Cookiues
ebd1fdddaa
calcRandom() 移植的是 C# 里声明为 int 的 32 位比特反转，`<<=` 溢出按二进制 补码环绕，结果恒为合法 signed int32(高位被置起时为负)。Dart 的 int 是 64 位 且被反转值恒正，于是约一半概率产出 [2^31, 2^32) 的正数(如 3212134032)，超出 UserGamePlaylog.playSpecial 的 int 声明，服务器整个 body 反序列化失败返回 HTTP 500，表现为解锁歌曲/获取收藏品不可用。按 C# 位模式重解释为 signed 32 位。 同时补上 userPlaylogList 缺少的 extBool3(UserPlaylog.cs:337 声明的 bool)。
567 lines
17 KiB
Dart
567 lines
17 KiB
Dart
import 'dart:convert';
|
||
import 'dart:math';
|
||
import 'dart:typed_data';
|
||
|
||
import 'package:archive/archive.dart';
|
||
import 'package:crypto/crypto.dart';
|
||
import 'package:http/http.dart' as http;
|
||
import 'package:pointycastle/export.dart';
|
||
|
||
import '../config/title_server_config.dart';
|
||
import '../models/user_data.dart';
|
||
import '../models/user_preview.dart';
|
||
import '../models/user_rating.dart';
|
||
|
||
class TitleApiException implements Exception {
|
||
final String message;
|
||
const TitleApiException(this.message);
|
||
@override
|
||
String toString() => 'TitleApiException: $message';
|
||
}
|
||
|
||
class UserLoginResult {
|
||
final String token;
|
||
final int loginId;
|
||
final String lastLoginDate;
|
||
final int loginDateTime;
|
||
|
||
const UserLoginResult({
|
||
required this.token,
|
||
required this.loginId,
|
||
required this.lastLoginDate,
|
||
required this.loginDateTime,
|
||
});
|
||
}
|
||
|
||
class TitleApiService {
|
||
static const String _obfuscateConstant = 'MaimaiChn';
|
||
|
||
static String? lastRawResponse;
|
||
|
||
final TitleServerConfig _config;
|
||
String? _cookies;
|
||
|
||
TitleApiService(this._config, {String? cookies}) : _cookies = cookies;
|
||
|
||
String? get cookies => _cookies;
|
||
|
||
Uint8List _aesEncrypt(Uint8List plaintext) {
|
||
final cipher = PaddedBlockCipherImpl(
|
||
PKCS7Padding(),
|
||
CBCBlockCipher(AESEngine()),
|
||
)..init(
|
||
true,
|
||
PaddedBlockCipherParameters(
|
||
ParametersWithIV(
|
||
KeyParameter(Uint8List.fromList(_config.aesKeyBytes)),
|
||
Uint8List.fromList(_config.aesIvBytes),
|
||
),
|
||
null,
|
||
),
|
||
);
|
||
return cipher.process(plaintext);
|
||
}
|
||
|
||
Uint8List _aesDecrypt(Uint8List ciphertext) {
|
||
final cipher = PaddedBlockCipherImpl(
|
||
PKCS7Padding(),
|
||
CBCBlockCipher(AESEngine()),
|
||
)..init(
|
||
false,
|
||
PaddedBlockCipherParameters(
|
||
ParametersWithIV(
|
||
KeyParameter(Uint8List.fromList(_config.aesKeyBytes)),
|
||
Uint8List.fromList(_config.aesIvBytes),
|
||
),
|
||
null,
|
||
),
|
||
);
|
||
return cipher.process(ciphertext);
|
||
}
|
||
|
||
Uint8List _compress(List<int> data) {
|
||
return Uint8List.fromList(ZLibEncoder().encode(data));
|
||
}
|
||
|
||
Uint8List _decompress(List<int> data) {
|
||
return Uint8List.fromList(ZLibDecoder().decodeBytes(data));
|
||
}
|
||
|
||
Uint8List _buildRequestBody(Map<String, dynamic> packet) {
|
||
final jsonStr = jsonEncode(packet);
|
||
final jsonBytes = utf8.encode(jsonStr);
|
||
final compressed = _compress(jsonBytes);
|
||
return _aesEncrypt(compressed);
|
||
}
|
||
|
||
/// Port of empurple `HttpResult.cookieHeader()`: only the `JSESSIONID`
|
||
/// from the Set-Cookie response headers is used for subsequent requests.
