feat(auth): add CPA browser approval flow
This commit is contained in:
Aaron Liang
@@ -0,0 +1,922 @@
|
|||||||
|
"""Approve xAI device-code in Chromium (DrissionPage).
|
||||||
|
|
||||||
|
Paths resolve relative to the project root.
|
||||||
|
Token polling is the source of truth; browser automation is only used to
|
||||||
|
log in and approve the device authorization page.
|
||||||
|
"""
|
||||||
|
|
||||||
|
from __future__ import annotations
|
||||||
|
|
||||||
|
import os
|
||||||
|
import re
|
||||||
|
import sys
|
||||||
|
import threading
|
||||||
|
import time
|
||||||
|
from pathlib import Path
|
||||||
|
from typing import Any, Callable, Optional
|
||||||
|
from urllib.parse import urlparse
|
||||||
|
|
||||||
|
|
||||||
|
LogFn = Callable[[str], None]
|
||||||
|
|
||||||
|
|
||||||
|
def _noop_log(_: str) -> None:
|
||||||
|
return None
|
||||||
|
|
||||||
|
|
||||||
|
class BrowserConfirmError(RuntimeError):
|
||||||
|
pass
|
||||||
|
|
||||||
|
|
||||||
|
def _sleep(sec: float) -> None:
|
||||||
|
time.sleep(sec)
|
||||||
|
|
||||||
|
|
||||||
|
def _project_root() -> Path:
|
||||||
|
return Path(__file__).resolve().parents[1]
|
||||||
|
|
||||||
|
|
||||||
|
def _debug_shot_dir() -> Path:
|
||||||
|
folder = _project_root() / "screenshots"
|
||||||
|
folder.mkdir(parents=True, exist_ok=True)
|
||||||
|
return folder
|
||||||
|
|
||||||
|
|
||||||
|
def _safe_tag(value: str) -> str:
|
||||||
|
text = (value or "na").strip()
|
||||||
|
out = []
|
||||||
|
for char in text:
|
||||||
|
if char.isalnum() or char in ("@", ".", "-", "_"):
|
||||||
|
out.append(char)
|
||||||
|
else:
|
||||||
|
out.append("_")
|
||||||
|
return ("".join(out)[:80] or "na")
|
||||||
|
|
||||||
|
|
||||||
|
def _save_debug_shot(page: Any, tag: str, email: str = "", log: Optional[LogFn] = None) -> Optional[str]:
|
||||||
|
logger = log or _noop_log
|
||||||
|
try:
|
||||||
|
timestamp = time.strftime("%Y%m%d-%H%M%S")
|
||||||
|
name = "%s_%s_%s.png" % (timestamp, _safe_tag(email), _safe_tag(tag))
|
||||||
|
path = _debug_shot_dir() / name
|
||||||
|
saved = None
|
||||||
|
for kwargs in (
|
||||||
|
{"path": str(path), "full_page": True},
|
||||||
|
{"path": str(path)},
|
||||||
|
{"name": str(path)},
|
||||||
|
):
|
||||||
|
try:
|
||||||
|
if hasattr(page, "get_screenshot"):
|
||||||
|
page.get_screenshot(**kwargs)
|
||||||
|
saved = path
|
||||||
|
break
|
||||||
|
except TypeError:
|
||||||
|
continue
|
||||||
|
except Exception:
|
||||||
|
continue
|
||||||
|
if saved is None and hasattr(page, "get_screenshot"):
|
||||||
|
try:
|
||||||
|
page.get_screenshot(path=str(path))
|
||||||
|
saved = path
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
if saved is None:
|
||||||
|
logger("screenshot failed tag=%s" % tag)
|
||||||
|
return None
|
||||||
|
try:
|
||||||
|
meta = path.with_suffix(".txt")
|
||||||
|
meta.write_text(
|
||||||
|
"url=%s\nemail=%s\ntag=%s\nvisible=%s\n" % (_page_url(page), email, tag, _norm(_visible_text(page))[:800]),
|
||||||
|
encoding="utf-8",
|
||||||
|
)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
logger("debug shot saved: %s" % saved)
|
||||||
|
return str(saved)
|
||||||
|
except Exception as exc: # noqa: BLE001
|
||||||
|
logger("screenshot error: %s" % exc)
|
||||||
|
return None
|
||||||
|
|
||||||
|
|
||||||
|
def _is_turnstile_challenge(text: str) -> bool:
|
||||||
|
source = text or ""
|
||||||
|
lower = source.lower()
|
||||||
|
needles = (
|
||||||
|
"确认您是真人",
|
||||||
|
"确认你是真人",
|
||||||
|
"verify you are human",
|
||||||
|
"confirm you are human",
|
||||||
|
"just a moment",
|
||||||
|
"checking your browser",
|
||||||
|
"cf-turnstile",
|
||||||
|
"进行人机验证",
|
||||||
|
"人机验证",
|
||||||
|
)
|
||||||
|
return any(needle in source or needle in lower for needle in needles)
|
||||||
|
|
||||||
|
|
||||||
|
def create_standalone_page(proxy: Optional[str] = None, headless: bool = False, log: Optional[LogFn] = None):
|
||||||
|
logger = log or _noop_log
|
||||||
|
try:
|
||||||
|
from DrissionPage import Chromium, ChromiumOptions
|
||||||
|
except ImportError as exc:
|
||||||
|
raise BrowserConfirmError("DrissionPage not installed") from exc
|
||||||
|
|
||||||
|
options = None
|
||||||
|
package_root = Path(__file__).resolve().parents[1]
|
||||||
|
try:
|
||||||
|
register_file = package_root / "grok_register_ttk.py"
|
||||||
|
if register_file.is_file():
|
||||||
|
register_dir = str(package_root)
|
||||||
|
if register_dir not in sys.path:
|
||||||
|
