Add files via upload
This commit is contained in:
XXhaos
319
mitmproxy/xboxbot/bot.py
Normal file
319
mitmproxy/xboxbot/bot.py
Normal file
@@ -0,0 +1,319 @@
|
||||
# -*- coding: utf-8 -*-
|
||||
import os, json, uuid, ssl, time, re
|
||||
from urllib import request as urlrequest
|
||||
|
||||
from telegram import Update
|
||||
from telegram.ext import (
|
||||
ApplicationBuilder,
|
||||
CommandHandler,
|
||||
ContextTypes,
|
||||
)
|
||||
|
||||
# ========== 环境变量 ==========
|
||||
BOT_TOKEN = os.environ["TELEGRAM_BOT_TOKEN"]
|
||||
|
||||
# [修改] 解析允许的用户ID列表 (支持逗号分隔)
|
||||
raw_ids = os.environ.get("TELEGRAM_ALLOWED_USER_ID", "")
|
||||
# 去除两端空格，按逗号分割，并过滤掉空项
|
||||
ALLOWED_UIDS = [x.strip() for x in raw_ids.split(',') if x.strip()]
|
||||
|
||||
STATE_PATH = os.environ.get("STATE_PATH", "/shared/state.json")
|
||||
|
||||
# 用于 /addtocart 时构造请求体
|
||||
MARKET_LOCALE = os.environ.get("MITM_MARKET_LOCALE", "en-ng") # e.g. en-ng
|
||||
MARKET_CODE = os.environ.get("MITM_MARKET_CODE" , "NG") # e.g. NG
|
||||
|
||||
UA = (
|
||||
"Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_1 like Mac OS X) "
|
||||
"AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/133.0.3065.54 "
|
||||
"Version/18.0 Mobile/15E148 Safari/604.1"
|
||||
)
|
||||
CART_API_URL = (
|
||||
"https://cart.production.store-web.dynamics.com/"
|
||||
"cart/v1.0/cart/loadCart?cartType=consumer&appId=StoreWeb"
|
||||
)
|
||||
|
||||
# ========== 工具函数：state.json 读写 ==========
|
||||
def _load_state():
|
||||
try:
|
||||
with open(STATE_PATH, "r", encoding="utf-8") as f:
|
||||
return json.load(f)
|
||||
except Exception:
|
||||
return {}
|
||||
|
||||
def _save_state(st):
|
||||
tmp = STATE_PATH + ".tmp"
|
||||
with open(tmp, "w", encoding="utf-8") as f:
|
||||
json.dump(st, f, ensure_ascii=False, indent=2, sort_keys=True)
|
||||
os.replace(tmp, STATE_PATH)
|
||||
|
||||
def _getv(key, default=""):
|
||||
st = _load_state()
|
||||
return st.get(key, default)
|
||||
|
||||
def _setv(key, value):
|
||||
st = _load_state()
|
||||
st[key] = value
|
||||
_save_state(st)
|
||||
|
||||
def _get_products(st=None):
|
||||
if st is None:
|
||||
st = _load_state()
|
||||
arr = st.get("__xbox_products__", [])
|
||||
out = []
|
||||
if isinstance(arr, list):
|
||||
for it in arr:
|
||||
try:
|
||||
p = str(it.get("ProductId","")).strip()
|
||||
s = str(it.get("SkuId","")).strip()
|
||||
a = str(it.get("AvailabilityId","")).strip()
|
||||
if p and s and a:
|
||||
out.append({"ProductId":p,"SkuId":s,"AvailabilityId":a})
|
||||
except Exception:
|
||||
continue
|
||||
return out
|
||||
|
||||
def _save_products_no_notify(new_list):
|
||||
"""
|
||||
用在机器人手动指令时更新 products 列表和 XboxProductList，
|
||||
但不发送任何 Telegram 自动推送（因为推送是 mitmproxy 插件做的）。
|
||||
"""
|
||||
# 去重
|
||||
seen = set()
|
||||
uniq = []
|
||||
for it in new_list:
