，但可惜的是它是动态加载的，HTML 里屁都没有，全写在 [JS](#2-umi80c8f8c8js) 里了。所以没法用 BeautifulSoup 解析，但是 Selenium 是没问题的，不过准备从直接从网络请求入手，继续来分析。 56 | 57 | ### 2. umi.80c8f8c8.js `GET` 58 | 59 |
60 | Response 61 | 62 | ```javascript 63 | (function(e) { 64 | var t = {}; 65 | function n(r) { 66 | if (t[r]) 67 | return t[r].exports; 68 | var o = t[r] = { 69 | i: r, 70 | l: !1, 71 | exports: {} 72 | }; 73 | return e[r].call(o.exports, o, o.exports, n), 74 | o.l = !0, 75 | o.exports 76 | } 77 | 78 | /********************** 79 | ** Nearly 78k lines ** 80 | **********************/ 81 | }); 82 | ``` 83 |
84 | 85 | 这位更是重量级，经过混淆、压缩后的 JS 代码，将近八万行，变量名都是混淆过的，一会儿打断点来分析一下功能和逻辑，先继续往下看请求。 86 | 87 | ### 3. verifyTgt `POST` 88 | 89 |
90 | Payload 91 | 92 | ```json 93 | {} 94 | ``` 95 |
96 | 97 |
98 | Response 99 | 100 | ```json 101 | { 102 | "code": 400, 103 | "info": "user not login", 104 | "redirectUrl": null, 105 | "stCookie": null, 106 | "success": false 107 | } 108 | ``` 109 |
110 | 111 | 是用来验证 TGT 的有效性的，初次登录时，TGT 是不存在的，所以返回 400；成功登录后，TGT 会被存储在 Cookie 中，从而通过身份验证。暂时没用，下一个。 112 | 113 | ### 4. needCaptcha `GET` 114 | 115 |
116 | Response 117 | 118 | ```json 119 | { 120 | "code": 200, 121 | "info": "不需要验证码", 122 | "maxAge": 0, 123 | "redirectUrl": null, 124 | "success": true, 125 | "tgtCookie": null, 126 | } 127 | ``` 128 |
129 | 130 | 判断是否需要用户提交验证码，仍然没用，下一个。 131 | 132 | ### 5. getChiperKey `POST` 133 | 134 |
135 | Payload 136 | 137 | ```json 138 | {} 139 | ``` 140 |
141 | 142 |
143 | Response 144 | 145 | ```json 146 | { 147 | "code": 200, 148 | "info": "get public key success", 149 | "publicKey": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqoEr-xxxxxx-hm2GicY9QIDAQAB", 150 | "success": true 151 | } 152 | ``` 153 |
154 | 155 | 好了，这个就有用了，这个请求很明显是获取了一个 Base64 编码的公钥，并且能够看出这是个 RSA 公钥（RSA 公钥开头、结尾包含了指数、模数等信息，大多格式相同）。 156 | 157 | 那么公钥是干啥用的呢？肯定是拿来加密的。加密啥呢？那就是用户输入的密码咯。 158 | 159 | 同时在响应头中还带了一个 `Set-Cookie` 字段，值为 `CHIPER_UID=53ed8871c95f49cxxxxxx; ...`，可以猜测 `CHIPER_UID` 是和公钥相匹配的，用于验证有效性。在后来的测试中发现确实如此，若二者不匹配或 Cookie 中不带 `CHIPER_UID`，会返回会话过期的错误。 160 | 161 | ### 6. casLogin `POST` 162 | 163 |
164 | Payload 165 | 166 | ```json 167 | { 168 | "captcha": "", 169 | "loginType": "account", 170 | "mobilePhoneNum": "", 171 | "mobileVerifyCode": "", 172 | "password": "dgnQOyAAQ83Ro7+eW3ZMP1TSaWhItp6+xxxxxx+iHuDKmNyRBO54iBI=", 173 | "rememberMe": false, 174 | "service": "", 175 | "username": "123456789", 176 | "wxBinded": false 177 | } 178 | ``` 179 |
180 | 181 |
182 | Response 183 | 184 | ```json 185 | { 186 | "code": 200, 187 | "info": "Authentication Success(no service provided)", 188 | "maxAge": -1, 189 | "redirectUrl": null, 190 | "success": true, 191 | "tgtCookie": "eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.xxxxxx.-Rd3ZGW3szqJT-G41mX84TjtgvS20tM0eLn9i9bwq9GMXTED35DO_TgTi17UpR9F1aQYBw2c8W1T1XrtzHkptA" 192 | } 193 | ``` 194 |
195 | 196 | 这就是完成登录的最后一个请求了，可以看到在请求负载中，`username` 和 `password` 字段分别是一卡通号和加密过的密码，其他字段也可以直接直接从变量名看出来，这里就不多说了。 197 | 198 | 响应中可以看到认证成功的信息以及最重要的 `tgtCookie` 字段，这就是我们要的 TGT 了，也就是 [verifyTgt](#3-verifytgt-post) 请求中要验证的那个。 199 | 200 | ![](../assets/2023-08-27-22-11-39.png) 201 | 202 | 至此，登录完成，再来捋一下流程： 203 | 204 | ```mermaid 205 | flowchart LR 206 | A[/"请求公钥\n保存对应的 Cookie"/] 207 | B[/"使用公钥加密用户密码"/] 208 | C[/"提交登录请求\n包含用户名、加密后的密码、Cookie"/] 209 | D[/"成功获取 TGT，完成登录"/] 210 | A-->B 211 | B-->C 212 | C-->D 213 | ``` 214 | 215 | ## 打断点分析 JS 中的加密逻辑 216 | 217 | 输入用户名 `123456` 和密码 `qweasd`，启动浏览器调试工具，打开 `umi.80c8f8c8.js`，准备打断点。 218 | 219 | ![](../assets/2023-08-28-22-00-16.png) 220 | 221 | 在前面的分析中已经猜测会使用 RSA 对密码加密，所以搜索 `encrypt`，得到 9 个结果，除去 4 个在字符串中，其他都是函数名以及函数调用，从代码中的一些提示信息也能够看出来这部分确实是 RSA 加密相关。对搜索结果部分都随便打打断点运行一下看看。 222 | 223 | ![](../assets/2023-08-28-22-02-16.png) 224 | 225 | 点击登录按钮后，先停在了这里： 226 | 227 | ![](../assets/2023-08-28-22-06-26.png) 228 | 229 | 在上图中可以分析得出这些信息： 230 | 231 | `var t = kt.username` 是传入的一卡通号； 232 | 233 | `var n = new ot` 创建了一个 RSA 加解密对象的实例，包含了位数、指数等信息； 234 | 235 | `n.SetPublicKey(a.state.publicKey)` 为 RSA 对象设置了公钥； 236 | 237 | `var r = n.encrypt(kt.password)` 调用了某个 `encrypt()` 函数，对传入的密码进行了加密； 238 | 239 | `var o = kt.captcha` 是传入的验证码，不是我们关心的，跳过。 240 | 241 | 下面进入刚才调用的 `encrypt()` 函数内部： 242 | 243 | ![](../assets/2023-08-28-22-20-47.png) 244 | 245 | 可以看到 `e` 就是输入的密码，调用了另一个 RSA Key 对象的 `encrypt()` 函数，这个 `Z()` 呢大概率是个负责格式转换或者格式化的函数。 246 | 247 | 好，继续往下看这另一个 `encrypt()` 函数： 248 | 249 | ![](../assets/2023-08-28-22-35-51.png) 250 | 251 | 这里调用 `Ye()` 执行的应该就是具体的加密流程了，就不再往里细看了，返回 PKCS#1 格式的加密结果，是十六进制的，所以可以猜测上面的 `Z()` 函数作用应该是将十六进制转换为 Base64 编码： 252 | 253 | ![](../assets/2023-08-28-22-45-53.png) 254 | 255 | 最后返回到一开始的调用处，`r` 便是最终得到的 Base64 编码的 RSA 加密结果，也就是 `casLogin` 请求的载荷中的 `password`： 256 | 257 | ![](../assets/2023-08-28-22-49-18.png) 258 | 259 | ## 统一身份认证的 RSA 加密用的什么库？ 260 | 261 | 通过简单的搜索和比对，找到了 [jsencrypt](https://github.com/travist/jsencrypt) 这个库，函数的逻辑、功能和前文中的分析是一致的。 262 | 263 | ![](../assets/2023-08-28-23-31-15.png) 264 | 265 | 可以结合上正经变量名、注释再看一遍上面的过程，接下来就可以准备模拟登录了。 266 | -------------------------------------------------------------------------------- /encrypt.js: -------------------------------------------------------------------------------- 1 | var CryptoJS=CryptoJS||function(u,p){var d={},l=d.lib={},s=function(){},t=l.Base={extend:function(a){s.prototype=this;var c=new s;a&&c.mixIn(a);c.hasOwnProperty("init")||(c.init=function(){c.$super.init.apply(this,arguments)});c.init.prototype=c;c.$super=this;return c},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var c in a)a.hasOwnProperty(c)&&(this[c]=a[c]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}}, 2 | r=l.WordArray=t.extend({init:function(a,c){a=this.words=a||[];this.sigBytes=c!