yml2213
b962f63bd2
- 检测: 鱼丸余额(fishBall) + 用户等级(userLevelDetail)双接口均通过才判有效, 附带鱼丸数/昵称/等级, 失败时分别说明原因, 8 并发批量检测 - 持久化: login_tasks 新增 ck_check_status/ck_check_result/ck_checked_at, 刷新翻页不丢失; 列表与详情接口返回检测字段 - 前端: 新增"有效性"列(有效/无效+鱼丸昵称tooltip)与独立"检测时间"列, 行内/选中批量检测按钮(cookie:view 权限), 加载时初始化历史检测结果
400 lines
15 KiB
Python
400 lines
15 KiB
Python
"""Cookie 管理路由"""
|
||
|
||
from concurrent.futures import ThreadPoolExecutor, as_completed
|
||
from datetime import datetime, timezone
|
||
import requests
|
||
from fastapi import APIRouter, Depends, HTTPException, Query
|
||
from fastapi.responses import StreamingResponse
|
||
from sqlalchemy import or_
|
||
from sqlalchemy.orm import Session, defer, joinedload
|
||
import io
|
||
import csv
|
||
|
||
from ..database import get_db
|
||
from ..models import User, LoginTask, Account
|
||
from ..deps import get_current_user, require_permission
|
||
from ..permissions import user_has_permission
|
||
|
||
|
||
def _fmt_dt(dt) -> str | None:
|
||
"""将 datetime 格式化为带时区的 ISO 字符串。"""
|
||
if dt is None:
|
||
return None
|
||
if dt.tzinfo is None:
|
||
dt = dt.replace(tzinfo=timezone.utc)
|
||
return dt.isoformat()
|
||
|
||
router = APIRouter(prefix="/api/cookies", tags=["Cookie管理"])
|
||
|
||
# 斗鱼 Cookie 有效性检测接口（抓包参考：钱包中心鱼丸余额 + 用户等级详情）
|
||
CHECK_UA = (
|
||
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 "
|
||
"(KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
|
||
)
|
||
FISH_BALL_API = "https://www.douyu.com/wjapi/nc/exchange/fishBall"
|
||
USER_LEVEL_API = "https://www.douyu.com/japi/interactnc/web/userLevel/userLevelDetail"
|
||
|
||
|
||
def _check_one_cookie(task: LoginTask) -> dict:
|
||
"""检测单条斗鱼 Cookie 有效性：鱼丸 + 用户等级双接口均通过才算有效。
|
||
|
||
附带鱼丸数、昵称/等级与检测时间；任一接口失败会说明原因。
|
||
"""
|
||
cookie = task.cookie or ""
|
||
checked_at = datetime.now(timezone.utc).isoformat()
|
||
base = {"id": task.id, "checked_at": checked_at, "fish_ball": None, "nickname": None, "level": None}
|
||
if not cookie:
|
||
return {**base, "valid": False, "message": "Cookie 为空"}
|
||
|
||
fish_ok = False
|
||
fish_msg = ""
|
||
fish_ball = None
|
||
try:
|
||
fish_data = requests.get(
|
||
FISH_BALL_API,
|
||
params={"appCode": "YJTX"},
|
||
headers={
|
||
"User-Agent": CHECK_UA,
|
||
"Accept": "application/json, text/plain, */*",
|
||
"Referer": "https://www.douyu.com/member/walletcenter",
|
||
"Cookie": cookie,
|
||
},
|
||
timeout=(5, 10),
|
||
).json()
|
||
if isinstance(fish_data, dict) and fish_data.get("error") in (0, "0"):
|
||
fish_ok = True
|
||
fish_ball = (fish_data.get("data") or {}).get("count") if isinstance(fish_data.get("data"), dict) else None
|
||
else:
|
||
fish_msg = str(fish_data.get("msg") or fish_data.get("error") or "响应异常") if isinstance(fish_data, dict) else "响应异常"
|
||
except Exception as exc:
|
||
fish_msg = f"请求失败: {exc}"
|
||
|
||
level_ok = False
|
||
level_msg = ""
|
||
nickname = None
|
||
level = None
|
||
try:
|
||
level_data = requests.get(
|
||
USER_LEVEL_API,
|
||
params={"rid": "0"},
|
||
headers={
|
||
"User-Agent": CHECK_UA,
|
||
"Accept": "application/json, text/plain, */*",
|
||
"Referer": "https://www.douyu.com/pages/ord-user-level?clientType=web",
|
||
"Cookie": cookie,
|
||
},
|
||
timeout=(5, 10),
|
||
).json()
|
||
if isinstance(level_data, dict) and level_data.get("error") in (0, "0"):
|
||
level_ok = True
|
||
info = level_data.get("data") if isinstance(level_data.get("data"), dict) else {}
|
||
nickname = str(info.get("nn") or "") or None
|
||
level = info.get("lv")
|
||