|
||||
key = f"{it['ProductId']}||{it['SkuId']}||{it['AvailabilityId']}"
|
||||
if key in seen:
|
||||
continue
|
||||
seen.add(key)
|
||||
uniq.append(it)
|
||||
|
||||
st = _load_state()
|
||||
st["__xbox_products__"] = uniq
|
||||
|
||||
parts = []
|
||||
for i, it in enumerate(uniq, 1):
|
||||
parts.append(f"product{i}={it['ProductId']}|{it['SkuId']}|{it['AvailabilityId']}")
|
||||
st["XboxProductList"] = ";".join(parts)
|
||||
|
||||
_save_state(st)
|
||||
|
||||
# ========== 工具函数：加购 (复用 mitmproxy 那套逻辑) ==========
|
||||
def _cart_put_single(muid: str, ms_cv: str, pid: str, sid: str, aid: str, x_vec: str = ""):
|
||||
"""
|
||||
对单个 (ProductId, SkuId, AvailabilityId) 调用微软购物车接口。
|
||||
"""
|
||||
payload = {
|
||||
"locale": MARKET_LOCALE,
|
||||
"market": MARKET_CODE,
|
||||
"catalogClientType": "storeWeb",
|
||||
"friendlyName": f"cart-{MARKET_CODE}",
|
||||
"riskSessionId": str(uuid.uuid4()),
|
||||
"clientContext": {"client": "UniversalWebStore.Cart", "deviceType": "Pc"},
|
||||
"itemsToAdd": {
|
||||
"items": [
|
||||
{
|
||||
"productId": pid,
|
||||
"skuId": sid,
|
||||
"availabilityId": aid,
|
||||
"campaignId": "xboxcomct",
|
||||
"quantity": 1,
|
||||
}
|
||||
]
|
||||
},
|
||||
}
|
||||
|
||||
data = json.dumps(payload, separators=(",", ":")).encode("utf-8")
|
||||
|
||||
req = urlrequest.Request(CART_API_URL, data=data, method="PUT")
|
||||
req.add_header("content-type", "application/json")
|
||||
req.add_header("accept", "*/*")
|
||||
req.add_header("x-authorization-muid", muid or "")
|
||||
req.add_header("x-validation-field-1", "9pgbhbppjf2b")
|
||||
req.add_header("ms-cv", ms_cv or "")
|
||||
if x_vec:
|
||||
req.add_header("x-ms-vector-id", x_vec)
|
||||
req.add_header("accept-language", "en-US,en;q=0.9")
|
||||
req.add_header("accept-encoding", "gzip, deflate, br")
|
||||
req.add_header("sec-fetch-site", "cross-site")
|
||||
req.add_header("sec-fetch-mode", "cors")
|
||||
req.add_header("sec-fetch-dest", "empty")
|
||||
req.add_header("origin", "https://www.microsoft.com")
|
||||
req.add_header("referer", "https://www.microsoft.com/")
|
||||
req.add_header("user-agent", UA)
|
||||
|
||||
ctx_ssl = ssl.create_default_context()
|
||||
with urlrequest.urlopen(req, context=ctx_ssl, timeout=20) as resp:
|
||||
body = resp.read()[:2048]
|
||||
return resp.status, (200 <= resp.status < 300), body
|
||||
|
||||
# ========== 安全检查 / 回复封装 ==========
|
||||
async def _auth_guard(update: Update, context: ContextTypes.DEFAULT_TYPE):
|
||||
uid = str(update.effective_user.id)
|
||||
# [修改] 检查 ID 是否在列表中
|
||||
if uid not in ALLOWED_UIDS:
|
||||
await context.bot.send_message(
|
||||
chat_id=update.effective_chat.id,
|
||||
text=f"❌ Unauthorized (UID: {uid})", # 方便调试，显示未授权ID
|
||||
disable_notification=False,
|
||||
)
|
||||
return False
|
||||
return True