sys.path.insert(0, register_dir)
|
||||||
|
try:
|
||||||
|
from grok_register_ttk import create_browser_options # type: ignore
|
||||||
|
|
||||||
|
options = create_browser_options()
|
||||||
|
logger("using register create_browser_options (turnstilePatch)")
|
||||||
|
except Exception as exc: # noqa: BLE001
|
||||||
|
logger("register browser options unavailable: %s" % exc)
|
||||||
|
options = None
|
||||||
|
except Exception as exc: # noqa: BLE001
|
||||||
|
logger("register options probe failed: %s" % exc)
|
||||||
|
options = None
|
||||||
|
|
||||||
|
if options is None:
|
||||||
|
options = ChromiumOptions()
|
||||||
|
options.auto_port()
|
||||||
|
options.set_timeouts(base=2)
|
||||||
|
for flag in (
|
||||||
|
"--disable-gpu",
|
||||||
|
"--no-sandbox",
|
||||||
|
"--disable-dev-shm-usage",
|
||||||
|
"--mute-audio",
|
||||||
|
"--no-first-run",
|
||||||
|
"--disable-background-networking",
|
||||||
|
"--window-size=1280,900",
|
||||||
|
):
|
||||||
|
options.set_argument(flag)
|
||||||
|
extension = str(package_root / "turnstilePatch")
|
||||||
|
if os.path.isdir(extension):
|
||||||
|
try:
|
||||||
|
options.add_extension(extension)
|
||||||
|
logger("added extension %s" % extension)
|
||||||
|
except Exception as exc: # noqa: BLE001
|
||||||
|
logger("extension add failed: %s" % exc)
|
||||||
|
|
||||||
|
if headless:
|
||||||
|
try:
|
||||||
|
options.headless(True)
|
||||||
|
except Exception:
|
||||||
|
options.set_argument("--headless=new")
|
||||||
|
logger("headless=True (may hit Cloudflare / break real clicks)")
|
||||||
|
else:
|
||||||
|
try:
|
||||||
|
options.headless(False)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
|
||||||
|
for candidate in (
|
||||||
|
"/usr/bin/chromium",
|
||||||
|
"/usr/bin/chromium-browser",
|
||||||
|
"/usr/bin/google-chrome",
|
||||||
|
"/usr/bin/google-chrome-stable",
|
||||||
|
):
|
||||||
|
if os.path.isfile(candidate):
|
||||||
|
try:
|
||||||
|
options.set_browser_path(candidate)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
break
|
||||||
|
|
||||||
|
from .proxyutil import proxy_for_chromium, proxy_log_label, resolve_proxy
|
||||||
|
|
||||||
|
resolved = resolve_proxy(proxy)
|
||||||
|
chrome_proxy = proxy_for_chromium(resolved)
|
||||||
|
if chrome_proxy:
|
||||||
|
options.set_argument("--proxy-server=%s" % chrome_proxy)
|
||||||
|
logger("browser proxy=%s (chromium %s)" % (proxy_log_label(resolved), chrome_proxy))
|
||||||
|
else:
|
||||||
|
logger("browser proxy=(none)")
|
||||||
|
|
||||||
|
browser = Chromium(options)
|
||||||
|
page = browser.latest_tab
|
||||||
|
logger("standalone chromium started")
|
||||||
|
return browser, page
|
||||||
|
|
||||||
|
|
||||||
|
def close_standalone(browser: Any) -> None:
|
||||||
|
try:
|
||||||
|
browser.quit()
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
|
||||||
|
|
||||||
|
_mint_tls = threading.local()
|
||||||
|
|
||||||
|
|
||||||
|
def _mint_tls_get():
|
||||||
|
state = getattr(_mint_tls, "state", None)
|
||||||
|
if state is None:
|
||||||
|
state = {"browser": None, "page": None, "served": 0, "proxy": None, "headless": None}
|
||||||
|
_mint_tls.state = state
|
||||||
|
return state
|
||||||
|
|
||||||
|
|
||||||
|
def clear_page_session(page: Any, browser: Optional[Any] = None, log: Optional[LogFn] = None) -> None:
|
||||||
|
logger = log or _noop_log
|
||||||
|
try:
|
||||||
|
if page is not None:
|
||||||
|
try:
|
||||||
|
page.get("about:blank")
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
for javascript in (
|
||||||
|
"try{localStorage.clear()}catch(e){}",
|
||||||
|
"try{sessionStorage.clear()}catch(e){}",
|
||||||
|
):
|
||||||
|
try:
|
||||||
|
page.run_js(javascript)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
for target in (page, browser):
|
||||||
|
if target is None:
|
||||||
|
continue
|
||||||
|
try:
|
||||||
|
target.set.cookies.clear() # type: ignore[attr-defined]
|
||||||
|
logger("mint session cookies cleared")
|
||||||
|
break
|
||||||
|
except Exception:
|
||||||
|
try:
|
||||||
|
cookies = target.cookies()
|
||||||
|
if isinstance(cookies, list):
|
||||||
|
for cookie in cookies:
|
||||||
|
try:
|
||||||
|
target.set.cookies.remove(cookie) # type: ignore[attr-defined]
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
except Exception as exc:
|
||||||
|
logger("clear_page_session: %s" % exc)
|
||||||
|
|
||||||
|
|
||||||
|
def normalize_cookies(cookies: Any):
|
||||||
|
output = []
|
||||||
|
if not cookies:
|
||||||
|