|
||
void _captureCookiesFromResponse(http.Response response, String apiName) {
|
||
final headerKeys = response.headers.keys.toList();
|
||
for (final key in headerKeys) {
|
||
if (!key.toLowerCase().contains('set-cookie')) continue;
|
||
final value = response.headers[key]!;
|
||
final match =
|
||
RegExp(r'JSESSIONID=([^;,]+)', caseSensitive: false).firstMatch(value);
|
||
if (match != null) {
|
||
_cookies = 'JSESSIONID=${match.group(1)!.trim()}';
|
||
// ignore: avoid_print
|
||
print('[$apiName] >>> Captured session cookie: $_cookies');
|
||
return;
|
||
}
|
||
}
|
||
}
|
||
|
||
Map<String, dynamic> _processResponseBody(Uint8List bodyBytes) {
|
||
try {
|
||
final decrypted = _aesDecrypt(bodyBytes);
|
||
final decompressed = _decompress(decrypted);
|
||
final jsonStr = utf8.decode(decompressed);
|
||
return jsonDecode(jsonStr) as Map<String, dynamic>;
|
||
} on FormatException catch (e) {
|
||
throw TitleApiException('Response body is not valid JSON: $e');
|
||
} on Exception catch (e) {
|
||
throw TitleApiException('Failed to process response body: $e');
|
||
}
|
||
}
|
||
|
||
String _buildHash(String apiName) {
|
||
final raw = apiName + _obfuscateConstant + _config.obfuscateParam;
|
||
return md5.convert(utf8.encode(raw)).toString();
|
||
}
|
||
|
||
Future<Map<String, dynamic>> _callApi(
|
||
String apiName,
|
||
Map<String, dynamic> packet,
|
||
int userId,
|
||
) async {
|
||
final hash = _buildHash(apiName);
|
||
final body = _buildRequestBody(packet);
|
||
final baseUrl = _normalizeUrl(_config.titleServerUrl);
|
||
final url = Uri.parse('$baseUrl/$hash');
|
||
|
||
// ignore: avoid_print
|
||
print('══════════════════════════════════════');
|
||
// ignore: avoid_print
|
||
print('[$apiName] >>> REQUEST >>>');
|
||
// ignore: avoid_print
|
||
print('[$apiName] URL: $url');
|
||
// ignore: avoid_print
|
||
print('[$apiName] userId: $userId');
|
||
// ignore: avoid_print
|
||
print('[$apiName] hash: $hash');
|
||
// ignore: avoid_print
|
||
print('[$apiName] body (encrypted): ${body.length} bytes');
|
||
// ignore: avoid_print
|
||
final packetStr = const JsonEncoder.withIndent(' ').convert(packet);
|
||
// ignore: avoid_print
|
||
print('[$apiName] packet (plain):');
|
||
// ignore: avoid_print
|
||
print(packetStr);
|
||
|
||
final uaSuffix = userId != 0 ? '$userId' : _config.clientId;
|
||
final headers = <String, String>{
|
||
'User-Agent': '$hash#$uaSuffix',
|
||
'Content-Type': 'application/json',
|
||
'Mai-Encoding': _config.apiVersion,
|
||
'Accept-Encoding': '',
|
||
'Charset': 'UTF-8',
|
||
'Content-Encoding': 'deflate',
|
||
'number': '0',
|
||
};
|
||
final cookies = _cookies;
|
||
if (cookies != null) {
|
||
headers['Cookie'] = cookies;
|
||
// ignore: avoid_print
|
||
print('[$apiName] Cookie: $cookies');
|
||
}
|
||
|
||
final response = await http
|
||
.post(
|
||
url,
|
||
headers: headers,
|
||
body: body,
|
||
)
|
||
.timeout(const Duration(seconds: 15));
|
||
|
||
_captureCookiesFromResponse(response, apiName);
|
||
|
||
// ignore: avoid_print
|
||
print('[$apiName] HTTP status: ${response.statusCode}');
|
||
// ignore: avoid_print
|
||
print('[$apiName] response bytes: ${response.bodyBytes.length}');
|
||
|
||
if (response.statusCode != 200) {
|
||
throw TitleApiException('$apiName returned ${response.statusCode}');
|
||
}
|
||
|
||
if (response.bodyBytes.isEmpty) {
|
||
throw TitleApiException('$apiName returned empty body');
|
||
}
|
||
|
||
final json = _processResponseBody(response.bodyBytes);
|
||
