Add Shengqu private apis

Signed-off-by: Yuan Si <do4suki@gmail.com>

go.mod

@@ -5,6 +5,7 @@ go 1.19
 require github.com/gin-gonic/gin v1.8.2
 
 require (
+	github.com/forgoer/openssl v1.5.0
 	github.com/mattn/go-sqlite3 v1.14.16
 	github.com/tidwall/gjson v1.14.4
 )

go.sum

@@ -2,6 +2,8 @@ github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ3
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/forgoer/openssl v1.5.0 h1:zu1AvfECl6VatFfkfryvI/C8Cru+xLEvZ6Q80DmAPRc=
+github.com/forgoer/openssl v1.5.0/go.mod h1:NMVFOzYeLVR7UiGTxsa+A21nrERTZ3Rv2JHDPcJpDyI=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/gin-contrib/sse v0.1.0 h1:Y/yl/+YNO8GZSjAhjMsSuLt29uWRFHdHYUb5lYOV9qE=
 github.com/gin-contrib/sse v0.1.0/go.mod h1:RHrZQHXnP2xjPF+u1gW/2HnVO7nvIa9PG3Gm+fLHvGI=
@@ -65,6 +67,7 @@ github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+
 github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
 github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
@@ -131,6 +134,7 @@ gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMy
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