return output
|
||||||
|
if isinstance(cookies, dict):
|
||||||
|
for name, value in cookies.items():
|
||||||
|
if name and value is not None:
|
||||||
|
output.append({"name": str(name), "value": str(value), "domain": ".x.ai", "path": "/"})
|
||||||
|
cookies = output
|
||||||
|
output = []
|
||||||
|
if not isinstance(cookies, (list, tuple)):
|
||||||
|
return output
|
||||||
|
for cookie in cookies:
|
||||||
|
if not isinstance(cookie, dict):
|
||||||
|
continue
|
||||||
|
name = cookie.get("name") or cookie.get("Name")
|
||||||
|
value = cookie.get("value") or cookie.get("Value")
|
||||||
|
if not name or value is None:
|
||||||
|
continue
|
||||||
|
domain = str(cookie.get("domain") or cookie.get("Domain") or ".x.ai")
|
||||||
|
path = str(cookie.get("path") or cookie.get("Path") or "/")
|
||||||
|
item = {"name": str(name), "value": str(value), "domain": domain, "path": path}
|
||||||
|
for source, target in (
|
||||||
|
("expiry", "expiry"),
|
||||||
|
("expires", "expiry"),
|
||||||
|
("secure", "secure"),
|
||||||
|
("httpOnly", "httpOnly"),
|
||||||
|
("sameSite", "sameSite"),
|
||||||
|
):
|
||||||
|
if source in cookie and cookie[source] is not None:
|
||||||
|
item[target] = cookie[source]
|
||||||
|
output.append(item)
|
||||||
|
sso_names = {"sso", "sso-rw", "cf_clearance", "sso_jwt", "__cf_bm"}
|
||||||
|
extras = []
|
||||||
|
seen = {(item["name"], item["domain"], item["path"]) for item in output}
|
||||||
|
for item in list(output):
|
||||||
|
name = item["name"]
|
||||||
|
if name not in sso_names and not name.startswith("sso"):
|
||||||
|
continue
|
||||||
|
for domain in (".x.ai", "accounts.x.ai", ".accounts.x.ai", "auth.x.ai", ".auth.x.ai"):
|
||||||
|
key = (name, domain, item["path"])
|
||||||
|
if key in seen:
|
||||||
|
continue
|
||||||
|
clone = dict(item)
|
||||||
|
clone["domain"] = domain
|
||||||
|
extras.append(clone)
|
||||||
|
seen.add(key)
|
||||||
|
output.extend(extras)
|
||||||
|
return output
|
||||||
|
|
||||||
|
|
||||||
|
def inject_cookies(page: Any, cookies: Any, log: Optional[LogFn] = None) -> int:
|
||||||
|
logger = log or _noop_log
|
||||||
|
items = normalize_cookies(cookies)
|
||||||
|
if not items or page is None:
|
||||||
|
return 0
|
||||||
|
for url in ("https://accounts.x.ai/", "https://auth.x.ai/", "https://grok.com/"):
|
||||||
|
try:
|
||||||
|
page.get(url)
|
||||||
|
_sleep(0.4)
|
||||||
|
except Exception:
|
||||||
|
continue
|
||||||
|
count = 0
|
||||||
|
for target_name, target in (("page", page), ("browser", getattr(page, "browser", None))):
|
||||||
|
if target is None:
|
||||||
|
continue
|
||||||
|
try:
|
||||||
|
target.set.cookies(items) # type: ignore[attr-defined]
|
||||||
|
count = len(items)
|
||||||
|
logger("injected cookies bulk via %s=%s" % (target_name, count))
|
||||||
|
break
|
||||||
|
except Exception as exc:
|
||||||
|
logger("bulk set via %s failed: %s" % (target_name, exc))
|
||||||
|
if count == 0:
|
||||||
|
for item in items:
|
||||||
|
ok = False
|
||||||
|
for target in (page, getattr(page, "browser", None)):
|
||||||
|
if target is None:
|
||||||
|
continue
|
||||||
|
try:
|
||||||
|
target.set.cookies(item) # type: ignore[attr-defined]
|
||||||
|
ok = True
|
||||||
|
break
|
||||||
|
except Exception:
|
||||||
|
continue
|
||||||
|
if ok:
|
||||||
|
count += 1
|
||||||
|
logger("injected cookies one-by-one=%s/%s" % (count, len(items)))
|
||||||
|
try:
|
||||||
|
javascript_items = [
|
||||||
|
cookie
|
||||||
|
for cookie in items
|
||||||
|
if not bool(cookie.get("httpOnly")) and str(cookie.get("name") or "").startswith("sso")
|
||||||
|
]
|
||||||
|
if javascript_items:
|
||||||
|
page.run_js(
|
||||||
|
"""
|
||||||
|
const items = arguments[0] || [];
|
||||||
|
for (const c of items) {
|
||||||
|
let cookie = `${c.name}=${c.value}; path=${c.path || '/'}; domain=${c.domain || '.x.ai'}`;
|
||||||
|
if (c.secure !== false) cookie += '; Secure';
|
||||||
|
document.cookie = cookie;
|
||||||
|
}
|
||||||
|
return document.cookie;
|
||||||
|
""",
|
||||||
|
javascript_items,
|
||||||
|
)
|
||||||
|
logger("injected non-httpOnly sso cookies via document.cookie")
|
||||||
|
except Exception as exc:
|
||||||
|
logger("document.cookie injection failed: %s" % exc)
|
||||||
|
return count
|
||||||
|
|
||||||
|
|
||||||
|
def acquire_mint_browser(proxy: Optional[str] = None, headless: bool = False, reuse: bool = True, recycle_every: int = 15, log: Optional[LogFn] = None):
|
||||||
|
logger = log or _noop_log
|
||||||
|