=p?c:4*a.length},toString:function(a){return(a||v).stringify(this)},concat:function(a){var c=this.words,e=a.words,j=this.sigBytes;a=a.sigBytes;this.clamp();if(j%4)for(var k=0;k>>2]|=(e[k>>>2]>>>24-8*(k%4)&255)<<24-8*((j+k)%4);else if(65535>>2]=e[k>>>2];else c.push.apply(c,e);this.sigBytes+=a;return this},clamp:function(){var a=this.words,c=this.sigBytes;a[c>>>2]&=4294967295<< 3 | 32-8*(c%4);a.length=u.ceil(c/4)},clone:function(){var a=t.clone.call(this);a.words=this.words.slice(0);return a},random:function(a){for(var c=[],e=0;e>>2]>>>24-8*(j%4)&255;e.push((k>>>4).toString(16));e.push((k&15).toString(16))}return e.join("")},parse:function(a){for(var c=a.length,e=[],j=0;j>>3]|=parseInt(a.substr(j, 4 | 2),16)<<24-4*(j%8);return new r.init(e,c/2)}},b=w.Latin1={stringify:function(a){var c=a.words;a=a.sigBytes;for(var e=[],j=0;j>>2]>>>24-8*(j%4)&255));return e.join("")},parse:function(a){for(var c=a.length,e=[],j=0;j>>2]|=(a.charCodeAt(j)&255)<<24-8*(j%4);return new r.init(e,c)}},x=w.Utf8={stringify:function(a){try{return decodeURIComponent(escape(b.stringify(a)))}catch(c){throw Error("Malformed UTF-8 data");}},parse:function(a){return b.parse(unescape(encodeURIComponent(a)))}}, 5 | q=l.BufferedBlockAlgorithm=t.extend({reset:function(){this._data=new r.init;this._nDataBytes=0},_append:function(a){"string"==typeof a&&(a=x.parse(a));this._data.concat(a);this._nDataBytes+=a.sigBytes},_process:function(a){var c=this._data,e=c.words,j=c.sigBytes,k=this.blockSize,b=j/(4*k),b=a?u.ceil(b):u.max((b|0)-this._minBufferSize,0);a=b*k;j=u.min(4*a,j);if(a){for(var q=0;q>>2]>>>24-8*(r%4)&255)<<16|(l[r+1>>>2]>>>24-8*((r+1)%4)&255)<<8|l[r+2>>>2]>>>24-8*((r+2)%4)&255,v=0;4>v&&r+0.75*v>>6*(3-v)&63));if(l=t.charAt(64))for(;d.length%4;)d.push(l);return d.join("")},parse:function(d){var l=d.length,s=this._map,t=s.charAt(64);t&&(t=d.indexOf(t),-1!=t&&(l=t));for(var t=[],r=0,w=0;w< 9 | l;w++)if(w%4){var v=s.indexOf(d.charAt(w-1))<<2*(w%4),b=s.indexOf(d.charAt(w))>>>6-2*(w%4);t[r>>>2]|=(v|b)<<24-8*(r%4);r++}return p.create(t,r)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="}})(); 10 | (function(u){function p(b,n,a,c,e,j,k){b=b+(n&a|~n&c)+e+k;return(b<>>32-j)+n}function d(b,n,a,c,e,j,k){b=b+(n&c|a&~c)+e+k;return(b<>>32-j)+n}function l(b,n,a,c,e,j,k){b=b+(n^a^c)+e+k;return(b<>>32-j)+n}function s(b,n,a,c,e,j,k){b=b+(a^(n|~c))+e+k;return(b<>>32-j)+n}for(var t=CryptoJS,r=t.lib,w=r.WordArray,v=r.Hasher,r=t.algo,b=[],x=0;64>x;x++)b[x]=4294967296*u.abs(u.sin(x+1))|0;r=r.MD5=v.extend({_doReset:function(){this._hash=new w.init([1732584193,4023233417,2562383102,271733878])}, 11 | _doProcessBlock:function(q,n){for(var a=0;16>a;a++){var c=n+a,e=q[c];q[c]=(e<<8|e>>>24)&16711935|(e<<24|e>>>8)&4278255360}var a=this._hash.words,c=q[n+0],e=q[n+1],j=q[n+2],k=q[n+3],z=q[n+4],r=q[n+5],t=q[n+6],w=q[n+7],v=q[n+8],A=q[n+9],B=q[n+10],C=q[n+11],u=q[n+12],D=q[n+13],E=q[n+14],x=q[n+15],f=a[0],m=a[1],g=a[2],h=a[3],f=p(f,m,g,h,c,7,b[0]),h=p(h,f,m,g,e,12,b[1]),g=p(g,h,f,m,j,17,b[2]),m=p(m,g,h,f,k,22,b[3]),f=p(f,m,g,h,z,7,b[4]),h=p(h,f,m,g,r,12,b[5]),g=p(g,h,f,m,t,17,b[6]),m=p(m,g,h,f,w,22,b[7]), 12 | f=p(f,m,g,h,v,7,b[8]),h=p(h,f,m,g,A,12,b[9]),g=p(g,h,f,m,B,17,b[10]),m=p(m,g,h,f,C,22,b[11]),f=p(f,m,g,h,u,7,b[12]),h=p(h,f,m,g,D,12,b[13]),g=p(g,h,f,m,E,17,b[14]),m=p(m,g,h,f,x,22,b[15]),f=d(f,m,g,h,e,5,b[16]),h=d(h,f,m,g,t,9,b[17]),g=d(g,h,f,m,C,14,b[18]),m=d(m,g,h,f,c,20,b[19]),f=d(f,m,g,h,r,5,b[20]),h=d(h,f,m,g,B,9,b[21]),g=d(g,h,f,m,x,14,b[22]),m=d(m,g,h,f,z,20,b[23]),f=d(f,m,g,h,A,5,b[24]),h=d(h,f,m,g,E,9,b[25]),g=d(g,h,f,m,k,14,b[26]),m=d(m,g,h,f,v,20,b[27]),f=d(f,m,g,h,D,5,b[28]),h=d(h,f, 13 | m,g,j,9,b[29]),g=d(g,h,f,m,w,14,b[30]),m=d(m,g,h,f,u,20,b[31]),f=l(f,m,g,h,r,4,b[32]),h=l(h,f,m,g,v,11,b[33]),g=l(g,h,f,m,C,16,b[34]),m=l(m,g,h,f,E,23,b[35]),f=l(f,m,g,h,e,4,b[36]),h=l(h,f,m,g,z,11,b[37]),g=l(g,h,f,m,w,16,b[38]),m=l(m,g,h,f,B,23,b[39]),f=l(f,m,g,h,D,4,b[40]),h=l(h,f,m,g,c,11,b[41]),g=l(g,h,f,m,k,16,b[42]),m=l(m,g,h,f,t,23,b[43]),f=l(f,m,g,h,A,4,b[44]),h=l(h,f,m,g,u,11,b[45]),g=l(g,h,f,m,x,16,b[46]),m=l(m,g,h,f,j,23,b[47]),f=s(f,m,g,h,c,6,b[48]),h=s(h,f,m,g,w,10,b[49]),g=s(g,h,f,m, 14 | E,15,b[50]),m=s(m,g,h,f,r,21,b[51]),f=s(f,m,g,h,u,6,b[52]),h=s(h,f,m,g,k,10,b[53]),g=s(g,h,f,m,B,15,b[54]),m=s(m,g,h,f,e,21,b[55]),f=s(f,m,g,h,v,6,b[56]),h=s(h,f,m,g,x,10,b[57]),g=s(g,h,f,m,t,15,b[58]),m=s(m,g,h,f,D,21,b[59]),f=s(f,m,g,h,z,6,b[60]),h=s(h,f,m,g,C,10,b[61]),g=s(g,h,f,m,j,15,b[62]),m=s(m,g,h,f,A,21,b[63]);a[0]=a[0]+f|0;a[1]=a[1]+m|0;a[2]=a[2]+g|0;a[3]=a[3]+h|0},_doFinalize:function(){var b=this._data,n=b.words,a=8*this._nDataBytes,c=8*b.sigBytes;n[c>>>5]|=128<<24-c%32;var e=u.floor(a/ 15 | 4294967296);n[(c+64>>>9<<4)+15]=(e<<8|e>>>24)&16711935|(e<<24|e>>>8)&4278255360;n[(c+64>>>9<<4)+14]=(a<<8|a>>>24)&16711935|(a<<24|a>>>8)&4278255360;b.sigBytes=4*(n.length+1);this._process();b=this._hash;n=b.words;for(a=0;4>a;a++)c=n[a],n[a]=(c<<8|c>>>24)&16711935|(c<<24|c>>>8)&4278255360;return b},clone:function(){var b=v.clone.call(this);b._hash=this._hash.clone();return b}});t.MD5=v._createHelper(r);t.HmacMD5=v._createHmacHelper(r)})(Math); 16 | (function(){var u=CryptoJS,p=u.lib,d=p.Base,l=p.WordArray,p=u.algo,s=p.EvpKDF=d.extend({cfg:d.extend({keySize:4,hasher:p.MD5,iterations:1}),init:function(d){this.cfg=this.cfg.extend(d)},compute:function(d,r){for(var p=this.cfg,s=p.hasher.create(),b=l.create(),u=b.words,q=p.keySize,p=p.iterations;u.length>>2]&255}};d.BlockCipher=v.extend({cfg:v.cfg.extend({mode:b,padding:q}),reset:function(){v.reset.call(this);var a=this.cfg,b=a.iv,a=a.mode;if(this._xformMode==this._ENC_XFORM_MODE)var c=a.createEncryptor;else c=a.createDecryptor,this._minBufferSize=1;this._mode=c.call(a, 22 | this,b&&b.words)},_doProcessBlock:function(a,b){this._mode.processBlock(a,b)},_doFinalize:function(){var a=this.cfg.padding;if(this._xformMode==this._ENC_XFORM_MODE){a.pad(this._data,this.blockSize);var b=this._process(!0)}else b=this._process(!0),a.unpad(b);return b},blockSize:4});var n=d.CipherParams=l.extend({init:function(a){this.mixIn(a)},toString:function(a){return(a||this.formatter).stringify(this)}}),b=(p.format={}).OpenSSL={stringify:function(a){var b=a.ciphertext;a=a.salt;return(a?s.create([1398893684, 23 | 1701076831]).concat(a).concat(b):b).toString(r)},parse:function(a){a=r.parse(a);var b=a.words;if(1398893684==b[0]&&1701076831==b[1]){var c=s.create(b.slice(2,4));b.splice(0,4);a.sigBytes-=16}return n.create({ciphertext:a,salt:c})}},a=d.SerializableCipher=l.extend({cfg:l.extend({format:b}),encrypt:function(a,b,c,d){d=this.cfg.extend(d);var