handler/private.go

@@ -0,0 +1,266 @@
+package handler
+
+import (
+	"encoding/base64"
+	"fmt"
+	"honoka-chan/encrypt"
+	"honoka-chan/utils"
+	"io"
+	"net/http"
+	"net/url"
+	"strings"
+
+	"github.com/forgoer/openssl"
+	"github.com/gin-gonic/gin"
+)
+
+var (
+	randKey string
+)
+
+func ActiveHandler(ctx *gin.Context) {
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, `{ "code": 0, "msg": "ok", "data": { "message": "ok", "result": 0 } }`)
+}
+
+func PublicKeyHandler(ctx *gin.Context) {
+	publicKey := utils.ReadAllText("publickey.pem")
+	publicKey = strings.ReplaceAll(publicKey, "\n", "")
+	publicKey = strings.ReplaceAll(publicKey, "-----BEGIN PUBLIC KEY-----", "")
+	publicKey = strings.ReplaceAll(publicKey, "-----END PUBLIC KEY-----", "")
+	publicKey = strings.ReplaceAll(publicKey, "/", "\\/")
+	// fmt.Println(publicKey)
+	resp := fmt.Sprintf(`{ "code": 0, "msg": "", "data": { "result": 0, "message": "ok", "key": "%s", "method": "rsa" } }`, publicKey)
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func HandshakeHandler(ctx *gin.Context) {
+	body, err := io.ReadAll(ctx.Request.Body)
+	if err != nil {
+		panic(err)
+	}
+	defer ctx.Request.Body.Close()
+	// fmt.Println(string(body))
+
+	body64, err := base64.StdEncoding.DecodeString(string(body))
+	if err != nil {
+		panic(err)
+	}
+	decryptedBody := encrypt.RSA_Decrypt(body64, "privatekey.pem")
+	// fmt.Println(decryptedBody)
+	// fmt.Println(string(decryptedBody))
+
+	params, err := url.ParseQuery(string(decryptedBody))
+	if err != nil {
+		panic(err)
+	}
+	randKey = params.Get("randkey")
+	// fmt.Println(randKey)
+
+	token := `{"token":"YUMEMICHI14104EF796D769AE404C1FC6"}`
+	encryptedToken, err := openssl.Des3ECBEncrypt([]byte(token), []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	if err != nil {
+		panic(err)
+	}
+	encryptedToken64 := base64.StdEncoding.EncodeToString(encryptedToken)
+	// fmt.Println(encryptedToken64)
+
+	resp := fmt.Sprintf(`{ "code": 0, "msg": "ok", "data": "%s" }`, encryptedToken64)
+
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func InitializeHandler(ctx *gin.Context) {
+	// body, err := io.ReadAll(ctx.Request.Body)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// defer ctx.Request.Body.Close()
+	// fmt.Println(string(body))
+
+	// body64, err := base64.StdEncoding.DecodeString(string(body))
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// // fmt.Println(string(body64))
+
+	// decryptedBody, err := openssl.Des3ECBDecrypt(body64, []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// fmt.Println(string(decryptedBody))
+
+	token := `{"message":"Hello, world!"}`
+	encryptedToken, err := openssl.Des3ECBEncrypt([]byte(token), []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	if err != nil {
+		panic(err)
+	}
+	encryptedToken64 := base64.StdEncoding.EncodeToString(encryptedToken)
+	// fmt.Println(encryptedToken64)
+
+	resp := fmt.Sprintf(`{ "code": 0, "msg": "ok", "data": "%s" }`, encryptedToken64)
+
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func GetCodeHandler(ctx *gin.Context) {
+	resp := `{ "code": 0, "msg": "ok", "data": { "codeArray": [ { "btntext": "好的", "code": "-10264022", "msg_from": 2, "text": "", "title": "短信验证码被阻止", "type": 1 }, { "btntext": " ", "code": "-10869623", "msg_from": 2, "text": "", "title": "网络连接失败，无法一键登录", "type": 2 }, { "btntext": " ", "code": "10298300", "msg_from": 2, "text": "", "title": " ", "type": 3 }, { "btntext": "", "code": "10298311", "msg_from": 2, "text": "", "title": "", "type": 3 }, { "btntext": " ", "code": "10298312", "msg_from": 2, "text": "", "title": " ", "type": 3 }, { "btntext": " ", "code": "10298313", "msg_from": 2, "text": "", "title": " ", "type": 1 }, { "btntext": " ", "code": "10298321", "msg_from": 2, "text": "", "title": " ", "type": 3 }, { "btntext": " ", "code": "10298322", "msg_from": 2, "text": "", "title": " ", "type": 3 } ], "codeVersion": "1.0.5" } }`
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func LoginAutoHandler(ctx *gin.Context) {
+	// body, err := io.ReadAll(ctx.Request.Body)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// defer ctx.Request.Body.Close()
+	// fmt.Println(string(body))
+
+	// body64, err := base64.StdEncoding.DecodeString(string(body))
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// // fmt.Println(string(body64))
+
+	// decryptedBody, err := openssl.Des3ECBDecrypt(body64, []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// fmt.Println(string(decryptedBody))
+
+	token := `{"message":"Hello, world!"}`
+	encryptedToken, err := openssl.Des3ECBEncrypt([]byte(token), []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	if err != nil {
+		panic(err)
+	}
+	encryptedToken64 := base64.StdEncoding.EncodeToString(encryptedToken)
+	// fmt.Println(encryptedToken64)
+
+	resp := fmt.Sprintf(`{ "code": 0, "msg": "ok", "data": "%s" }`, encryptedToken64)
+
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func LoginAreaHandler(ctx *gin.Context) {
+	userId := ctx.PostForm("userid")
+	if userId != "" {
+		// fmt.Println(userId)
+		resp := fmt.Sprintf(`{ "code": 0, "msg": "ok", "data": { "userid": "%s" } }`, userId)
+		ctx.Header("Content-Type", "text/html;charset=utf-8")
+		ctx.String(http.StatusOK, resp)
+	}
+}
+
+func AccountLoginHandler(ctx *gin.Context) {
+	// body, err := io.ReadAll(ctx.Request.Body)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// defer ctx.Request.Body.Close()
+	// fmt.Println(string(body))
+
+	// body64, err := base64.StdEncoding.DecodeString(string(body))
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// // fmt.Println(string(body64))
+
+	// decryptedBody, err := openssl.Des3ECBDecrypt(body64, []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// fmt.Println(string(decryptedBody))
+
+	token := `{"message":"Hello, world!"}`
+	encryptedToken, err := openssl.Des3ECBEncrypt([]byte(token), []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	if err != nil {
+		panic(err)
+	}
+	encryptedToken64 := base64.StdEncoding.EncodeToString(encryptedToken)
+	// fmt.Println(encryptedToken64)
+
+	resp := fmt.Sprintf(`{ "code": 0, "msg": "ok", "data": "%s" }`, encryptedToken64)
+
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func ReportRoleHandler(ctx *gin.Context) {
+	// body, err := io.ReadAll(ctx.Request.Body)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// defer ctx.Request.Body.Close()
+	// fmt.Println(string(body))
+
+	// body64, err := base64.StdEncoding.DecodeString(string(body))
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// // fmt.Println(string(body64))
+
+	// decryptedBody, err := openssl.Des3ECBDecrypt(body64, []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// fmt.Println(string(decryptedBody))
+
+	// decrypted, err := url.QueryUnescape(string(decryptedBody))
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// fmt.Println(decrypted)
+
+	token := `{"message":"Hello, world!"}`
+	encryptedToken, err := openssl.Des3ECBEncrypt([]byte(token), []byte(randKey)[0:24], openssl.PKCS7_PADDING)
+	if err != nil {
+		panic(err)
+	}
+	encryptedToken64 := base64.StdEncoding.EncodeToString(encryptedToken)
+	fmt.Println(encryptedToken64)
+
+	resp := fmt.Sprintf(`{ "code": 0, "msg": "ok", "data": "%s" }`, encryptedToken64)
+
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func GetProductListHandler(ctx *gin.Context) {
+	resp := `{ "code": 0, "msg": "ok", "data": { "message": [ ], "result": 0 } }`
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func ReportLog(ctx *gin.Context) {
+	// body, err := io.ReadAll(ctx.Request.Body)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// defer ctx.Request.Body.Close()
+	// fmt.Println(string(body))
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, "")
+}
+
+func ReportApp(ctx *gin.Context) {
+	// body, err := io.ReadAll(ctx.Request.Body)
+	// if err != nil {
+	// 	panic(err)
+	// }
+	// defer ctx.Request.Body.Close()
+	// fmt.Println(string(body))
+	resp := `{ "code": 0, "msg": "", "data": { "needReport": 0 } }`
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}
+
+func AgreementHandler(ctx *gin.Context) {
+	resp := `{ "return_code": 0, "error_type": 0, "return_message": "", "data": { } }`
+	ctx.Header("Content-Type", "text/html;charset=utf-8")
+	ctx.String(http.StatusOK, resp)
+}