state = _mint_tls_get()
|
||||||
|
if not reuse:
|
||||||
|
browser, page = create_standalone_page(proxy=proxy, headless=headless, log=logger)
|
||||||
|
return browser, page, True
|
||||||
|
proxy_key = str(proxy or "")
|
||||||
|
if state["browser"] is None:
|
||||||
|
browser, page = create_standalone_page(proxy=proxy, headless=headless, log=logger)
|
||||||
|
state.update({"browser": browser, "page": page, "served": 0, "proxy": proxy_key, "headless": bool(headless)})
|
||||||
|
return browser, page, False
|
||||||
|
if state["proxy"] != proxy_key or bool(state["headless"]) != bool(headless):
|
||||||
|
try:
|
||||||
|
close_standalone(state["browser"])
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
browser, page = create_standalone_page(proxy=proxy, headless=headless, log=logger)
|
||||||
|
state.update({"browser": browser, "page": page, "served": 0, "proxy": proxy_key, "headless": bool(headless)})
|
||||||
|
return browser, page, False
|
||||||
|
if recycle_every and state["served"] and state["served"] % max(int(recycle_every), 1) == 0:
|
||||||
|
try:
|
||||||
|
close_standalone(state["browser"])
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
browser, page = create_standalone_page(proxy=proxy, headless=headless, log=logger)
|
||||||
|
state.update({"browser": browser, "page": page, "served": 0, "proxy": proxy_key, "headless": bool(headless)})
|
||||||
|
return browser, page, False
|
||||||
|
clear_page_session(state["page"], browser=state["browser"], log=logger)
|
||||||
|
return state["browser"], state["page"], False
|
||||||
|
|
||||||
|
|
||||||
|
def release_mint_browser(owned: bool, success: bool, log: Optional[LogFn] = None) -> None:
|
||||||
|
logger = log or _noop_log
|
||||||
|
if owned:
|
||||||
|
return
|
||||||
|
state = _mint_tls_get()
|
||||||
|
if success:
|
||||||
|
state["served"] = int(state.get("served", 0) or 0) + 1
|
||||||
|
logger("mint browser served=%s" % state["served"])
|
||||||
|
|
||||||
|
|
||||||
|
def shutdown_mint_browsers() -> None:
|
||||||
|
state = _mint_tls_get()
|
||||||
|
browser = state.get("browser")
|
||||||
|
if browser is not None:
|
||||||
|
try:
|
||||||
|
close_standalone(browser)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
state.update({"browser": None, "page": None, "served": 0, "proxy": None, "headless": None})
|
||||||
|
|
||||||
|
|
||||||
|
def _page_url(page: Any) -> str:
|
||||||
|
try:
|
||||||
|
return str(getattr(page, "url", "") or "")
|
||||||
|
except Exception:
|
||||||
|
return ""
|
||||||
|
|
||||||
|
|
||||||
|
def _visible_text(page: Any) -> str:
|
||||||
|
try:
|
||||||
|
return str(page.run_js("return (document.body && (document.body.innerText || document.body.textContent)) || '';"))
|
||||||
|
except Exception:
|
||||||
|
return ""
|
||||||
|
|
||||||
|
|
||||||
|
def _norm(text: str) -> str:
|
||||||
|
return re.sub(r"\s+", " ", str(text or "")).strip()
|
||||||
|
|
||||||
|
|
||||||
|
def _find_button_exact(page: Any, label: str) -> Optional[Any]:
|
||||||
|
try:
|
||||||
|
return page.ele(
|
||||||
|
"xpath://button[normalize-space()='%s'] | //*[@role='button' and normalize-space()='%s'] | //a[normalize-space()='%s'] | //input[@type='submit' and @value='%s']"
|
||||||
|
% (label, label, label, label),
|
||||||
|
timeout=0.4,
|
||||||
|
)
|
||||||
|
except Exception:
|
||||||
|
return None
|
||||||
|
|
||||||
|
|
||||||
|
def _cookie_banner_visible(text: str) -> bool:
|
||||||
|
source = text or ""
|
||||||
|
lower = source.lower()
|
||||||
|
return any(
|
||||||
|
needle in source or needle in lower
|
||||||
|
for needle in ("全部允许", "隐私偏好", "cookie", "privacy preference", "allow all")
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
def _dismiss_cookie_banner(page: Any, log: LogFn) -> bool:
|
||||||
|
for label in ("全部允许", "Allow all", "接受", "Accept"):
|
||||||
|
if _click_exact(page, [label], log, real=True):
|
||||||
|
log("cookie banner dismissed: %s" % label)
|
||||||
|
return True
|
||||||
|
return False
|
||||||
|
|
||||||
|
|
||||||
|
def _click_exact(page: Any, labels, log: LogFn, real: bool = False) -> Optional[str]:
|
||||||
|
for label in labels:
|
||||||
|
target = _find_button_exact(page, label)
|
||||||
|
if not target:
|
||||||
|
continue
|
||||||
|
try:
|
||||||
|
if real:
|
||||||
|
target.click()
|
||||||
|
else:
|
||||||
|
try:
|
||||||
|
target.click(by_js=True)
|
||||||
|
except Exception:
|
||||||
|
target.click()
|
||||||
|
log("clicked exact button: %s" % label)
|
||||||