else:
|
||
level_msg = str(level_data.get("msg") or level_data.get("error") or "响应异常") if isinstance(level_data, dict) else "响应异常"
|
||
except Exception as exc:
|
||
level_msg = f"请求失败: {exc}"
|
||
|
||
valid = fish_ok and level_ok
|
||
if valid:
|
||
message = "有效"
|
||
else:
|
||
parts = [f"鱼丸接口: {'ok' if fish_ok else (fish_msg or '失败')}", f"等级接口: {'ok' if level_ok else (level_msg or '失败')}"]
|
||
message = "；".join(parts)
|
||
return {
|
||
**base,
|
||
"valid": valid,
|
||
"message": message[:200],
|
||
"fish_ball": fish_ball,
|
||
"nickname": nickname,
|
||
"level": level,
|
||
}
|
||
|
||
|
||
def _visible_cookie_tasks_query(db: Session, current: User):
|
||
"""返回当前用户可见的成功 Cookie 任务查询。"""
|
||
query = db.query(LoginTask).filter(LoginTask.status == "success")
|
||
|
||
# 无全量登录任务权限时，只能操作分配给自己的账号 Cookie。
|
||
if not user_has_permission(current, "login:view_all"):
|
||
query = query.join(Account, LoginTask.account_id == Account.id).filter(
|
||
Account.assigned_to == current.id
|
||
)
|
||
return query
|
||
|
||
|
||
@router.get("")
|
||
def list_cookies(
|
||
search: str = Query(""),
|
||
page: int | None = Query(None, ge=1),
|
||
page_size: int = Query(20, ge=1, le=200),
|
||
include_cookie: bool = Query(True),
|
||
db: Session = Depends(get_db),
|
||
current: User = Depends(get_current_user),
|
||
):
|
||
"""查看登录成功的 Cookie 列表。"""
|
||
if not include_cookie:
|
||
query = _visible_cookie_tasks_query(db, current).options(defer(LoginTask.cookie))
|
||
else:
|
||
query = _visible_cookie_tasks_query(db, current).options(
|
||
joinedload(LoginTask.account).joinedload(Account.assigned_user),
|
||
)
|
||
search_text = (search or "").strip()
|
||
if search_text:
|
||
pattern = f"%{search_text}%"
|
||
if user_has_permission(current, "login:view_all"):
|
||
query = query.join(Account, LoginTask.account_id == Account.id)
|
||
query = query.outerjoin(User, Account.assigned_to == User.id).filter(or_(
|
||
Account.username.ilike(pattern),
|
||
User.username.ilike(pattern),
|
||
))
|
||
|
||
total = None
|
||
if page is not None:
|
||
total = query.order_by(None).count()
|
||
query = query.order_by(LoginTask.finished_at.desc())
|
||
if page is not None:
|
||
query = query.offset((page - 1) * page_size).limit(page_size)
|
||
|
||
tasks = query.all()
|
||
|
||
# 批量查账号，避免 N+1 查询
|
||
account_ids = [t.account_id for t in tasks]
|
||
accounts_map = {}
|
||
if account_ids:
|
||
account_query = db.query(Account).filter(Account.id.in_(account_ids))
|
||
if not include_cookie:
|
||
account_query = account_query.options(
|
||
joinedload(Account.assigned_user),
|
||
defer(Account.password),
|
||
defer(Account.email),
|
||
defer(Account.email_password),
|
||
)
|
||
accs = account_query.all()
|
||
accounts_map = {a.id: a for a in accs}
|
||
|
||
result = []
|
||
for t in tasks:
|
||
acc = accounts_map.get(t.account_id)
|
||
item = {
|
||
"id": t.id,
|
||
"batch_id": t.batch_id,
|
||
"account_id": t.account_id,
|
||
"account_username": acc.username if acc else "",
|
||
"assigned_to": acc.assigned_to,
|
||
"assigned_username": acc.assigned_user.username if acc and acc.assigned_user else None,
|
||
"created_at": _fmt_dt(t.finished_at),
|
||
"ck_check_status": t.ck_check_status or "",
|
||
"ck_check_result": t.ck_check_result,
|
||
"ck_checked_at": _fmt_dt(t.ck_checked_at),
|
||
}
|
||
# 分页列表默认只返回预览，复制/导出时再获取完整敏感字段。
|
||
if include_cookie and user_has_permission(current, "cookie:view"):
|
||
cookie = t.cookie or ""
|
||
item["cookie"] = cookie
|
||