final raw = const JsonEncoder.withIndent(' ').convert(json);
|
||
// ignore: avoid_print
|
||
print('[$apiName] <<< RESPONSE <<<');
|
||
// ignore: avoid_print
|
||
print(raw);
|
||
// ignore: avoid_print
|
||
print('══════════════════════════════════════');
|
||
|
||
return json;
|
||
}
|
||
|
||
static int calcRandom() {
|
||
final rand = _RandomHelper();
|
||
final max = 1037933;
|
||
final num2 = (rand.nextInt(max - 1) + 1) * 2069 + 1024;
|
||
var num3 = 0;
|
||
var n = num2;
|
||
for (var i = 0; i < 32; i++) {
|
||
num3 <<= 1;
|
||
num3 += n % 2;
|
||
n >>= 1;
|
||
}
|
||
// 原版 num5 是 C# 的 int，`<<=` 溢出按二进制补码环绕，所以结果恒为合法的
|
||
// signed int32（高位被置起时是负数）。Dart 的 int 是 64 位且 n 恒为正，
|
||
// 不重解释就会产出 >2^31 的正数，超出 UserGamePlaylog.playSpecial 的 int
|
||
// 声明，服务器反序列化失败直接返回 HTTP 500。
|
||
return num3.toSigned(32);
|
||
}
|
||
|
||
String _normalizeUrl(String url) {
|
||
var normalized = url.trim();
|
||
if (normalized.endsWith('/')) {
|
||
normalized = normalized.substring(0, normalized.length - 1);
|
||
}
|
||
return normalized;
|
||
}
|
||
|
||
Future<UserPreviewDataBean> getUserPreview({
|
||
required int userId,
|
||
required String token,
|
||
}) async {
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] ===== START =====');
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] userId=$userId');
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] token=$token');
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] clientId=${_config.clientId}');
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] titleServerUrl=${_config.titleServerUrl}');
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] aesKey.len=${_config.aesKeyBytes.length} aesIv.len=${_config.aesIvBytes.length}');
|
||
|
||
const apiName = 'GetUserPreviewApi';
|
||
final hash = _buildHash(apiName);
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] hash=$hash');
|
||
|
||
final packet = {
|
||
'userId': userId,
|
||
'segaIdAuthKey': '',
|
||
'token': token,
|
||
'clientId': _config.clientId,
|
||
};
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] packet=${jsonEncode(packet)}');
|
||
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] building request body (compress + encrypt)...');
|
||
final body = _buildRequestBody(packet);
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] body size=${body.length} bytes');
|
||
|
||
final baseUrl = _normalizeUrl(_config.titleServerUrl);
|
||
final url = Uri.parse('$baseUrl/$hash');
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] POST $url');
|
||
|
||
try {
|
||
final previewHeaders = <String, String>{
|
||
'User-Agent': '$hash#$userId',
|
||
'Content-Type': 'application/json',
|
||
'Mai-Encoding': _config.apiVersion,
|
||
'Accept-Encoding': '',
|
||
'Charset': 'UTF-8',
|
||
'Content-Encoding': 'deflate',
|
||
'number': '0',
|
||
};
|
||
final previewCookies = _cookies;
|
||
if (previewCookies != null) {
|
||
previewHeaders['Cookie'] = previewCookies;
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] Cookie: $previewCookies');
|
||
}
|
||
|
||
final response = await http
|
||
.post(
|
||
url,
|
||
headers: previewHeaders,
|
||
body: body,
|
||
)
|
||
.timeout(const Duration(seconds: 15));
|
||
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] HTTP status=${response.statusCode}');
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] response body size=${response.bodyBytes.length} bytes');
|
||
|
||
if (response.statusCode != 200) {
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] non-200 response body: ${utf8.decode(response.bodyBytes.take(500).toList())}');