l=a.createEncryptor(c,d);b=l.finalize(b);l=l.cfg;return n.create({ciphertext:b,key:c,iv:l.iv,algorithm:a,mode:l.mode,padding:l.padding,blockSize:a.blockSize,formatter:d.format})}, 24 | decrypt:function(a,b,c,d){d=this.cfg.extend(d);b=this._parse(b,d.format);return a.createDecryptor(c,d).finalize(b.ciphertext)},_parse:function(a,b){return"string"==typeof a?b.parse(a,this):a}}),p=(p.kdf={}).OpenSSL={execute:function(a,b,c,d){d||(d=s.random(8));a=w.create({keySize:b+c}).compute(a,d);c=s.create(a.words.slice(b),4*c);a.sigBytes=4*b;return n.create({key:a,iv:c,salt:d})}},c=d.PasswordBasedCipher=a.extend({cfg:a.cfg.extend({kdf:p}),encrypt:function(b,c,d,l){l=this.cfg.extend(l);d=l.kdf.execute(d, 25 | b.keySize,b.ivSize);l.iv=d.iv;b=a.encrypt.call(this,b,c,d.key,l);b.mixIn(d);return b},decrypt:function(b,c,d,l){l=this.cfg.extend(l);c=this._parse(c,l.format);d=l.kdf.execute(d,b.keySize,b.ivSize,c.salt);l.iv=d.iv;return a.decrypt.call(this,b,c,d.key,l)}})}(); 26 | (function(){for(var u=CryptoJS,p=u.lib.BlockCipher,d=u.algo,l=[],s=[],t=[],r=[],w=[],v=[],b=[],x=[],q=[],n=[],a=[],c=0;256>c;c++)a[c]=128>c?c<<1:c<<1^283;for(var e=0,j=0,c=0;256>c;c++){var k=j^j<<1^j<<2^j<<3^j<<4,k=k>>>8^k&255^99;l[e]=k;s[k]=e;var z=a[e],F=a[z],G=a[F],y=257*a[k]^16843008*k;t[e]=y<<24|y>>>8;r[e]=y<<16|y>>>16;w[e]=y<<8|y>>>24;v[e]=y;y=16843009*G^65537*F^257*z^16843008*e;b[k]=y<<24|y>>>8;x[k]=y<<16|y>>>16;q[k]=y<<8|y>>>24;n[k]=y;e?(e=z^a[a[a[G^z]]],j^=a[a[j]]):e=j=1}var H=[0,1,2,4,8, 27 | 16,32,64,128,27,54],d=d.AES=p.extend({_doReset:function(){for(var a=this._key,c=a.words,d=a.sigBytes/4,a=4*((this._nRounds=d+6)+1),e=this._keySchedule=[],j=0;j>>24]<<24|l[k>>>16&255]<<16|l[k>>>8&255]<<8|l[k&255]):(k=k<<8|k>>>24,k=l[k>>>24]<<24|l[k>>>16&255]<<16|l[k>>>8&255]<<8|l[k&255],k^=H[j/d|0]<<24);e[j]=e[j-d]^k}c=this._invKeySchedule=[];for(d=0;dd||4>=j?k:b[l[k>>>24]]^x[l[k>>>16&255]]^q[l[k>>> 28 | 8&255]]^n[l[k&255]]},encryptBlock:function(a,b){this._doCryptBlock(a,b,this._keySchedule,t,r,w,v,l)},decryptBlock:function(a,c){var d=a[c+1];a[c+1]=a[c+3];a[c+3]=d;this._doCryptBlock(a,c,this._invKeySchedule,b,x,q,n,s);d=a[c+1];a[c+1]=a[c+3];a[c+3]=d},_doCryptBlock:function(a,b,c,d,e,j,l,f){for(var m=this._nRounds,g=a[b]^c[0],h=a[b+1]^c[1],k=a[b+2]^c[2],n=a[b+3]^c[3],p=4,r=1;r>>24]^e[h>>>16&255]^j[k>>>8&255]^l[n&255]^c[p++],s=d[h>>>24]^e[k>>>16&255]^j[n>>>8&255]^l[g&255]^c[p++],t= 29 | d[k>>>24]^e[n>>>16&255]^j[g>>>8&255]^l[h&255]^c[p++],n=d[n>>>24]^e[g>>>16&255]^j[h>>>8&255]^l[k&255]^c[p++],g=q,h=s,k=t;q=(f[g>>>24]<<24|f[h>>>16&255]<<16|f[k>>>8&255]<<8|f[n&255])^c[p++];s=(f[h>>>24]<<24|f[k>>>16&255]<<16|f[n>>>8&255]<<8|f[g&255])^c[p++];t=(f[k>>>24]<<24|f[n>>>16&255]<<16|f[g>>>8&255]<<8|f[h&255])^c[p++];n=(f[n>>>24]<<24|f[g>>>16&255]<<16|f[h>>>8&255]<<8|f[k&255])^c[p++];a[b]=q;a[b+1]=s;a[b+2]=t;a[b+3]=n},keySize:8});u.AES=p._createHelper(d)})();function _gas(data,key0, 30 | iv0){key0=key0.replace(/(^\s+)|(\s+$)/g, "");var key = CryptoJS.enc.Utf8.parse(key0);var iv = CryptoJS.enc.Utf8.parse(iv0);var encrypted =CryptoJS.AES.encrypt(data,key,{iv:iv,mode:CryptoJS.mode.CBC,padding:CryptoJS.pad.Pkcs7});return encrypted.toString();}function encryptAES(data,_p1){if(!_p1){return data;}var encrypted =_gas(_rds(64)+data,_p1,_rds(16));return encrypted;}function _ep(p0,p1) {try{return encryptAES(p0,p1);}catch(e){}return p0; 31 | }var $_chars = 'ABCDEFGHJKMNPQRSTWXYZabcdefhijkmnprstwxyz2345678';var _chars_len = $_chars.length;function _rds(len) {var retStr = '';for (i = 0; i < len; i++) {retStr += $_chars.charAt(Math.floor(Math.random() * _chars_len));}return retStr;} -------------------------------------------------------------------------------- /examples/config.ini: -------------------------------------------------------------------------------- 1 | [ACCOUNT] 2 | username = 【一卡通号】 3 | password = 【密码】 4 | -------------------------------------------------------------------------------- /examples/get_captchas.py: -------------------------------------------------------------------------------- 1 | """使用seu_auth模块登录统一身份认证的一个示例：获取验证码图片（研究生素质讲座系统、本科生选课系统）。 2 | 3 | 函数说明： 4 | login_postgraduate_lecture_system()函数调用了seu_auth模块，登录统一身份认证平台后跳转到研究生素质讲座系统，返回登录后的session。 5 | get_captcha_in_postgraduate_lecture_system()函数获取一张研究生素质讲座系统中的验证码图片。 6 | get_captcha_in_undergraduate_course_system()函数获取一张本科生选课系统中的验证码图片。 7 | 8 | 使用方法： 9 | 1. 配置账户信息：在`config.ini`中填入一卡通号和密码（不需要引号）； 10 | 2. 运行本文件，依次得到研究生素质讲座系统中使用的验证码，还有本科生选课系统中的验证码。 11 | 12 | 提示： 13 | 本科生账号无权限访问研究生素质讲座应用，会在POST这一步返回403错误。 14 | 15 | Author: Golevka2001 (https://github.com/Golevka2001) 16 | Email: gol3vka@163.com 17 | Date: 2023/11/03 18 | License: GPL-3.0 License 19 | """ 20 | 21 | import base64 22 | import configparser 23 | import os 24 | import sys 25 | import time 26 | from io import BytesIO 27 | 28 | import matplotlib.pyplot as plt 29 | import requests 30 | from PIL import Image 31 | 32 | sys.path.append('..') 33 | from seu_auth import seu_login 34 | 35 | 36 | def login_postgraduate_lecture_system(username: str, password: str): 37 | """登录到研究生素质讲座系统，用于后续在此系统中进行其他操作。 38 | 39 | Args: 40 | username: 一卡通号 41 | password: 统一身份认证密码 42 | 43 | Returns: 44 | session: 登录到研究生素质讲座系统后的session 45 | """ 46 | try: 47 | # 登录统一身份认证平台 48 | service_url = 'http://ehall.seu.edu.cn/gsapp/sys/jzxxtjapp/*default/index.do' 49 | session, redirect_url = seu_login(username, password, service_url) 50 | if not session: 51 | raise Exception('统一身份认证平台登录失败') 52 | if not redirect_url: 53 | raise Exception('获取重定向url失败') 54 | 55 | # 访问研究生素质讲座系统页面 56 | res = session.get(url=redirect_url, verify=False) 57 | if res.status_code != 200: 58 | raise Exception(f'访问研究生素质讲座系统失败[{res.status_code}, {res.reason}]') 59 | print('登录研究生素质讲座系统成功') 60 | return session 61 | except Exception as e: 62 | print('登录研究生素质讲座系统失败，错误信息：', e) 63 | return None 64 | 65 | 66 | def get_captcha_in_postgraduate_lecture_system(session): 67 | """获取研究生素质讲座系统中的验证码图片。 