|
return label
|
||||||
|
except Exception as exc:
|
||||||
|
log("button click failed %s: %s" % (label, exc))
|
||||||
|
return None
|
||||||
|
|
||||||
|
|
||||||
|
def _wait_turnstile(page: Any, log: LogFn, timeout_sec: float, email: str = "", raise_on_timeout: bool = False) -> bool:
|
||||||
|
deadline = time.time() + float(timeout_sec)
|
||||||
|
while time.time() < deadline:
|
||||||
|
text = _visible_text(page)
|
||||||
|
if not _is_turnstile_challenge(text):
|
||||||
|
try:
|
||||||
|
token_length = page.run_js(
|
||||||
|
"""
|
||||||
|
const input = document.querySelector('input[name="cf-turnstile-response"]');
|
||||||
|
return String((input && input.value) || '').trim().length;
|
||||||
|
"""
|
||||||
|
)
|
||||||
|
if int(token_length or 0) >= 80:
|
||||||
|
return True
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
if not _is_turnstile_challenge(_visible_text(page)):
|
||||||
|
return True
|
||||||
|
_sleep(1.0)
|
||||||
|
if raise_on_timeout:
|
||||||
|
shot = _save_debug_shot(page, tag="turnstile-timeout", email=email, log=log)
|
||||||
|
message = "turnstile timeout"
|
||||||
|
if shot:
|
||||||
|
message = "%s shot=%s" % (message, shot)
|
||||||
|
raise BrowserConfirmError(message)
|
||||||
|
return False
|
||||||
|
|
||||||
|
|
||||||
|
def _fill(page: Any, selector: str, value: str, log: LogFn, label: str = "") -> bool:
|
||||||
|
try:
|
||||||
|
target = page.ele(selector, timeout=0.8)
|
||||||
|
except Exception:
|
||||||
|
target = None
|
||||||
|
if not target:
|
||||||
|
return False
|
||||||
|
try:
|
||||||
|
target.clear()
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
try:
|
||||||
|
target.input(value)
|
||||||
|
except Exception:
|
||||||
|
try:
|
||||||
|
target.click()
|
||||||
|
page.run_js(
|
||||||
|
"""
|
||||||
|
const selector = arguments[0];
|
||||||
|
const value = arguments[1];
|
||||||
|
const node = document.querySelector(selector);
|
||||||
|
if (!node) return false;
|
||||||
|
const setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, 'value')?.set;
|
||||||
|
if (setter) setter.call(node, value);
|
||||||
|
else node.value = value;
|
||||||
|
node.dispatchEvent(new Event('input', { bubbles: true }));
|
||||||
|
node.dispatchEvent(new Event('change', { bubbles: true }));
|
||||||
|
return true;
|
||||||
|
""",
|
||||||
|
selector,
|
||||||
|
value,
|
||||||
|
)
|
||||||
|
except Exception:
|
||||||
|
return False
|
||||||
|
if label:
|
||||||
|
log("filled %s" % label)
|
||||||
|
return True
|
||||||
|
|
||||||
|
|
||||||
|
def _fill_input(page: Any, selector: str, value: str, label: str, log: LogFn) -> bool:
|
||||||
|
return _fill(page, selector, value, log, label)
|
||||||
|
|
||||||
|
|
||||||
|
def _detect_auth_error(text: str, url: str = "") -> Optional[str]:
|
||||||
|
source = text or ""
|
||||||
|
lower = source.lower()
|
||||||
|
resolved_url = (url or "").lower()
|
||||||
|
needles = [
|
||||||
|
("wrong password", "wrong password"),
|
||||||
|
("invalid password", "wrong password"),
|
||||||
|
("incorrect password", "wrong password"),
|
||||||
|
("密码错误", "wrong password"),
|
||||||
|
("wrong email", "wrong email"),
|
||||||
|
("invalid email", "wrong email"),
|
||||||
|
("attention required", "cloudflare challenge/block"),
|
||||||
|
("access denied", "cloudflare blocked / access denied"),
|
||||||
|
("unable to access", "cloudflare blocked / unable to access"),
|
||||||
|
("rate limited", "cloudflare rate limited"),
|
||||||
|
("try again later", "cloudflare rate limited"),
|
||||||
|
]
|
||||||
|
for needle, message in needles:
|
||||||
|
if needle in lower or needle in source:
|
||||||
|
return message
|
||||||
|
if "auth.grok.com/set-cookie" in resolved_url and (
|
||||||
|
"blocked" in lower or "unable to access" in lower or "cloudflare" in lower
|
||||||
|
):
|
||||||
|
return "cloudflare blocked on set-cookie"
|
||||||
|
return None
|
||||||
|
|
||||||
|
|
||||||
|
def approve_device_code(
|
||||||
|
page: Any,
|
||||||
|
verification_uri_complete: str,
|
||||||
|
email: str,
|
||||||
|
password: str,
|
||||||
|
user_code: str = "",
|
||||||
|
timeout_sec: float = 240.0,
|
||||||
|
stop_event: Optional[threading.Event] = None,
|
||||||
|
log: Optional[LogFn] = None,
|
||||||
|
) -> None:
|
||||||
|
logger = log or _noop_log
|
||||||
|
if page is None:
|
||||||
|
raise BrowserConfirmError("page is None")
|
||||||
|
email = (email or "").strip()
|
||||||
|
password = password or ""
|
||||||
|
if not email or not password:
