Code cleanup

Signed-off-by: Yuan Si <do4suki@gmail.com>

middleware/authkey.go

@@ -0,0 +1,53 @@
+package middleware
+
+import (
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+	"honoka-chan/database"
+	"honoka-chan/encrypt"
+	"honoka-chan/utils"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/tidwall/gjson"
+)
+
+func AuthKey(ctx *gin.Context) {
+	req := gjson.Parse(ctx.PostForm("request_data"))
+	tDummyToken, err := base64.StdEncoding.DecodeString(req.Get("dummy_token").String())
+	CheckErr(err)
+	dummyToken := encrypt.RSA_Decrypt(tDummyToken, "privatekey.pem")
+
+	// aesKey := dummyToken[0:16]
+	// tAuthData, err := base64.StdEncoding.DecodeString(req.Get("auth_data").String())
+	// CheckErr(err)
+	// authData := utils.Sub16(encrypt.AES_CBC_Decrypt(tAuthData, aesKey))
+	// fmt.Println(string(authData))
+
+	clientToken := base64.StdEncoding.EncodeToString(dummyToken)
+	serverToken := base64.StdEncoding.EncodeToString([]byte(utils.RandomStr(32)))
+	authorizeToken := base64.StdEncoding.EncodeToString([]byte(utils.RandomStr(32)))
+
+	ctx.Set("dummy_token", serverToken)
+	ctx.Set("authorize_token", authorizeToken)
+
+	authJson, err := json.Marshal(map[string]interface{}{
+		"client_token": clientToken,
+		"server_token": serverToken,
+	})
+	CheckErr(err)
+	err = database.LevelDb.Put([]byte(authorizeToken), authJson)
+	CheckErr(err)
+
+	nonce := ctx.GetInt("nonce")
+	nonce++
+	ctx.Set("nonce", nonce)
+
+	authorize := fmt.Sprintf("consumerKey=lovelive_test&timeStamp=%d&version=1.1&nonce=%d&requestTimeStamp=%d", time.Now().Unix(), nonce, ctx.GetInt64("req_time"))
+
+	ctx.Header("user_id", "")
+	ctx.Header("authorize", authorize)
+
+	ctx.Next()
+}

middleware/common.go

@@ -0,0 +1,78 @@
+package middleware
+
+import (
+	"fmt"
+	"honoka-chan/database"
+	"net/http"
+	"net/url"
+	"strconv"
+	"time"
+
+	"github.com/gin-gonic/gin"
+)
+
+var (
+	ErrorMsg = `{"code":20001,"message":""}`
+)
+
+func CheckErr(err error) {
+	if err != nil {
+		panic(err)
+	}
+}
+
+func Common(ctx *gin.Context) {
+	ctx.Set("req_time", time.Now().Unix())
+
+	authorize := ctx.Request.Header.Get("Authorize")
+	if authorize == "" {
+		ctx.String(http.StatusForbidden, ErrorMsg)
+		ctx.Abort()
+	}
+	ctx.Set("authorize", authorize)
+
+	params, err := url.ParseQuery(authorize)
+	CheckErr(err)
+
+	nonce, err := strconv.Atoi(params.Get("nonce"))
+	CheckErr(err)
+	nonce++
+	ctx.Set("nonce", nonce)
+
+	token := params.Get("token")
+	ctx.Set("token", token)
+
+	if ctx.Request.URL.String() == "/main.php/login/authkey" ||
+		ctx.Request.URL.String() == "/main.php/login/login" {
+		// 特殊请求
+		fmt.Println("========")
+	} else {
+		userId := ctx.Request.Header.Get("User-ID")
+		if userId == "" {
+			ctx.String(http.StatusForbidden, ErrorMsg)
+			ctx.Abort()
+		}
+		ctx.Set("userid", userId)
+
+		rToken, err := database.LevelDb.Get([]byte(userId))
+		CheckErr(err)
+		if token != string(rToken) {
+			ctx.String(http.StatusForbidden, ErrorMsg)
+			ctx.Abort()
+		}
+
+		if !database.MatchTokenUid(token, userId) {
+			ctx.String(http.StatusForbidden, ErrorMsg)
+			ctx.Abort()
+		}
+	}
+
+	ctx.Header("Content-Type", "application/json; charset=utf-8")
+	ctx.Header("X-Powered-By", "KLab Native APP Platform")
+	ctx.Header("server_version", "20120129")
+	ctx.Header("Server-Version", "97.4.6")
+	ctx.Header("version_up", "0")
+	ctx.Header("status_code", "200")
+
+	ctx.Next()
+}

middleware/login.go

@@ -0,0 +1,45 @@
+package middleware
+
+import (
+	"encoding/base64"
+	"honoka-chan/database"
+	"honoka-chan/encrypt"
+	"honoka-chan/utils"
+
+	"github.com/gin-gonic/gin"
+	"github.com/tidwall/gjson"
+)
+
+func Login(ctx *gin.Context) {
+	authData, err := database.LevelDb.Get([]byte(ctx.GetString("token")))
+	CheckErr(err)
+
+	clientToken, err := base64.StdEncoding.DecodeString(gjson.Get(string(authData), "client_token").String())
+	CheckErr(err)
+	serverToken, err := base64.StdEncoding.DecodeString(gjson.Get(string(authData), "server_token").String())
+	CheckErr(err)
+
+	xmcKey := utils.SliceXor(clientToken, serverToken)
+	aesKey := xmcKey[0:16]
+
+	req := gjson.Parse(ctx.PostForm("request_data"))
+	tKey, err := base64.StdEncoding.DecodeString(req.Get("login_key").String())
+	CheckErr(err)
+	loginKey := utils.Sub16(encrypt.AES_CBC_Decrypt(tKey, aesKey))
+	ctx.Set("login_key", string(loginKey))
+
+	tPasswd, err := base64.StdEncoding.DecodeString(req.Get("login_passwd").String())
+	CheckErr(err)
+	loginPasswd := utils.Sub16(encrypt.AES_CBC_Decrypt(tPasswd, aesKey))
+	ctx.Set("login_passwd", string(loginPasswd))
+
+	nonce := ctx.GetInt("nonce")
+	nonce++
+	ctx.Set("nonce", nonce)
+
+	authorizeToken := base64.StdEncoding.EncodeToString([]byte(utils.RandomStr(32)))
+	ctx.Set("authorize_token", authorizeToken)
+
+	ctx.Next()
+
+}

middleware/middleware.go

@@ -1,32 +0,0 @@
-package middleware
-
-import (
-	"honoka-chan/config"
-	"honoka-chan/database"
-	"honoka-chan/handler"
-	"honoka-chan/utils"
-	"net/http"
-
-	"github.com/gin-gonic/gin"
-)
-
-func CommonMid(ctx *gin.Context) {
-	authorizeStr := ctx.Request.Header["Authorize"]
-	userId := ctx.Request.Header[http.CanonicalHeaderKey("User-ID")]
-	if len(userId) > 0 {
-		authStr, _ := utils.GetAuthorizeToken(authorizeStr)
-		res, _ := database.LevelDb.Get([]byte(userId[0]))
-		if authStr != string(res) {
-			ctx.String(http.StatusForbidden, handler.ErrorMsg)
-			ctx.Abort()
-			return
-		}
-	}
-	ctx.Header("Content-Type", "application/json; charset=utf-8")
-	ctx.Header("X-Powered-By", config.Conf.Server.PoweredBy)
-	ctx.Header("server_version", config.Conf.Server.VersionDate)
-	ctx.Header("version_up", config.Conf.Server.VersionUp)
-	ctx.Header("status_code", "200")
-
-	ctx.Next()
-}