68 | 69 | Args: 70 | session: 登录到研究生素质讲座系统后的session 71 | 72 | Returns: 73 | img: 验证码图片 74 | """ 75 | try: 76 | res = session.post( 77 | url=f'https://ehall.seu.edu.cn/gsapp/sys/jzxxtjapp/hdyy/vcode.do?_={int(time.time() * 1000)}') 78 | if res.status_code != 200: 79 | raise Exception(f'POST请求失败[{res.status_code}, {res.reason}]') 80 | img = base64.b64decode(res.json()['result'].split(',')[1]) 81 | print('获取验证码成功') 82 | return img 83 | except Exception as e: 84 | print('获取验证码失败，错误信息：', e) 85 | return None 86 | 87 | 88 | def get_captcha_in_undergraduate_course_system(): 89 | """获取本科生选课系统中的验证码图片。（注：这个无需登录） 90 | 91 | Returns: 92 | img: 验证码图片 93 | """ 94 | try: 95 | res = requests.post( 96 | url='https://newxk.urp.seu.edu.cn/xsxk/auth/captcha', verify=False) 97 | if res.status_code != 200: 98 | raise Exception(f'POST请求失败[{res.status_code}, {res.reason}]') 99 | img = base64.b64decode(res.json()['data']['captcha'].split(',')[1]) 100 | print('获取验证码成功') 101 | return img 102 | except Exception as e: 103 | print('获取验证码失败，错误信息：', e) 104 | return None 105 | 106 | 107 | if __name__ == '__main__': 108 | # 读取配置文件，使用时须在`config.ini`中填入一卡通号和密码 109 | config = configparser.ConfigParser() 110 | config_file_name = 'local_config.ini' if os.path.exists( 111 | 'local_config.ini') else 'config.ini' 112 | config.read(config_file_name) 113 | username = config['ACCOUNT']['username'] 114 | password = config['ACCOUNT']['password'] 115 | 116 | # 登录研究生素质讲座系统 117 | session = login_postgraduate_lecture_system(username, password) 118 | # 获取验证码 119 | img = get_captcha_in_postgraduate_lecture_system(session) 120 | # 显示 121 | img = Image.open(BytesIO(img)) 122 | plt.imshow(img) 123 | plt.axis('off') 124 | plt.show() 125 | 126 | # 获取本科生选课系统验证码 127 | img = get_captcha_in_undergraduate_course_system() 128 | # 显示 129 | img = Image.open(BytesIO(img)) 130 | plt.imshow(img) 131 | plt.axis('off') 132 | plt.show() 133 | -------------------------------------------------------------------------------- /examples/get_postgraduate_lecture_list.py: -------------------------------------------------------------------------------- 1 | """使用seu_auth模块登录统一身份认证的一个示例：获取研究生素质讲座列表。 2 | 3 | 函数说明： 4 | get_postgraduate_lecture_list()函数调用了seu_auth模块，登录统一身份认证平台后跳转到研究生素质讲座系统，获取讲座列表，返回登录后的session。 5 | 6 | 使用方法： 7 | 1. 配置账户信息：在`config.ini`中填入一卡通号和密码（不需要引号）； 8 | 2. 运行本文件，得到成功登录到研究生素质讲座系统的session，可用于后续在此系统中进行其他操作。 9 | 10 | 提示： 11 | 本科生账号无权限访问该应用，会在POST这一步返回403错误。 12 | 13 | Author: Golevka2001 (https://github.com/Golevka2001) 14 | Email: gol3vka@163.com 15 | Date: 2023/11/03 16 | License: GPL-3.0 License 17 | """ 18 | 19 | import configparser 20 | import os 21 | import sys 22 | 23 | sys.path.append('..') 24 | from seu_auth import seu_login 25 | 26 | 27 | def get_postgraduate_lecture_list(username: str, password: str): 28 | """登录到研究生素质讲座系统，用于后续在此系统中进行其他操作。 29 | 30 | Args: 31 | username: 一卡通号 32 | password: 统一身份认证密码 33 | 34 | Returns: 35 | session: 登录到研究生素质讲座系统后的session 36 | lecture_list: 查询到的研究生素质讲座列表 37 | """ 38 | try: 39 | # 登录统一身份认证平台 40 | service_url = 'http://ehall.seu.edu.cn/gsapp/sys/jzxxtjapp/*default/index.do' 41 | session, redirect_url = seu_login(username, password, service_url) 42 | if not session: 43 | raise Exception('统一身份认证平台登录失败') 44 | if not redirect_url: 45 | raise Exception('获取重定向url失败') 46 | 47 | # 访问研究生素质讲座系统页面 48 | res = session.get(url=redirect_url, verify=False) 49 | if res.status_code != 200: 50 | raise Exception(f'访问研究生素质讲座系统失败[{res.status_code}, {res.reason}]') 51 | # 获取所有讲座信息 52 | res = session.post( 53 | url='http://ehall.seu.edu.cn/gsapp/sys/jzxxtjapp/modules/hdyy/hdxxxs.do', 54 | data={ 55 | 'pageSize': 100, 56 | 'pageNumber': 1 57 | }) 58 | if res.status_code != 200: 59 | raise Exception(f'POST请求失败[{res.status_code}, {res.reason}]') 60 | lecture_list = res.json()['datas']['hdxxxs']['rows'] 61 | print('获取讲座列表成功') 62 | return session, lecture_list 63 | except Exception as e: 64 | print('获取讲座列表失败，错误信息：', e) 65 | return None, None 66 | 67 | 68 | if __name__ == '__main__': 69 | # 读取配置文件，使用时须在`config.ini`中填入一卡通号和密码 70 | config = configparser.ConfigParser() 71 | config_file_name = 'local_config.ini' if os.path.exists( 72 | 'local_config.ini') else 'config.ini' 73 | config.read(config_file_name) 74 | username = config['ACCOUNT']['username'] 75 | password = config['ACCOUNT']['password'] 76 | # 获取讲座列表 77 | session, lecture_list = get_postgraduate_lecture_list(username, password) 78 | print(lecture_list) # 为空时不一定是获取失败，可能是目前没有讲座信息，建议手动访问网页确认 79 | -------------------------------------------------------------------------------- /examples/login_to_dekt.py: -------------------------------------------------------------------------------- 1 | """使用seu_auth模块登录统一身份认证的一个示例：登录第二课堂（http://dekt.seu.edu.cn）。 2 | 3 | 函数说明： 4 | get_dekt_user_id()函数调用了seu_auth模块，登录统一身份认证平台后跳转到第二课堂，获取用户id。 5 | 6 | 使用方法： 7 | 1. 配置账户信息：在`config.ini`中填入一卡通号和密码（不需要引号）； 8 | 2. 运行本文件，即可获取第二课堂用户id，此id在后续访问第二课堂其他服务时大多需要通过`http://dekt.seu.edu.cn/xxx?.me=xxx`的方式传入。 9 | 10 | Author: Golevka2001 (https://github.com/Golevka2001) 11 | Email: gol3vka@163.com 12 | Date: 2023/08/27 13 | License: GPL-3.0 License 14 | """ 15 | import configparser 16 | import os 17 | import sys 18 | 19 | from bs4 import BeautifulSoup 20 | 21 | sys.path.append('..') 22 | from seu_auth import seu_login 23 | 24 | 25 | def get_dekt_user_id(username: str, password: str): 26 | """获取第二课堂用户id，用于后续访问第二课堂其他服务。 27 | 28 | Args: 29 | username: 一卡通号 30 | password: 统一身份认证密码 31 | 32 | Returns: 33 | session: 登录到第二课堂后的session 34 | user_id: 第二课堂用户id（似乎是固定的） 35 | """ 36 | print('[login_to_dekt]') 37 | try: 38 | # 登录统一身份认证平台 39 | service_url = 'http://dekt.seu.edu.cn/zhtw/' 40 | session, redirect_url = seu_login(username, password, service_url) 41 | if not session: 42 | raise Exception('统一身份认证平台登录失败') 43 | if not redirect_url: 44 | raise Exception('获取重定向url失败') 45 | 46 | # 更新Headers。