|
||||||
|
raise BrowserConfirmError("email/password required")
|
||||||
|
if not user_code and "user_code=" in (verification_uri_complete or ""):
|
||||||
|
try:
|
||||||
|
user_code = verification_uri_complete.split("user_code=", 1)[1].split("&", 1)[0]
|
||||||
|
except Exception:
|
||||||
|
user_code = ""
|
||||||
|
logger("open device url: %s" % verification_uri_complete)
|
||||||
|
try:
|
||||||
|
page.get(verification_uri_complete, timeout=60)
|
||||||
|
except TypeError:
|
||||||
|
page.get(verification_uri_complete)
|
||||||
|
_sleep(2.0)
|
||||||
|
|
||||||
|
deadline = time.time() + float(timeout_sec)
|
||||||
|
phase = "device"
|
||||||
|
login_attempts = 0
|
||||||
|
last_url = ""
|
||||||
|
|
||||||
|
while time.time() < deadline:
|
||||||
|
if stop_event is not None and stop_event.is_set():
|
||||||
|
logger("stop_event set — leave browser loop")
|
||||||
|
return
|
||||||
|
url = _page_url(page)
|
||||||
|
text = _visible_text(page)
|
||||||
|
if url != last_url:
|
||||||
|
logger("url: %s" % url[:180])
|
||||||
|
last_url = url
|
||||||
|
snippet = _norm(text)[:160]
|
||||||
|
if snippet:
|
||||||
|
logger("visible: %s" % snippet)
|
||||||
|
auth_error = _detect_auth_error(text, url)
|
||||||
|
if auth_error:
|
||||||
|
shot = None
|
||||||
|
if "block" in auth_error or "cloudflare" in auth_error or "access denied" in auth_error:
|
||||||
|
shot = _save_debug_shot(page, tag="cf-block", email=email, log=logger)
|
||||||
|
message = auth_error
|
||||||
|
if shot:
|
||||||
|
message = "%s shot=%s" % (auth_error, shot)
|
||||||
|
raise BrowserConfirmError("auth failed: %s" % message)
|
||||||
|
if "device/done" in url or "设备已授权" in text or "device authorized" in text.lower():
|
||||||
|
logger("device done page — waiting for token poll")
|
||||||
|
_sleep(1.5)
|
||||||
|
continue
|
||||||
|
if "Invalid action" in text:
|
||||||
|
page.get(verification_uri_complete)
|
||||||
|
_sleep(2.0)
|
||||||
|
phase = "device"
|
||||||
|
continue
|
||||||
|
if _cookie_banner_visible(text):
|
||||||
|
if _dismiss_cookie_banner(page, logger):
|
||||||
|
_sleep(0.6)
|
||||||
|
continue
|
||||||
|
if "/consent" in url or "授权 Grok Build" in text or "Authorize Grok Build" in text:
|
||||||
|
phase = "consent"
|
||||||
|
if _cookie_banner_visible(_visible_text(page)):
|
||||||
|
_dismiss_cookie_banner(page, logger)
|
||||||
|
_sleep(0.6)
|
||||||
|
continue
|
||||||
|
if _click_exact(page, ["允许", "Allow", "Authorize", "Approve"], logger, real=True):
|
||||||
|
_sleep(2.5)
|
||||||
|
continue
|
||||||
|
try:
|
||||||
|
page.run_js(
|
||||||
|
"""
|
||||||
|
const forms = Array.from(document.querySelectorAll('form'));
|
||||||
|
const form = forms.find((x) => {
|
||||||
|
const text = (x.innerText || '');
|
||||||
|
return text.includes('Grok Build') || text.includes('允许') || text.includes('Allow');
|
||||||
|
}) || document.querySelector('form');
|
||||||
|
if (!form) return;
|
||||||
|
const formText = (form.innerText || '');
|
||||||
|
if (formText.includes('隐私偏好') || formText.includes('全部允许') || /cookie/i.test(formText)) return;
|
||||||
|
let actionInput = form.querySelector('input[name=action]');
|
||||||
|
if (!actionInput) {
|
||||||
|
actionInput = document.createElement('input');
|
||||||
|
actionInput.type = 'hidden';
|
||||||
|
actionInput.name = 'action';
|
||||||
|
form.appendChild(actionInput);
|
||||||
|
}
|
||||||
|
actionInput.value = 'allow';
|
||||||
|
const button = [...form.querySelectorAll('button')].find((b) => {
|
||||||
|
const text = (b.innerText || '').trim();
|
||||||
|
return text === '允许' || text === 'Allow' || text === 'Authorize' || text === 'Approve';
|
||||||
|
});
|
||||||
|
if (button) button.click();
|
||||||
|
else form.submit();
|
||||||
|
"""
|
||||||
|
)
|
||||||
|
_sleep(2.5)
|
||||||
|
except Exception as exc:
|
||||||
|
logger("consent fallback failed: %s" % exc)
|
||||||
|
continue
|
||||||
|
if page.ele("css:input[name='user_code']", timeout=0.3) and "consent" not in url:
|
||||||
|
phase = "device"
|
||||||
|
if user_code:
|
||||||
|
try:
|
||||||
|
user_code_input = page.ele("css:input[name='user_code']")
|
||||||
|
current = (user_code_input.value or "") if user_code_input else ""
|
||||||
|
if user_code.replace("-", "") not in current.replace("-", ""):
|
||||||
|
user_code_input.clear()
|
||||||
|
user_code_input.input(user_code)
|
||||||
|
logger("filled user_code")
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
if _click_exact(page, ["继续", "Continue"], logger, real=False):