main.go

@@ -24,12 +24,26 @@ func main() {
 		r := gin.Default()
 		r.Use(middleware.KlabHeader)
 
+		// Private APIs
+		r.GET("/v1/basic/getcode", handler.GetCodeHandler)
+		r.POST("/v1/account/active", handler.ActiveHandler)
+		r.POST("/v1/basic/publickey", handler.PublicKeyHandler)
+		r.POST("/v1/basic/handshake", handler.HandshakeHandler)
+		r.POST("/v1/account/initialize", handler.InitializeHandler)
+		r.POST("/v1/account/login", handler.AccountLoginHandler)
+		r.POST("/v1/account/loginauto", handler.LoginAutoHandler)
+		r.POST("/v1/basic/loginarea", handler.LoginAreaHandler)
+		r.POST("/v1/account/reportRole", handler.ReportRoleHandler)
+		r.POST("/v1/basic/getProductList", handler.GetProductListHandler)
+		r.POST("/report/ge/app", handler.ReportLog)
+		r.GET("/agreement/all", handler.AgreementHandler)
+		r.GET("/integration/appReport/initialize", handler.ReportApp)
+		// Private APIs
+
 		r.Any("/", func(ctx *gin.Context) {
 			ctx.String(http.StatusOK, "Hello, world!")
 		})
-
 		r.GET("/webview.php/announce/index", handler.AnnounceIndexHandler)
-
 		r.POST("/main.php/login/authkey", handler.AuthKeyHandler)
 		r.POST("/main.php/login/login", handler.LoginHandler)
 		r.POST("/main.php/user/userInfo", handler.UserInfoHandler)