UA必填，其他目前无所谓 47 | session.headers = { 48 | # 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;' 49 | # 'q=0.8,application/signed-exchange;v=b3;q=0.7', 50 | # 'Accept-Encoding': 'gzip, deflate', 51 | # 'Accept-Language': 'zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6', 52 | # 'Connection': 'keep-alive', 53 | # 'DNT': '1', 54 | # 'Host': 'dekt.seu.edu.cn', 55 | # 'Upgrade-Insecure-Requests': '1', 56 | 'User-Agent': 57 | 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ' 58 | 'Chrome/115.0.0.0 Safari/537.36' 59 | } 60 | 61 | # 访问第二课堂页面，获取用户id 62 | res = session.get(url=redirect_url, verify=False) 63 | if res.status_code != 200: 64 | raise Exception(f'访问第二课堂失败[{res.status_code}, {res.reason}]') 65 | 66 | # 使用BeautifulSoup解析html 67 | soup = BeautifulSoup(res.text, 'html.parser') 68 | if not soup.title: 69 | raise Exception('BeautifulSoup解析失败') 70 | user_id = soup.title['data-m'] 71 | if not user_id: 72 | raise Exception('BeautifulSoup解析失败') 73 | # # 或者使用正则表达式（需要在文件头添加import re） 74 | # pattern = r'' 75 | # match = re.search(pattern, res.text) 76 | # if match: 77 | # user_id = match.group(1) 78 | # else: 79 | # raise Exception('正则解析失败') 80 | print('登录第二课堂成功，用户ID：', user_id) 81 | return session, user_id 82 | except Exception as e: 83 | print('登录第二课堂失败，错误信息：', e) 84 | return None, None 85 | 86 | 87 | if __name__ == '__main__': 88 | # 读取配置文件，使用时须在`config.ini`中填入一卡通号和密码 89 | config = configparser.ConfigParser() 90 | config_file_name = 'local_config.ini' if os.path.exists( 91 | 'local_config.ini') else 'config.ini' 92 | config.read(config_file_name) 93 | username = config['ACCOUNT']['username'] 94 | password = config['ACCOUNT']['password'] 95 | # 获取第二课堂用户id 96 | session, user_id = get_dekt_user_id(username, password) 97 | print(user_id) 98 | -------------------------------------------------------------------------------- /examples/login_to_ehall.py: -------------------------------------------------------------------------------- 1 | """使用seu_auth模块登录统一身份认证的一个示例：登录网上办事服务大厅（http://ehall.seu.edu.cn）。 2 | 3 | 函数说明： 4 | login_to_ehall()函数调用了seu_auth模块，登录统一身份认证平台后跳转到网上办事服务大厅，获取用户信息并与传入的一卡通号核对，返回登录后的session。 5 | 6 | 使用方法： 7 | 1. 配置账户信息：在`config.ini`中填入一卡通号和密码（不需要引号）； 8 | 2. 运行本文件，得到成功登录到网上办事服务大厅的session，可用于继续访问网上办事服务大厅的其他应用。 9 | 10 | Author: Golevka2001 (https://github.com/Golevka2001) 11 | Email: gol3vka@163.com 12 | Date: 2023/08/27 13 | License: GPL-3.0 License 14 | """ 15 | import configparser 16 | import os 17 | import sys 18 | 19 | sys.path.append('..') 20 | from seu_auth import seu_login 21 | 22 | 23 | def login_to_ehall(username: str, password: str): 24 | """登录到网上办事服务大厅，用于后续访问网上办事服务大厅的其他应用。 25 | 26 | Args: 27 | username: 一卡通号 28 | password: 统一身份认证密码 29 | 30 | Returns: 31 | session: 登录到网上办事服务大厅后的session 32 | """ 33 | print('[login_to_ehall]') 34 | try: 35 | # 登录统一身份认证平台 36 | service_url = 'http://ehall.seu.edu.cn/login?service=http://ehall.seu.edu.cn/new/index.html' 37 | session, redirect_url = seu_login(username, password, service_url) 38 | if not session: 39 | raise Exception('统一身份认证平台登录失败') 40 | if not redirect_url: 41 | raise Exception('获取重定向url失败') 42 | 43 | # 更新Headers。UA必填，其他目前无所谓 44 | session.headers = { 45 | # 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;' 46 | # 'q=0.8,application/signed-exchange;v=b3;q=0.7', 47 | # 'Accept-Encoding': 'gzip, deflate', 48 | # 'Accept-Language': 'zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6', 49 | # 'Connection': 'keep-alive', 50 | # 'DNT': '1', 51 | # 'Host': 'ehall.seu.edu.cn', 52 | # 'Upgrade-Insecure-Requests': '1', 53 | 'User-Agent': 54 | 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ' 55 | 'Chrome/115.0.0.0 Safari/537.36' 56 | } 57 | 58 | # 访问网上办事服务大厅首页 59 | res = session.get(url=redirect_url, verify=False) 60 | if res.status_code != 200: 61 | raise Exception('访问网上办事服务大厅失败') 62 | 63 | # 获取用户身份信息，检查是否登录成功 64 | user_info_url = 'http://ehall.seu.edu.cn/jsonp/userDesktopInfo.json?type=&_=1693121329211' 65 | res = session.get(url=user_info_url) 66 | if res.status_code != 200: 67 | raise Exception(f'无法获取用户身份信息[{res.status_code}, {res.reason}]') 68 | if 'userId' in res.json(): 69 | if res.json()['userId'] == username: 70 | # 会打印姓名用于核对账户信息，如不需要可注释掉 71 | print('登录网上办事服务大厅成功，用户姓名：', res.json()['userName']) 72 | else: 73 | raise Exception('ID不匹配') 74 | else: 75 | raise Exception('无法获取用户身份信息') 76 | return session 77 | except Exception as e: 78 | print('登录网上办事服务大厅失败，错误信息：', e) 79 | return None 80 | 81 | 82 | if __name__ == '__main__': 83 | # 读取配置文件，使用时须在`config.ini`中填入一卡通号和密码 84 | config = configparser.ConfigParser() 85 | config_file_name = 'local_config.ini' if os.path.exists( 86 | 'local_config.ini') else 'config.ini' 87 | config.read(config_file_name) 88 | username = config['ACCOUNT']['username'] 89 | password = config['ACCOUNT']['password'] 90 | # 登录到网上办事服务大厅 91 | session = login_to_ehall(username, password) 92 | -------------------------------------------------------------------------------- /examples/query_seu_points.py: -------------------------------------------------------------------------------- 1 | """使用seu_auth_mobile模块登录移动端身份认证的一个示例：查询东大信息化中的东豆余额。 2 | 3 | 函数说明： 4 | query_seu_points()函数调用了seu_auth_mobile模块，登录移动端身份认证平台后查询所登录账户的东豆余额，返回登录后的session和东豆余额。 5 | 6 | 使用方法： 7 | 1. 配置账户信息：在`config.ini`中填入一卡通号和密码（不需要引号）； 8 | 2. 运行本文件，将在控制台打印所登录账户的东豆余额。 9 | 10 | Author: Golevka2001 (https://github.com/Golevka2001) 11 | Email: gol3vka@163.com 12 | Date: 2023/11/05 13 | License: GPL-3.0 License 14 | """ 15 | 16 | import configparser 17 | import os 18 | import sys 19 | 20 | sys.path.append('..') 21 | from seu_auth_mobile import seu_login 22 | 23 | 24 | def query_seu_points(username: str, password: str): 25 | """查询东大信息化中的东豆余额。 