|
||||||
|
_sleep(2.0)
|
||||||
|
continue
|
||||||
|
try:
|
||||||
|
submit = page.ele("css:button[type='submit']", timeout=0.5)
|
||||||
|
if submit:
|
||||||
|
submit.click(by_js=True)
|
||||||
|
_sleep(2.0)
|
||||||
|
continue
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
if "正在重定向" in text or ("/account" in url and "sign-in" not in url):
|
||||||
|
if _click_exact(page, ["继续", "Continue"], logger, real=False):
|
||||||
|
_sleep(2.0)
|
||||||
|
continue
|
||||||
|
if _cookie_banner_visible(text):
|
||||||
|
_dismiss_cookie_banner(page, logger)
|
||||||
|
_sleep(0.4)
|
||||||
|
if "使用邮箱登录" in text or "Continue with email" in text:
|
||||||
|
if _click_exact(page, ["使用邮箱登录", "Continue with email", "Sign in with email"], logger, real=False):
|
||||||
|
_sleep(1.5)
|
||||||
|
phase = "email"
|
||||||
|
continue
|
||||||
|
if page.ele("css:input[type='email']", timeout=0.3) and not page.ele("css:input[type='password']", timeout=0.2):
|
||||||
|
phase = "email"
|
||||||
|
_fill(page, "css:input[type='email']", email, logger, "email")
|
||||||
|
if _click_exact(page, ["下一步", "Next", "Continue", "继续"], logger, real=False):
|
||||||
|
_sleep(1.8)
|
||||||
|
continue
|
||||||
|
if page.ele("css:input[type='password']", timeout=0.3):
|
||||||
|
phase = "password"
|
||||||
|
if login_attempts >= 3:
|
||||||
|
auth_error = _detect_auth_error(text, url) or "login failed after retries (still on password page)"
|
||||||
|
raise BrowserConfirmError("auth failed: %s" % auth_error)
|
||||||
|
login_attempts += 1
|
||||||
|
_fill(page, "css:input[type='email']", email, logger, "email")
|
||||||
|
_wait_turnstile(page, logger, 25, email=email, raise_on_timeout=True)
|
||||||
|
_fill(page, "css:input[type='password']", password, logger, "password")
|
||||||
|
_wait_turnstile(page, logger, 12, email=email, raise_on_timeout=False)
|
||||||
|
if not _click_exact(page, ["登录", "Sign in", "Log in"], logger, real=True):
|
||||||
|
try:
|
||||||
|
submit = page.ele("css:button[type='submit']", timeout=0.5) or page.ele("css:button[data-testid='sign-in-submit']", timeout=0.5)
|
||||||
|
if submit:
|
||||||
|
submit.click()
|
||||||
|
except Exception as exc:
|
||||||
|
logger("login submit fail: %s" % exc)
|
||||||
|
for _ in range(20):
|
||||||
|
if stop_event is not None and stop_event.is_set():
|
||||||
|
return
|
||||||
|
_sleep(0.5)
|
||||||
|
post = _visible_text(page)
|
||||||
|
auth_error = _detect_auth_error(post, _page_url(page))
|
||||||
|
if auth_error:
|
||||||
|
raise BrowserConfirmError("auth failed: %s" % auth_error)
|
||||||
|
if not page.ele("css:input[type='password']", timeout=0.2):
|
||||||
|
break
|
||||||
|
if "sign-in" not in _page_url(page):
|
||||||
|
break
|
||||||
|
post = _visible_text(page)
|
||||||
|
auth_error = _detect_auth_error(post, _page_url(page))
|
||||||
|
if auth_error:
|
||||||
|
raise BrowserConfirmError("auth failed: %s" % auth_error)
|
||||||
|
if page.ele("css:input[type='password']", timeout=0.2) and (_is_turnstile_challenge(post) or login_attempts >= 2):
|
||||||
|
shot = _save_debug_shot(page, tag="login-stuck-turnstile", email=email, log=logger)
|
||||||
|
message = "turnstile/login stuck after submit"
|
||||||
|
if shot:
|
||||||
|
message = "%s shot=%s" % (message, shot)
|
||||||
|
raise BrowserConfirmError("auth failed: %s" % message)
|
||||||
|
continue
|
||||||
|
_sleep(1.0)
|
||||||
|
|
||||||
|
if stop_event is not None and stop_event.is_set():
|
||||||
|
return
|
||||||
|
shot = _save_debug_shot(page, tag="timeout-phase-%s" % phase, email=email, log=logger)
|
||||||
|
message = "browser confirm timeout phase=%s login_attempts=%s" % (phase, login_attempts)
|
||||||
|
if shot:
|
||||||
|
message = "%s shot=%s" % (message, shot)
|
||||||
|
if phase in ("password", "email") or _is_turnstile_challenge(_visible_text(page)):
|
||||||
|
raise BrowserConfirmError("auth failed: %s" % message)
|
||||||
|
raise BrowserConfirmError(message)
|
||||||
|
|
||||||
|
|
||||||
|
def mint_with_browser(
|
||||||
|
email: str,
|
||||||
|
password: str,
|
||||||
|
page: Optional[Any] = None,
|
||||||
|
proxy: Optional[str] = None,
|
||||||
|
headless: bool = False,
|
||||||
|
browser_timeout_sec: float = 240.0,
|
||||||
|
poll_log: Optional[LogFn] = None,
|
||||||
|
cancel: Optional[Callable[[], bool]] = None,
|
||||||
|
force_standalone: bool = True,
|
||||||
|
cookies: Any = None,
|
||||||
|
reuse_browser: bool = True,
|
||||||
|
recycle_every: int = 15,