|
||||
|
||||
async def _reply(update: Update, context: ContextTypes.DEFAULT_TYPE, text: str):
|
||||
# 统一把 disable_notification=False 打开，保证有推送提醒
|
||||
await context.bot.send_message(
|
||||
chat_id=update.effective_chat.id,
|
||||
text=text,
|
||||
disable_notification=False,
|
||||
)
|
||||
|
||||
# ========== 命令实现 ==========
|
||||
async def cmd_start(update: Update, context: ContextTypes.DEFAULT_TYPE):
|
||||
if not await _auth_guard(update, context):
|
||||
return
|
||||
await _reply(
|
||||
update,
|
||||
context,
|
||||
"👋 你好！我是 Xbox 助手。\n可以使用 /help 查看帮助",
|
||||
)
|
||||
|
||||
async def cmd_help(update: Update, context: ContextTypes.DEFAULT_TYPE):
|
||||
if not await _auth_guard(update, context):
|
||||
return
|
||||
help_text = (
|
||||
"可用指令：\n"
|
||||
"/check - 查看当前关键参数(cartId等)和XboxProductList摘要\n"
|
||||
"/viewproducts - 查看已捕捉到的全部三元组(ProductId, SkuId, AvailabilityId)\n"
|
||||
"/clearproducts - 清空捕捉到的产品列表\n"
|
||||
"/addtocart - 尝试把所有已捕捉的产品逐个加进购物车\n"
|
||||
"/help - 再次查看本帮助\n"
|
||||
)
|
||||
await _reply(update, context, help_text)
|
||||
|
||||
async def cmd_check(update: Update, context: ContextTypes.DEFAULT_TYPE):
|
||||
if not await _auth_guard(update, context):
|
||||
return
|
||||
st = _load_state()
|
||||
|
||||
cart_id = st.get("cartId","")
|
||||
auth = st.get("authorization","")
|
||||
muid = st.get("fiddler.custom.cart-x-authorization-muid","")
|
||||
ms_cv = st.get("fiddler.custom.cart-ms-cv","")
|
||||
xvec = st.get("fiddler.custom.cart-x-ms-vector-id","")
|
||||
plist_str = st.get("XboxProductList","")
|
||||
products = _get_products(st)
|
||||
countp = len(products)
|
||||
|
||||
text = (
|
||||
"📦 /check\n"
|
||||
f"cartId: {cart_id or '(none)'}\n"
|
||||
f"authorization(len): {len(auth) if auth else 0}\n"
|
||||
f"x-authorization-muid: {muid or '(none)'}\n"
|
||||
f"ms-cv: {ms_cv or '(none)'}\n"
|
||||
f"x-ms-vector-id: {xvec or '(none)'}\n"
|
||||
f"XboxProductList: {plist_str or '(empty)'}\n"
|
||||
f"products_count: {countp}\n"
|
||||
)
|
||||
await _reply(update, context, text)
|
||||
|
||||
async def cmd_viewproducts(update: Update, context: ContextTypes.DEFAULT_TYPE):
|
||||
if not await _auth_guard(update, context):
|
||||
return
|
||||
products = _get_products()
|
||||
if not products:
|
||||
await _reply(update, context, "📄 /viewproducts\n当前产品列表为空")
|
||||
return
|
||||
|
||||
lines = ["📄 /viewproducts"]
|
||||
for idx, it in enumerate(products, 1):
|
||||
lines.append(
|
||||
f"{idx}. {it['ProductId']} | {it['SkuId']} | {it['AvailabilityId']}"
|
||||
)
|
||||
await _reply(update, context, "\n".join(lines))
|
||||
|
||||
async def cmd_clearproducts(update: Update, context: ContextTypes.DEFAULT_TYPE):
|
||||
if not await _auth_guard(update, context):
|
||||
return
|
||||
_save_products_no_notify([]) # 清空并写回
|
||||