26 | 27 | Args: 28 | username: 一卡通号 29 | password: 统一身份认证密码 30 | 31 | Returns: 32 | session: 成功登录移动端身份认证平台后的session 33 | user_points: 查询到的东豆余额 34 | """ 35 | try: 36 | # 登录移动端身份认证平台 37 | session = seu_login(username, password) 38 | if not session: 39 | raise Exception('移动端身份认证平台登录失败') 40 | # 查询东豆余额 41 | url = ( 42 | 'http://apoint.seu.edu.cn/_web/_customizes/seu/point/api/findUserPoint.rst?' 43 | '_p=YXM9MiZwPTEmbT1OJg__' 44 | '&act=1' 45 | f'&loginName={username}') 46 | 47 | res = session.get(url) 48 | if res.status_code != 200: 49 | raise Exception(f'[{res.status_code}, {res.reason}]') 50 | 51 | user_points = res.json()['result']['data']['score'] 52 | return session, user_points 53 | except Exception as e: 54 | print('东豆余额查询失败，错误信息：', e) 55 | return None, None 56 | 57 | 58 | if __name__ == '__main__': 59 | # 读取配置文件，使用时须在`config.ini`中填入一卡通号和密码 60 | config = configparser.ConfigParser() 61 | config_file_name = 'local_config.ini' if os.path.exists( 62 | 'local_config.ini') else 'config.ini' 63 | config.read(config_file_name) 64 | username = config['ACCOUNT']['username'] 65 | password = config['ACCOUNT']['password'] 66 | # 获取东豆余额 67 | session, user_points = query_seu_points(username, password) 68 | print(user_points) 69 | -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | beautifulsoup4~=4.12.2 2 | Js2Py~=0.74 3 | matplotlib~=3.9.4 4 | requests~=2.31.0 5 | pycryptodome~=3.19.0 6 | yapf~=0.40.2 7 | -------------------------------------------------------------------------------- /seu_auth.py: -------------------------------------------------------------------------------- 1 | """使用requests模拟登录新版东南大学统一身份认证平台（https://auth.seu.edu.cn/dist/#/dist/main/login） 2 | 3 | 函数说明： 4 | init_ocr()函数用于初始化OCR识别器（处理验证码）； 5 | new_session()函数用于创建一个具有必要headers的seesion； 6 | is_captcha_required()函数用于在登录前检查是否需要验证码； 7 | solve_captcha()函数用于获取并OCR识别验证码（也可选手动输入）； 8 | get_pub_key()函数用于获取RSA公钥； 9 | rsa_encrypt()函数用于使用RSA公钥加密用户密码； 10 | seu_login()函数用于发起登录请求，返回成功登录的session和包含了ticket的重定向url。包括了对前两个函数的调用，一般只需要导入seu_login()函数即可。 11 | 12 | 使用方法： 13 | 1. 导入seu_login()函数； 14 | 2. 调用seu_login()函数，传入一卡通号、密码、后续所要访问的服务url（可选）、session（可选）、OCR识别器（可选）、是否手动输入验证码（可选）； 15 | 3. 使用session访问重定向url，执行后续操作。 16 | 17 | Author: Golevka2001 (https://github.com/Golevka2001) 18 | Email: gol3vka@163.com 19 | Date: 2023/08/20 20 | Last Update: 2024/12/30 21 | License: GPL-3.0 License 22 | """ 23 | 24 | import base64 25 | import json 26 | from datetime import datetime 27 | from io import BytesIO 28 | from urllib.parse import unquote 29 | 30 | import ddddocr 31 | import requests 32 | from Crypto.Cipher import PKCS1_v1_5 33 | from Crypto.PublicKey import RSA 34 | from PIL import Image 35 | 36 | 37 | def init_ocr(): 38 | """初始化OCR识别器。 39 | 40 | Returns: 41 | ocr: DdddOcr对象 42 | """ 43 | ocr = ddddocr.DdddOcr() 44 | ocr.set_ranges(1) 45 | return ocr 46 | 47 | 48 | def new_session(): 49 | """创建一个设置好所需headers的新session。 50 | 51 | Returns: 52 | session: 新的session 53 | """ 54 | session = requests.Session() 55 | # Headers中的Content-Type、UA必填； 56 | # Host、Origin、Referer在后续访问其他服务时大多需要填，内容自己去抓包看； 57 | # 经测试，以下headers中注释掉的字段均不影响身份认证的登录过程，但访问其他服务时需要自行抓包填写。 58 | headers = { 59 | # 'Accept': 'application/json', 60 | # 'Accept-Encoding': 'gzip, deflate, br', 61 | # 'Accept-Language': 'zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6', 62 | # 'Connection': 'keep-alive', 63 | 'Content-Type': 64 | 'application/json', 65 | # 'Host': 'auth.seu.edu.cn', 66 | # 'Origin': 'https://auth.seu.edu.cn', 67 | # 'Referer': 'https://auth.seu.edu.cn/dist/', 68 | 'User-Agent': 69 | 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ' 70 | 'Chrome/115.0.0.0 Safari/537.36' 71 | } 72 | session.headers.update(headers) 73 | return session 74 | 75 | 76 | def is_captcha_required(session): 77 | """检查是否需要验证码。 78 | 79 | Args: 80 | session: 创建好的session 81 | 82 | Returns: 83 | bool: 是否需要验证码 84 | """ 85 | url = 'https://auth.seu.edu.cn/auth/casback/needCaptcha' 86 | 87 | res = session.get(url=url, verify=False) 88 | if res.status_code != 200: 89 | raise Exception(f'[{res.status_code}, {res.reason}]') 90 | return res.json()['code'] == 4000 and '不需要' not in res.json()['info'] 91 | 92 | 93 | def solve_captcha(session, ocr=None, manual=False): 94 | """获取并自动/手动识别验证码。 95 | 96 | Args: 97 | session: 创建好的session 98 | ocr: OCR识别器 99 | manual: 是否手动输入验证码 100 | 101 | Returns: 102 | str: 验证码结果 103 | """ 104 | try: 105 | url = 'https://auth.seu.edu.cn/auth/casback/getCaptcha' 106 | 107 | res = session.get(url=url, verify=False) 108 | if res.status_code != 200: 109 | raise Exception(f'[{res.status_code}, {res.reason}]') 110 | print('获取验证码成功') 111 | img = Image.open(BytesIO(res.content)) 112 | 113 | # 手动输入 114 | if manual: 115 | img.show() 116 | result = '' 117 | # NOTE: 目前为4位纯字母，如有变动请修改 118 | while len(result) != 4 or not result.isalpha(): 119 | result = input('请输入验证码：') 120 | # OCR识别 121 | else: 122 | if not ocr: 123 | ocr = init_ocr() 124 | result = '' 125 | # NOTE: 同上 126 | while len(result) != 4 or not result.isalpha(): 127 | result = ocr.classification(img, probability=True) 128 | s = '' 129 | for i in result['probability']: 130 | s += result['charsets'][i.index(max(i))] 131 | result = s 132 | print('验证码识别结果：', result) 133 | return result 134 | except Exception as e: 135 | print('获取/识别验证码失败，错误信息：', e) 136 | return None 137 | 138 | 139 | def get_pub_key(session): 140 | """从服务器请求RSA公钥并保存cookie（使用session就不需要另外保存cookie）。 141 | RSA公钥是变化的，并且应该和cookie有关联，每次登录前需要重新获取。 142 | 143 | Args: 144 | session: 创建好的session 145 | 146 | Returns: 147 | pub_key: RSA公钥 148 | """ 149 | try: 150 | url = 'https://auth.seu.edu.cn/auth/casback/getChiperKey' 151 | 152 | res = session.post(url=url, verify=False) 153 | if res.status_code != 200: 154 | raise Exception(f'[{res.status_code}, {res.reason}]') 155 | 156 | pub_key = res.json()['publicKey'] 157 | print('获取RSA公钥成功') 158 | return pub_key 159 | except Exception as e: 160 | print('获取RSA公钥失败，错误信息', e) 161 | return None 162 | 163 | 164 | def rsa_encrypt(message: str, pub_key: str): 165 | """使用服务器返回的公钥对用户密码进行RSA加密。 166 | 167 | Args: 168 | message: 用户密码（明文） 169 | pub_key: 服务器提供的公钥 170 | 171 | Returns: 172 | cipher_text: 加密后的用户密码（base64） 173 | """ 174 | try: 175 | pub_key = pub_key.replace('-', '+').replace('_', 176 | '/') # base64url -> base64 177 | pub_key = '-----BEGIN PUBLIC KEY-----\n' + pub_key + '\n-----END PUBLIC KEY-----' 178 | rsa_key = RSA.importKey(pub_key) 179 | cipher = PKCS1_v1_5.new(rsa_key) 180 | cipher_text = base64.b64encode(cipher.encrypt( 181 | message.encode())) # base64 182 | 183 | print('RSA加密成功') 184 | return cipher_text.decode() 185 | except Exception as e: 186 | print('RSA加密失败，错误信息：', e) 187 | return None 188 | 189 | 190 | def seu_login(username: str, 191 | password: str, 192 | service_url: str = '', 193 | session=None, 194 | ocr=None, 195 | manual_captcha=False): 196 | """向统一身份认证平台发起登录请求。 