item["cookie_preview"] = cookie[:50] + "..." if len(cookie) > 50 else cookie
|
||
item["account_password"] = acc.password if acc else ""
|
||
else:
|
||
item["cookie"] = ""
|
||
item["cookie_preview"] = "***"
|
||
item["account_password"] = ""
|
||
result.append(item)
|
||
if page is not None:
|
||
return {"items": result, "total": total or 0, "page": page, "page_size": page_size}
|
||
return result
|
||
|
||
|
||
@router.get("/summary")
|
||
def cookies_summary(
|
||
db: Session = Depends(get_db),
|
||
current: User = Depends(get_current_user),
|
||
):
|
||
"""Cookie 管理统计，避免前端为了卡片统计拉全量 Cookie。"""
|
||
query = _visible_cookie_tasks_query(db, current)
|
||
if user_has_permission(current, "login:view_all"):
|
||
query = query.join(Account, LoginTask.account_id == Account.id)
|
||
total = query.count()
|
||
assigned_count = query.filter(Account.assigned_to.isnot(None)).count()
|
||
return {
|
||
"total": total,
|
||
"assigned_count": assigned_count,
|
||
"unassigned_count": max(0, total - assigned_count),
|
||
}
|
||
|
||
|
||
@router.get("/export")
|
||
def export_cookies(
|
||
format: str = "csv",
|
||
db: Session = Depends(get_db),
|
||
current: User = Depends(require_permission("cookie:export")),
|
||
):
|
||
"""导出 Cookie，支持 csv 和 custom 格式。
|
||
csv: 账号, Cookie, 时间
|
||
custom: 账号----密码----ck
|
||
"""
|
||
tasks = _visible_cookie_tasks_query(db, current).order_by(LoginTask.finished_at.desc()).all()
|
||
|
||
# 批量查账号，避免 N+1
|
||
account_ids = [t.account_id for t in tasks]
|
||
accounts_map = {}
|
||
if account_ids:
|
||
accs = db.query(Account).filter(Account.id.in_(account_ids)).all()
|
||
accounts_map = {a.id: a for a in accs}
|
||
|
||
if format == "custom":
|
||
# 账号----密码----ck
|
||
lines = []
|
||
for t in tasks:
|
||
acc = accounts_map.get(t.account_id)
|
||
username = acc.username if acc else ""
|
||
password = acc.password if acc else ""
|
||
ck = t.cookie or ""
|
||
lines.append(f"{username}----{password}----{ck}")
|
||
content = "\r\n".join(lines)
|
||
filename = "cookies_custom.txt"
|
||
media = "text/plain"
|
||
else:
|
||
# CSV: 账号, Cookie, 时间
|
||
output = io.StringIO()
|
||
writer = csv.writer(output)
|
||
writer.writerow(["账号", "Cookie", "时间"])
|
||
for t in tasks:
|
||
acc = accounts_map.get(t.account_id)
|
||
username = acc.username if acc else ""
|
||
writer.writerow([username, t.cookie or "", _fmt_dt(t.finished_at) or ""])
|
||
content = output.getvalue()
|
||
filename = "cookies.csv"
|
||
media = "text/csv"
|
||
|
||
return StreamingResponse(
|
||
iter([content]),
|
||
media_type=media,
|
||
headers={"Content-Disposition": f"attachment; filename={filename}"},
|
||
)
|
||
|
||
|
||
@router.post("/check")
|
||
def check_cookies(
|
||
ids: str = "",
|
||
db: Session = Depends(get_db),
|
||
current: User = Depends(get_current_user),
|
||
):
|
||
"""批量检测斗鱼 Cookie 有效性（鱼丸接口），返回每条有效性与鱼丸数/昵称。"""
|
||
if not ids:
|
||
raise HTTPException(status_code=400, detail="请指定记录ID")
|
||
id_list = [int(x) for x in ids.split(",") if x.strip().isdigit()]
|
||
if not id_list:
|
||
raise HTTPException(status_code=400, detail="无效的ID")
|
||
tasks = _visible_cookie_tasks_query(db, current).filter(LoginTask.id.in_(id_list)).all()
|
||
if not tasks:
|
||
raise HTTPException(status_code=404, detail="记录不存在")
|
||
|
||
results: list[dict] = []
|
||
with ThreadPoolExecutor(max_workers=8) as pool:
|
||
futures = {pool.submit(_check_one_cookie, task): task for task in tasks}
|
||
for future in as_completed(futures):
|
||
try:
|
||
results.append(future.result())
|
||