await _reply(update, context, "🗑 已清空产品列表")
|
||||
|
||||
async def cmd_addtocart(update: Update, context: ContextTypes.DEFAULT_TYPE):
|
||||
if not await _auth_guard(update, context):
|
||||
return
|
||||
|
||||
st = _load_state()
|
||||
products = _get_products(st)
|
||||
if not products:
|
||||
await _reply(update, context, "🛒 /addtocart\n没有待加入的产品")
|
||||
return
|
||||
|
||||
muid = st.get("fiddler.custom.cart-x-authorization-muid","")
|
||||
ms_cv = st.get("fiddler.custom.cart-ms-cv","")
|
||||
x_vec = st.get("fiddler.custom.cart-x-ms-vector-id","")
|
||||
|
||||
if (not muid) or (not ms_cv):
|
||||
await _reply(update, context,
|
||||
"🛒 /addtocart\n缺少 cart-x-authorization-muid 或 cart-ms-cv，无法继续")
|
||||
return
|
||||
|
||||
successes = []
|
||||
failures = []
|
||||
remain = list(products)
|
||||
|
||||
for item in products:
|
||||
pid = item["ProductId"]
|
||||
sid = item["SkuId"]
|
||||
aid = item["AvailabilityId"]
|
||||
triple_label = f"{pid}/{sid}/{aid}"
|
||||
try:
|
||||
code, ok, _ = _cart_put_single(muid, ms_cv, pid, sid, aid, x_vec)
|
||||
except Exception as ex:
|
||||
code = 0
|
||||
ok = False
|
||||
|
||||
if ok:
|
||||
successes.append(f"{triple_label} -> {code}")
|
||||
# 从 remain 里删掉成功的
|
||||
remain = [
|
||||
r for r in remain
|
||||
if not (r["ProductId"] == pid and r["SkuId"] == sid and r["AvailabilityId"] == aid)
|
||||
]
|
||||
else:
|
||||
failures.append(f"{triple_label} -> {code or 'ERR'}")
|
||||
|
||||
time.sleep(0.15)
|
||||
|
||||
# 更新 state.json 里的 products / XboxProductList (不推送通知，只本地改)
|
||||
_save_products_no_notify(remain)
|
||||
|
||||
summary = (
|
||||
"🛒 /addtocart 完成\n"
|
||||
f"尝试: {len(products)}\n"
|
||||
f"成功: {len(successes)}\n"
|
||||
f"失败: {len(failures)}\n\n"
|
||||
)
|
||||
if successes:
|
||||
summary += "✅ 成功:\n" + "\n".join(successes[:20]) + ("\n..." if len(successes) > 20 else "") + "\n"
|
||||
if failures:
|
||||
summary += "❌ 失败:\n" + "\n".join(failures[:20]) + ("\n..." if len(failures) > 20 else "") + "\n"
|
||||
summary += f"\n剩余待加入: {len(remain)}"
|
||||
|
||||
await _reply(update, context, summary)
|
||||
|
||||
# ========== 主入口 ==========
|
||||
def main():
|
||||
app = ApplicationBuilder().token(BOT_TOKEN).build()
|
||||
|
||||
app.add_handler(CommandHandler("start", cmd_start))
|
||||
app.add_handler(CommandHandler("help", cmd_help))
|
||||
app.add_handler(CommandHandler("check", cmd_check))
|
||||
app.add_handler(CommandHandler("viewproducts", cmd_viewproducts))
|
||||
app.add_handler(CommandHandler("clearproducts",cmd_clearproducts))
|
||||
app.add_handler(CommandHandler("addtocart", cmd_addtocart))
|
||||
|
||||
# 直接长轮询。通知静默控制在我们send_message里disable_notification=False
|
||||
app.run_polling(drop_pending_updates=True)
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
Reference in New Issue
Block a user