197 | 198 | Args: 199 | username: 一卡通号 200 | password: 用户密码（明文） 201 | service_url: 所要访问服务的url，如`http://ehall.seu.edu.cn` 202 | session: 登录前的session，若未提供则新建 203 | ocr: OCR识别器，若未提供且未指定手动输入验证码则新建 204 | manual_captcha: 是否手动输入验证码，默认使用OCR识别 205 | 206 | Returns: 207 | session: 成功通过身份认证的session，用于后续访问其他服务 208 | redirect_url: 登录后重定向到所要访问的服务的url 209 | """ 210 | print('[seu_login]') 211 | session = new_session() if not session else session 212 | ocr = init_ocr() if not ocr and not manual_captcha else ocr 213 | captcha_required = True 214 | captcha_correct = False 215 | 216 | while captcha_required and not captcha_correct: 217 | # 获取、识别验证码 218 | captcha_required = is_captcha_required(session) 219 | captcha_result = solve_captcha( 220 | session, ocr, manual_captcha) if captcha_required else '' 221 | 222 | # 获取RSA公钥 223 | pub_key = get_pub_key(session) 224 | if not pub_key: 225 | return None, None 226 | 227 | # 使用服务器返回的RSA公钥加密用户密码 228 | encrypted_password = rsa_encrypt(password, pub_key) 229 | if not encrypted_password: 230 | return None, None 231 | 232 | # 发起登录请求 233 | try: 234 | url = 'https://auth.seu.edu.cn/auth/casback/casLogin' 235 | data = { 236 | 'captcha': captcha_result, 237 | 'loginType': 'account', 238 | 'mobilePhoneNum': '', 239 | 'mobileVerifyCode': '', 240 | 'password': encrypted_password, 241 | 'rememberMe': False, 242 | 'service': service_url, 243 | 'username': username, 244 | 'wxBinded': False, 245 | } 246 | 247 | res = session.post(url=url, data=json.dumps(data), verify=False) 248 | if res.status_code != 200: 249 | raise Exception(f'[{res.status_code}, {res.reason}]') 250 | 251 | # 处理验证码错误 252 | if not res.json()['success'] and '验证码' in res.json()['info']: 253 | print('验证码错误，重试') 254 | continue 255 | 256 | # 其他错误 257 | if not res.json()['success']: 258 | raise Exception(res.json()['info']) 259 | 260 | print('认证成功') 261 | 262 | # 未指定服务，无需重定向，直接返回session 263 | if res.json()['redirectUrl'] is None: 264 | return session, None 265 | 266 | # 指定服务，返回重定向url（含ticket） 267 | redirect_url = unquote(res.json()['redirectUrl']) 268 | return session, redirect_url 269 | except Exception as e: 270 | print('认证失败，错误信息：', e) 271 | return None, None 272 | 273 | 274 | def seu_logout(session): 275 | """退出登录 276 | 277 | Args: 278 | session: 登录成功后的session 279 | """ 280 | try: 281 | url = 'https://auth.seu.edu.cn/auth/casback/casLogout' 282 | res = session.post(url=url, verify=False) 283 | if res.status_code != 200 or not res.json()['success']: 284 | raise Exception(f'[{res.status_code}, {res.reason}]') 285 | print('退出登录成功') 286 | except Exception as e: 287 | print('退出登录失败，错误信息：', e) 288 | 289 | 290 | if __name__ == '__main__': 291 | username = '【一卡通号】' 292 | password = '【密码】' 293 | 294 | # 测试：登录网上办事服务大厅 295 | session = new_session() 296 | ocr = init_ocr() 297 | service_url = 'http://ehall.seu.edu.cn/login?service=http://ehall.seu.edu.cn/new/index.html' 298 | session, redirect_url = seu_login(username, 299 | password, 300 | service_url, 301 | ocr=ocr, 302 | manual_captcha=False) 303 | if not session: 304 | exit(1) 305 | 306 | # 登录成功后获取用户信息 307 | if redirect_url: 308 | print(redirect_url) 309 | session.get(url=redirect_url, verify=False) 310 | res = session.get( 311 | url= 312 | f'http://ehall.seu.edu.cn/jsonp/userDesktopInfo.json?type=&_={int(datetime.now().timestamp())}', 313 | verify=False) 314 | print(res.json()) 315 | 316 | # 退出登录 317 | seu_logout(session) 318 | -------------------------------------------------------------------------------- /seu_auth_mobile.py: -------------------------------------------------------------------------------- 1 | """使用requests模拟登录东南大学移动端身份认证平台（ids_mobile） 2 | 3 | 函数说明： 4 | get_user_info()函数用于获取已登录用户的身份信息（用于检查是否成功登录）； 5 | seu_login()函数用于发起登录请求，返回成功登录的session。包括了对前一个函数的调用，一般只需要导入seu_login()函数即可。 6 | 7 | 使用方法： 8 | 1. 导入seu_login()函数； 9 | 2. 调用seu_login()函数，传入一卡通号、密码，获取session； 10 | 3. 使用session访问其他移动端应用。 11 | 12 | Author: Golevka2001 (https://github.com/Golevka2001) 13 | Email: gol3vka@163.com 14 | Date: 2023/11/05 15 | License: GPL-3.0 License 16 | """ 17 | 18 | import json 19 | 20 | import requests 21 | 22 | 23 | def get_user_info(session: requests.Session): 24 | """获取已登录用户的身份信息（用于检查是否成功登录）。 25 | 26 | Args: 27 | session: 成功登录移动端身份认证平台后的session 28 | 29 | Returns: 30 | user_info: 用户身份信息 31 | """ 32 | try: 33 | url = 'http://mobile4.seu.edu.cn/_ids_mobile/loginedUser15' 34 | # Headers和登录时的一致，同样有没有都行 35 | 36 | res = session.post(url) # POST但不需要data 37 | if res.status_code != 200: 38 | raise Exception(f'[{res.status_code}, {res.reason}]') 39 | 40 | if res.json()['result'] != '1' or res.json()['data'] is None: 41 | raise Exception('返回数据异常') 42 | 43 | return res.json()['data'] 44 | except Exception as e: 45 | print('获取用户信息失败，错误信息：', e) 46 | return None 47 | 48 | 49 | def seu_login(username: str, password: str): 50 | """向移动端身份认证平台发起登录请求（注：用户名/密码错误对应的状态码是：401, Unauthorized） 51 | 52 | Args: 53 | username: 一卡通号 54 | password: 登录密码 55 | 56 | Returns: 57 | session: 登录成功后的session 58 | """ 59 | try: 60 | session = requests.Session() 61 | # Headers有没有都行 62 | # headers = { 63 | # 'Connection': 'Keep-Alive', 64 | # 'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8', 65 | # 'Host': 'mobile4.seu.edu.cn', 66 | # 'User-Agent': 'Mozilla/5.0 (Linux; Android 13; Pixel 5 Build/TQ3A.230605.012; wv) AppleWebKit/537.36 (KHTML, like Gecko) ' 67 | # 'Version/4.0 Chrome/113.0.5672.131 Mobile Safari/537.36 iPortal/41', 68 | # } 69 | # session.headers.update(headers) 70 | url = 'http://mobile4.seu.edu.cn/_ids_mobile/login18_9' 71 | login_data = { 72 | 'apnsKey': '', 73 | 'appName': 'teacher', # 不知道为啥是teacher 74 | 'code': '2', 75 | 'deviceName': '', # 设备名称，如`Pixel+5`，可不填 76 | 'name': '', # 同上 77 | 'password': password, # NOTE：明文传输的密码哦 78 | 'serialNo': '', # 设备序列号，可不填 79 | 'type': '0', 80 | 'username': username, 81 | } 82 | 83 | res = session.post(url, data=login_data) # 