|
||||||
|
):
|
||||||
|
from .oauth_device import OAuthDeviceError, poll_device_token, request_device_code
|
||||||
|
from .proxyutil import proxy_log_label, resolve_proxy, set_runtime_proxy
|
||||||
|
|
||||||
|
logger = poll_log or _noop_log
|
||||||
|
own_browser = None
|
||||||
|
owned = False
|
||||||
|
work_page = None if force_standalone else page
|
||||||
|
resolved = resolve_proxy(proxy)
|
||||||
|
set_runtime_proxy(resolved or None)
|
||||||
|
success = False
|
||||||
|
try:
|
||||||
|
last_error = None
|
||||||
|
session = None
|
||||||
|
for attempt in range(1, 4):
|
||||||
|
try:
|
||||||
|
session = request_device_code(proxy=resolved or None)
|
||||||
|
last_error = None
|
||||||
|
break
|
||||||
|
except BaseException as exc:
|
||||||
|
last_error = exc
|
||||||
|
logger("request_device_code attempt %s/3 failed: %s" % (attempt, exc))
|
||||||
|
_sleep(1.5 * attempt)
|
||||||
|
if session is None:
|
||||||
|
raise last_error or RuntimeError("request_device_code failed")
|
||||||
|
logger("device user_code=%s expires_in=%s proxy=%s" % (session.user_code, session.expires_in, proxy_log_label(resolved) or "(none)"))
|
||||||
|
if work_page is None:
|
||||||
|
own_browser, work_page, owned = acquire_mint_browser(
|
||||||
|
proxy=resolved or None,
|
||||||
|
headless=headless,
|
||||||
|
reuse=reuse_browser,
|
||||||
|
recycle_every=recycle_every,
|
||||||
|
log=logger,
|
||||||
|
)
|
||||||
|
if cookies:
|
||||||
|
injected = inject_cookies(work_page, cookies, log=logger)
|
||||||
|
logger("cookie inject count=%s" % injected)
|
||||||
|
try:
|
||||||
|
work_page.get("https://accounts.x.ai/")
|
||||||
|
_sleep(1.0)
|
||||||
|
logger("post-inject session url=%s visible=%s" % (_page_url(work_page)[:120], _norm(_visible_text(work_page))[:120]))
|
||||||
|
except Exception as exc:
|
||||||
|
logger("post-inject check: %s" % exc)
|
||||||
|
stop_event = threading.Event()
|
||||||
|
token_box = {}
|
||||||
|
error_box = {}
|
||||||
|
|
||||||
|
def _poll() -> None:
|
||||||
|
try:
|
||||||
|
time.sleep(2)
|
||||||
|
result = poll_device_token(
|
||||||
|
session.device_code,
|
||||||
|
token_endpoint=session.token_endpoint,
|
||||||
|
interval=max(session.interval, 5),
|
||||||
|
expires_in=min(session.expires_in, int(browser_timeout_sec) + 60),
|
||||||
|
log=logger,
|
||||||
|
cancel=cancel,
|
||||||
|
proxy=resolved or None,
|
||||||
|
)
|
||||||
|
token_box["token"] = result
|
||||||
|
stop_event.set()
|
||||||
|
logger("token poll SUCCESS — stop_event set")
|
||||||
|
except BaseException as exc:
|
||||||
|
error_box["err"] = exc
|
||||||
|
stop_event.set()
|
||||||
|
|
||||||
|
thread = threading.Thread(target=_poll, name="oauth-poll", daemon=True)
|
||||||
|
thread.start()
|
||||||
|
try:
|
||||||
|
approve_device_code(
|
||||||
|
work_page,
|
||||||
|
verification_uri_complete=session.verification_uri_complete,
|
||||||
|
email=email,
|
||||||
|
password=password,
|
||||||
|
user_code=session.user_code,
|
||||||
|
timeout_sec=browser_timeout_sec,
|
||||||
|
stop_event=stop_event,
|
||||||
|
log=logger,
|
||||||
|
)
|
||||||
|
except BrowserConfirmError as exc:
|
||||||
|
lower = str(exc).lower()
|
||||||
|
hard = (
|
||||||
|
"auth failed" in lower
|
||||||
|
or "turnstile" in lower
|
||||||
|
or "cloudflare" in lower
|
||||||
|
or "blocked" in lower
|
||||||
|
or "access denied" in lower
|
||||||
|
or "password" in lower
|
||||||
|
or "browser confirm timeout" in lower
|
||||||
|
)
|
||||||
|
if hard:
|
||||||
|
stop_event.set()
|
||||||
|
raise
|
||||||
|
thread.join(timeout=max(browser_timeout_sec, 60) + 30)
|
||||||
|
if "token" in token_box:
|
||||||
|
token_result = token_box["token"]
|
||||||
|
success = True
|
||||||
|
return {
|
||||||
|
"access_token": token_result.access_token,
|
||||||
|
"refresh_token": token_result.refresh_token,
|
||||||
|
"id_token": token_result.id_token,
|
||||||
|
"token_type": token_result.token_type,
|
||||||
|
"expires_in": token_result.expires_in,
|
||||||
|
"user_code": session.user_code,
|
||||||
|
"token_endpoint": session.token_endpoint,
|
||||||
|
}
|
||||||
|
if "err" in error_box:
|
||||||
|
raise error_box["err"]
|
||||||
|
raise OAuthDeviceError("token poll thread ended without result")
|
||||||
|
finally:
|
||||||
|
if own_browser is not None:
|
||||||
|
if owned:
|
||||||
|
close_standalone(own_browser)
|
||||||
|
else:
|
||||||
|
release_mint_browser(owned=False, success=success, log=logger)
|
||||||
Reference in New Issue
Block a user