|
||
throw TitleApiException(
|
||
'Server returned ${response.statusCode}',
|
||
);
|
||
}
|
||
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] decrypting + decompressing...');
|
||
final json = _processResponseBody(response.bodyBytes);
|
||
final raw = const JsonEncoder.withIndent(' ').convert(json);
|
||
lastRawResponse = raw;
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] === RESPONSE ===');
|
||
// ignore: avoid_print
|
||
print(raw);
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] ===== END =====');
|
||
return UserPreviewDataBean.fromJson(json);
|
||
} catch (e) {
|
||
// ignore: avoid_print
|
||
print('[getUserPreview] ERROR: $e');
|
||
rethrow;
|
||
}
|
||
}
|
||
|
||
// ---- Generic data APIs ----
|
||
|
||
Future<Map<String, dynamic>> getUserData(int userId) async {
|
||
return _callApi('GetUserDataApi', {'userId': userId}, userId);
|
||
}
|
||
|
||
Future<UserDataBean> getUserDataTyped(int userId) async {
|
||
final json = await getUserData(userId);
|
||
return UserDataBean.fromJson(json);
|
||
}
|
||
|
||
Future<Map<String, dynamic>> getUserExtend(int userId) async {
|
||
return _callApi('GetUserExtendApi', {'userId': userId}, userId);
|
||
}
|
||
|
||
Future<Map<String, dynamic>> getUserOption(int userId) async {
|
||
return _callApi('GetUserOptionApi', {'userId': userId}, userId);
|
||
}
|
||
|
||
Future<Map<String, dynamic>> getUserRating(int userId) async {
|
||
return _callApi('GetUserRatingApi', {'userId': userId}, userId);
|
||
}
|
||
|
||
Future<UserRatingBean> getUserRatingTyped(int userId) async {
|
||
final json = await getUserRating(userId);
|
||
return UserRatingBean.fromJson(json);
|
||
}
|
||
|
||
Future<Map<String, dynamic>> getUserCharge(int userId) async {
|
||
return _callApi('GetUserChargeApi', {'userId': userId}, userId);
|
||
}
|
||
|
||
Future<Map<String, dynamic>> getUserActivity(int userId) async {
|
||
return _callApi('GetUserActivityApi', {'userId': userId}, userId);
|
||
}
|
||
|
||
Future<Map<String, dynamic>> getUserMissionData(int userId) async {
|
||
return _callApi('GetUserMissionDataApi', {'userId': userId}, userId);
|
||
}
|
||
|
||
// ---- UserLogin (returns full result) ----
|
||
|
||
Future<UserLoginResult> userLoginFull({
|
||
required int userId,
|
||
required String token,
|
||
}) async {
|
||
const apiName = 'UserLoginApi';
|
||
final now = DateTime.now().millisecondsSinceEpoch ~/ 1000;
|
||
|
||
final packet = {
|
||
'userId': userId,
|
||
'accessCode': '',
|
||
'regionId': _config.regionId,
|
||
'placeId': _config.placeId,
|
||
'clientId': _config.clientId,
|
||
'dateTime': now - 600,
|
||
'loginDateTime': now,
|
||
'isContinue': false,
|
||
'genericFlag': 0,
|
||
'token': token,
|
||
};
|
||
|
||
final json = await _callApi(apiName, packet, userId);
|
||
|
||
final returnCode = json['returnCode'] as int? ?? -1;
|
||
if (returnCode != 1) {
|
||
throw TitleApiException('UserLoginApi returnCode=$returnCode');
|
||
}
|
||
|
||
final loginId = (json['loginId'] as num?)?.toInt() ?? 0;
|
||
final lastLoginDate = json['lastLoginDate'] as String? ?? '';
|
||
final newToken = json['token'] as String? ?? '';
|
||
|
||
return UserLoginResult(
|
||
token: newToken,
|
||
loginId: loginId,
|
||
lastLoginDate: lastLoginDate,
|
||
loginDateTime: now,
|
||
);
|
||
}
|
||
|
||
// ---- UserLogout ----
|
||
|
||
/// Port of empurple/eaquira behavior: the server may omit `returnCode`
|
||
/// for fire-and-forget APIs. Only a present-but-not-1 code is an error.