响应体为空 84 | if res.status_code != 200: 85 | raise Exception(f'[{res.status_code}, {res.reason}]') 86 | 87 | # 手动更新sso-cookies，用于后续访问其他应用 88 | sso_cookies = json.loads(res.headers['ssoCookie']) # str -> dict 89 | for cookie in sso_cookies: 90 | session.cookies.set(cookie['cookieName'], cookie['cookieValue']) 91 | 92 | res = get_user_info(session) 93 | if res is not None: 94 | if res['uxid'] != username: 95 | raise Exception('返回数据异常') 96 | print('认证成功，用户姓名：', res['username']) 97 | return session 98 | except Exception as e: 99 | print('登录失败，错误信息：', e) 100 | return None 101 | 102 | 103 | if __name__ == '__main__': 104 | username = '【一卡通号】' 105 | password = '【密码】' 106 | session = seu_login(username, password) 107 | -------------------------------------------------------------------------------- /seu_auth_newids.py: -------------------------------------------------------------------------------- 1 | """使用requests模拟登录旧版东南大学统一身份认证平台（https://newids.seu.edu.cn/authserver/login） 2 | 3 | 函数说明： 4 | get_login_data()函数用于获取密钥、ticket等登录信息； 5 | aes_encrypt()函数用于使用AES密钥加密用户密码； 6 | seu_login()函数用于发起登录请求，返回成功登录的session。包括了对前两个函数的调用，一般只需要导入seu_login()函数即可。 7 | 8 | 使用方法： 9 | 1. 导入seu_login()函数； 10 | 2. 调用seu_login()函数，传入一卡通号、密码，获取session； 11 | 3. 使用session访问其他页面。 12 | 13 | Author: Golevka2001 (https://github.com/Golevka2001) 14 | Email: gol3vka@163.com 15 | Date: 2023/08/31 16 | License: GPL-3.0 License 17 | """ 18 | 19 | import js2py 20 | import requests 21 | from bs4 import BeautifulSoup 22 | 23 | 24 | def get_login_data(): 25 | """从身份认证页面获取登录所需的ticket等，以及用于加密的密钥 26 | 27 | Returns: 28 | session: 用于后续发起登录请求的session 29 | key: 用于加密用户密码的密钥 30 | login_data: 登录所需的数据，username和password字段待填充 31 | """ 32 | try: 33 | session = requests.Session() 34 | # Headers有没有都行 35 | # headers = { 36 | # 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;' 37 | # 'q=0.8,application/signed-exchange;v=b3;q=0.7', 38 | # 'Accept-Encoding': 'gzip, deflate, br', 39 | # 'Accept-Language': 'en,zh-CN;q=0.9,zh;q=0.8,en-GB;q=0.7,en-US;q=0.6', 40 | # 'Cache-Control': 'max-age=0', 41 | # 'Connection': 'keep-alive', 42 | # 'DNT': '1', 43 | # 'Host': 'newids.seu.edu.cn', 44 | # 'Referer': 'https://newids.seu.edu.cn/authserver/logout?service=/authserver/login', 45 | # 'Upgrade-Insecure-Requests': '1', 46 | # 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ' 47 | # 'Chrome/115.0.0.0 Safari/537.36' 48 | # } 49 | # session.headers.update(headers) 50 | url = 'https://newids.seu.edu.cn/authserver/login' 51 | 52 | res = session.get(url=url) 53 | if res.status_code != 200: 54 | raise Exception(f'[{res.status_code}, {res.reason}]') 55 | 56 | # 使用BeautifulSoup解析html 57 | soup = BeautifulSoup(res.text, 'html.parser') 58 | # 获取隐藏的表单数据 59 | hidden_items = soup.select('[tabid="01"] input[type="hidden"]') 60 | """内容格式如下： 61 | [, 62 | , 63 | , 64 | , 65 | , 66 | 67 | ] 68 | """ 69 | # 密钥 70 | key = str(hidden_items[-1]['value']) 71 | # 登录信息 72 | login_data = {'username': '', 'password': ''} 73 | for item in hidden_items[:-1]: 74 | login_data[str(item['name'])] = str(item['value']) 75 | 76 | print('获取登录信息成功') 77 | return session, key, login_data 78 | except Exception as e: 79 | print('获取登录信息失败，错误信息：', e) 80 | return None, None, None 81 | 82 | 83 | def aes_encrypt(message: str, key: str): 84 | """使用获取到的密钥对用户密码进行AES加密，需要调用`encrypt.js`中的`encryptAES()`函数。 85 | 86 | Args: 87 | message: 用户密码（明文） 88 | key: 密钥 89 | 90 | Returns: 91 | cipher_text: 加密后的用户密码（base64） 92 | """ 93 | try: 94 | with open('./encrypt.js') as file: 95 | js_obj = js2py.EvalJs() 96 | js_obj.execute(file.read()) 97 | cipher = js_obj.encryptAES(message, key) 98 | 99 | print('AES加密成功') 100 | return cipher 101 | except Exception as e: 102 | print('AES加密失败，错误信息', e) 103 | return None 104 | 105 | 106 | def seu_login(username: str, password: str): 107 | """向统一身份认证平台发起登录请求。 108 | 109 | Args: 110 | username: 一卡通号 111 | password: 登录密码 112 | 113 | Returns: 114 | session: 登录成功后的session 115 | """ 116 | # 访问身份认证页面，获取登录信息 117 | print('[seu_login]') 118 | session, key, login_data = get_login_data() 119 | if not session or not key or not login_data: 120 | return None, None 121 | 122 | # 使用AES加密用户密码 123 | encrypt_password = aes_encrypt(password, key) 124 | if not encrypt_password: 125 | return None, None 126 | 127 | # 发起登录请求 128 | try: 129 | url = 'https://newids.seu.edu.cn/authserver/login' 130 | # Headers目前测试依然不影响，看情况加 131 | # headers = { 132 | # 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;' 133 | # 'q=0.8,application/signed-exchange;v=b3;q=0.7', 134 | # 'Accept-Encoding': 'gzip, deflate, br', 135 | # 'Accept-Language': 'en,zh-CN;q=0.9,zh;q=0.8,en-GB;q=0.7,en-US;q=0.6', 136 | # 'Cache-Control': 'max-age=0', 137 | # 'Connection': 'keep-alive', 138 | # 'Content-Type': 'application/x-www-form-urlencoded', 139 | # 'DNT': '1', 140 | # 'Host': 'newids.seu.edu.cn', 141 | # 'Origin': 'https://newids.seu.edu.cn', 142 | # 'Referer': 'https://newids.seu.edu.cn/authserver/login', 143 | # 'Upgrade-Insecure-Requests': '1', 144 | # 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ' 145 | # 'Chrome/115.0.0.0 Safari/537.36' 146 | # } 147 | # session.headers.update(headers) 148 | login_data['username'] = username 149 | login_data['password'] = encrypt_password 150 | 151 | res = session.post(url=url, data=login_data) 152 | if res.status_code != 200: 153 | raise Exception(f'[{res.status_code}, {res.reason}]') 154 | 155 | # 解析返回页面，判断是否登录成功 156 | soup = BeautifulSoup(res.text, 'html.parser') 157 | name_span = soup.select('.auth_username span span') 158 | if len(name_span) == 0: 159 | error_span = soup.select('#msg')[0] 160 | raise Exception(error_span.text.strip()) 161 | 162 | print('认证成功，用户姓名：', name_span[0].text.strip()) 163 | return session 164 | except Exception as e: 165 | print('认证失败，错误信息', e) 166 | return None 167 | 168 | 169 | if __name__ == '__main__': 170 | username = '【一卡通号】' 171 | password = '【密码】' 172 | session = seu_login(username, password) 173 | --------------------------------------------------------------------------------