except Exception as exc:
|
||
task = futures[future]
|
||
results.append({
|
||
"id": task.id,
|
||
"valid": False,
|
||
"message": f"检测异常: {exc}",
|
||
"fish_ball": None,
|
||
"nickname": None,
|
||
"level": None,
|
||
"checked_at": datetime.now(timezone.utc).isoformat(),
|
||
})
|
||
results.sort(key=lambda item: item["id"])
|
||
|
||
# 持久化检测结果，刷新/翻页不丢失
|
||
tasks_by_id = {task.id: task for task in tasks}
|
||
for item in results:
|
||
task = tasks_by_id.get(item["id"])
|
||
if not task:
|
||
continue
|
||
task.ck_check_status = "valid" if item["valid"] else "invalid"
|
||
task.ck_check_result = {
|
||
"fish_ball": item.get("fish_ball"),
|
||
"nickname": item.get("nickname"),
|
||
"level": item.get("level"),
|
||
"message": item.get("message", ""),
|
||
}
|
||
task.ck_checked_at = datetime.now(timezone.utc)
|
||
db.commit()
|
||
|
||
return {"results": results, "success": True}
|
||
|
||
|
||
@router.get("/{task_id}")
|
||
def get_cookie(
|
||
task_id: int,
|
||
db: Session = Depends(get_db),
|
||
current: User = Depends(get_current_user),
|
||
):
|
||
"""获取单条 Cookie 详情，供复制操作按需读取完整敏感字段。"""
|
||
task = _visible_cookie_tasks_query(db, current).filter(LoginTask.id == task_id).first()
|
||
if not task:
|
||
raise HTTPException(status_code=404, detail="记录不存在")
|
||
acc = db.query(Account).filter(Account.id == task.account_id).first()
|
||
item = {
|
||
"id": task.id,
|
||
"batch_id": task.batch_id,
|
||
"account_id": task.account_id,
|
||
"account_username": acc.username if acc else "",
|
||
"assigned_to": acc.assigned_to if acc else None,
|
||
"assigned_username": acc.assigned_user.username if acc and acc.assigned_user else None,
|
||
"created_at": _fmt_dt(task.finished_at),
|
||
"ck_check_status": task.ck_check_status or "",
|
||
"ck_check_result": task.ck_check_result,
|
||
"ck_checked_at": _fmt_dt(task.ck_checked_at),
|
||
"cookie": "",
|
||
"cookie_preview": "***",
|
||
"account_password": "",
|
||
}
|
||
if user_has_permission(current, "cookie:view"):
|
||
cookie = task.cookie or ""
|
||
item["cookie"] = cookie
|
||
item["cookie_preview"] = cookie[:50] + "..." if len(cookie) > 50 else cookie
|
||
item["account_password"] = acc.password if acc else ""
|
||
return item
|
||
|
||
|
||
@router.delete("/batch")
|
||
def delete_cookies_batch(
|
||
task_ids: str = "",
|
||
db: Session = Depends(get_db),
|
||
current: User = Depends(require_permission("cookie:export")),
|
||
):
|
||
"""批量删除 Cookie 记录。"""
|
||
if not task_ids:
|
||
raise HTTPException(status_code=400, detail="请指定记录ID")
|
||
ids = [int(x) for x in task_ids.split(",") if x.strip().isdigit()]
|
||
if not ids:
|
||
raise HTTPException(status_code=400, detail="无效的ID")
|
||
tasks = _visible_cookie_tasks_query(db, current).filter(LoginTask.id.in_(ids)).all()
|
||
for t in tasks:
|
||
t.cookie = ""
|
||
t.status = "failed"
|
||
t.message = "Cookie已清除"
|
||
db.commit()
|
||
return {"message": f"已删除 {len(tasks)} 条", "deleted": len(tasks), "success": True}
|
||
|
||
|
||
@router.delete("/{task_id}")
|
||
def delete_cookie(
|
||
task_id: int,
|
||
db: Session = Depends(get_db),
|
||
current: User = Depends(require_permission("cookie:export")),
|
||
):
|
||
"""删除一条 Cookie 记录。"""
|
||
task = _visible_cookie_tasks_query(db, current).filter(LoginTask.id == task_id).first()
|
||
if not task:
|
||
raise HTTPException(status_code=404, detail="记录不存在")
|
||
task.cookie = ""
|
||
task.status = "failed"
|
||
task.message = "Cookie已清除"
|
||
db.commit()
|
||
return {"message": "已删除", "success": True}
|