|
||
void _checkReturnCode(Map<String, dynamic> json, String apiName) {
|
||
final returnCode = json['returnCode'];
|
||
if (returnCode == null) return;
|
||
final code = (returnCode as num).toInt();
|
||
if (code != 1) {
|
||
throw TitleApiException('$apiName returnCode=$code');
|
||
}
|
||
}
|
||
|
||
Future<void> userLogout({
|
||
required int userId,
|
||
required int loginDateTime,
|
||
}) async {
|
||
const apiName = 'UserLogoutApi';
|
||
|
||
final packet = {
|
||
'userId': userId,
|
||
'accessCode': '',
|
||
'regionId': _config.regionId,
|
||
'placeId': _config.placeId,
|
||
'clientId': _config.clientId,
|
||
'loginDateTime': loginDateTime,
|
||
'type': 1, // LogoutType.Logout
|
||
};
|
||
|
||
final json = await _callApi(apiName, packet, userId);
|
||
_checkReturnCode(json, apiName);
|
||
}
|
||
|
||
// ---- UpsertUserChargeLog (使用功能票) ----
|
||
|
||
Future<void> upsertUserChargeLog({
|
||
required int userId,
|
||
required int ticketId,
|
||
required int loginDateTime,
|
||
required int playerRating,
|
||
int playCount = 0,
|
||
}) async {
|
||
const apiName = 'UpsertUserChargelogApi';
|
||
final now = DateTime.now();
|
||
final validDate = DateTime(now.year, now.month, now.day, 4, 0, 0)
|
||
.add(const Duration(days: 90));
|
||
final purchaseDateStr = _formatDateTime(now);
|
||
final validDateStr =
|
||
'${validDate.year}-${validDate.month.toString().padLeft(2, '0')}-${validDate.day.toString().padLeft(2, '0')} '
|
||
'${validDate.hour.toString().padLeft(2, '0')}:${validDate.minute.toString().padLeft(2, '0')}:${validDate.second.toString().padLeft(2, '0')}';
|
||
|
||
final packet = {
|
||
'userId': userId,
|
||
'userChargelog': {
|
||
'chargeId': ticketId,
|
||
'price': 0,
|
||
'purchaseDate': purchaseDateStr,
|
||
'playCount': playCount,
|
||
'playerRating': playerRating,
|
||
'placeId': _config.placeId,
|
||
'regionId': _config.regionId,
|
||
'clientId': _config.clientId,
|
||
},
|
||
'userCharge': {
|
||
'chargeId': ticketId,
|
||
'stock': 1,
|
||
'purchaseDate': purchaseDateStr,
|
||
'validDate': validDateStr,
|
||
},
|
||
'loginDateTime': loginDateTime,
|
||
};
|
||
|
||
final json = await _callApi(apiName, packet, userId);
|
||
_checkReturnCode(json, apiName);
|
||
}
|
||
|
||
String _formatDateTime(DateTime dt) {
|
||
return '${dt.year}-${dt.month.toString().padLeft(2, '0')}-${dt.day.toString().padLeft(2, '0')} '
|
||
'${dt.hour.toString().padLeft(2, '0')}:${dt.minute.toString().padLeft(2, '0')}:${dt.second.toString().padLeft(2, '0')}.0';
|
||
}
|
||
|
||
// ---- UpsertUserAll (发包) ----
|
||
|
||
/// Upload a single playlog record (fake game log).
|
||
Future<void> uploadUserPlaylog(
|
||
Map<String, dynamic> userPlaylog,
|
||
int userId,
|
||
) async {
|
||
const apiName = 'UploadUserPlaylogApi';
|
||
final json = await _callApi(apiName, {
|
||
'userId': userId,
|
||
'userPlaylog': userPlaylog,
|
||
}, userId);
|
||
_checkReturnCode(json, apiName);
|
||
}
|
||
|
||
/// Fetch all user data needed to build an UpsertUserAll payload.
|
||
/// Returns a map keyed by the raw API names (e.g. 'GetUserDataApi').
|
||
Future<Map<String, Map<String, dynamic>>> fetchUserAllData(int userId) async {
|
||
final results = await Future.wait([
|
||
getUserData(userId),
|
||
getUserExtend(userId),
|
||
getUserOption(userId),
|
||
getUserRating(userId),
|
||
getUserCharge(userId),
|
||
getUserActivity(userId),
|
||
getUserMissionData(userId),
|
||
]);
|
||
|
||
return {
|
||
'GetUserDataApi': results[0],
|
||
'GetUserExtendApi': results[1],
|
||
'GetUserOptionApi': results[2],
|
||
'GetUserRatingApi': results[3],
|
||
'GetUserChargeApi': results[4],
|
||
'GetUserActivityApi': results[5],
|
||
'GetUserMissionDataApi': results[6],
|
||
};
|
||
}
|
||
|
||
/// Send an UpsertUserAll payload to the server.
|
||
Future<void> upsertUserAll(
|
||
Map<String, dynamic> packet,
|
||
int userId,
|
||
) async {
|
||
const apiName = 'UpsertUserAllApi';
|
||
final json = await _callApi(apiName, packet, userId);
|
||
_checkReturnCode(json, apiName);
|
||
}
|
||
|
||
/// Fetch user character list.
|
||
Future<List<Map<String, dynamic>>> getUserCharacter(int userId) async {
|
||
final json = await _callApi(
|
||
'GetUserCharacterApi',
|
||
{'userId': userId},
|
||
userId,
|
||
);
|
||
final list = json['userCharacterList'] as List<dynamic>? ?? [];
|
||
return list.map((e) => e as Map<String, dynamic>).toList();
|
||
}
|
||
}
|
||
|
||
class _RandomHelper {
|
||
final _random = Random();
|
||
|
||
int nextInt(int max) => _random.nextInt(max);
|
||
}
|