zijunchiang
87aa979abd
版本号：
- 1.5.11 越界（规则 3 规定 patch ≤ 10）→ 修正为 1.6.0（进位到 minor、patch 归 0）
- versionCode 43 不变：43 从未对外发布，本次修正只是把命名拉回约定
合并支线（原在工作区根目录、App 仓库之外，DESIGN.md 自称"支线"）：
- selfhost-source/server/ 自建歌曲源服务器（纯 Python 标准库、零 pip 依赖）
- selfhost-source/deploy/、DESIGN.md、LIBRARY.md、build_inventory.py
- selfhost-source/inventory/ 小清单（playlists.csv、song-stats.md 等）
- ⚠️ inventory 生成物（songs-*.csv / singers-top.csv，共 84MB）不入库，
已写入 .gitignore；需要时用 build_inventory.py 依据 muse.db 重新生成
同时入库的 App 侧支线改动（此前为工作树未提交状态）：
- Whoami.kt（whoami 设备心跳）、DeviceIdentity.kt（设备身份伪装）
- PushDownload.kt / PushDownloadClient.kt（点歌推送）
- AdVideoFilter 带 query/fragment 的地址闸门；KTV_BRIDGE_API 11 → 13
- 修 ktv_api.js 的 global.KtvBridgeApiVersion（12 → 13，与注释及 Kotlin 两处校验一致）
- 对应单测：WhoamiTest / DeviceIdentityTest / PushDownloadTest / AdVideoFilterTest（共 39 例）
文档：
- DESIGN.md 的"在 App 仓库之外"约定改为"已并入仓库统一版本化"
- AGENTS.md 版本号行更新为 1.6.0/43，并新增支线并入说明
验证：assembleRelease + testReleaseUnitTest 全过（39 例）
699 lines
36 KiB
Kotlin
699 lines
36 KiB
Kotlin
package com.local.ktv
|
||
|
||
import android.content.Context
|
||
import android.net.Uri
|
||
import android.net.http.SslError
|
||
import android.os.Handler
|
||
import android.os.Looper
|
||
import android.util.Base64
|
||
import android.util.Log
|
||
import android.webkit.JavascriptInterface
|
||
import android.webkit.SslErrorHandler
|
||
import android.webkit.WebView
|
||
import android.webkit.WebViewClient
|
||
import org.json.JSONObject
|
||
import java.io.BufferedInputStream
|
||
import java.io.ByteArrayOutputStream
|
||
import java.io.File
|
||
import java.io.InputStream
|
||
import java.net.HttpURLConnection
|
||
import java.net.Socket
|
||
import java.net.URL
|
||
import java.nio.charset.StandardCharsets
|
||
import java.util.Locale
|
||
import javax.net.ssl.SSLSocket
|
||
import javax.net.ssl.SSLSocketFactory
|
||
import java.security.KeyFactory
|
||
import java.security.spec.X509EncodedKeySpec
|
||
import java.util.UUID
|
||
import java.util.concurrent.ConcurrentHashMap
|
||
import javax.crypto.Cipher
|
||
|
||
/**
|
||
* 在隐藏 WebView 中运行可热更新的歌曲接口脚本。
|
||
*
|
||
* JS 决定接口地址、参数、签名和响应解析；Android 只提供 HTTP 与 RSA 这两个
|
||
* WebView 中不可靠的底层能力。这样接口变化时只需更新 Gitea 上的 ktv_api.js。
|
||
*/
|
||
class KtvJsBridge(context: Context) {
|
||
companion object {
|
||
private const val TAG = "KtvJsBridge"
|
||
private const val JS_FILE = "mobile/ktv_api.js"
|
||
private const val CACHE_FILE = "ktv_api_cache.js"
|
||
// 热更新脚本地址(Gitea 主仓库; raw 规范路径为 /raw/branch/<分支>/<文件>)
|
||
private const val REMOTE_JS_URL =
|
||
"https://gitea.kasugano.cn/zijunchiang/maidong-ktv/raw/branch/master/app/src/main/assets/mobile/ktv_api.js"
|
||
private const val MAX_RESPONSE_BYTES = 2 * 1024 * 1024
|
||
private const val JS_REQUEST_TIMEOUT_MS = 180_000
|
||
/** WebView 初始化看门狗：超过这个时间还没就绪就判定本机 WebView 不可用。 */
|
||
private const val BRIDGE_INIT_TIMEOUT_MS = 20_000L
|
||
// 歌曲源按 device(mac + sn) 识别；随机/变化的 device 会被判"异常行为"，因此这两个值
|
||
// 来自**生成一次、落盘后固定不变**的设备身份（DeviceIdentity：伪装成一台安卓盒子）。
|
||
// ⚠️ 以前 mac 取本机网卡硬件地址、sn 是抓包常量：真实机型/真实网卡一眼就不是盒子，
|
||
// 而且 Android 10+ 也拿不到真实 MAC。真实值只留在本地日志里（见 MainActivity）。
|
||
private val DEVICE_MAC: String get() = DeviceIdentity.effective().mac
|
||
internal val DEVICE_SN: String get() = DeviceIdentity.effective().sn
|
||
|
||
/**
|
||
* 断网重连后重置歌曲源会话。
|
||
*
|
||
* 源站按「出口 IP + device」识别，试用窗口也记在出口 IP 上（见 Eac19WindowGuard）。
|
||
* 断网/重连（尤其换了出口 IP）后旧 token 已失效，继续复用会表现为
|
||
* **「取址看起来成功、实际下载 403/失败」**。这里把整个 API 实例与初始化 Promise
|
||
* 都清掉：下一次取址会重新 new KtvApi（回到默认源顺序）并重新登录拿新 token。
|
||
*/
|
||
private const val RESET_SESSION_JS = """(function(){
|
||
try {
|
||
window.api = null;
|
||
window._apiInitPromise = null;
|
||
} catch (e) {}
|
||
return 'ok';
|
||
})()"""
|
||
}
|
||
|
||
private val appContext = context.applicationContext
|
||
private val mainHandler = Handler(Looper.getMainLooper())
|
||
private val callbacks = ConcurrentHashMap<String, (String?) -> Unit>()
|
||
|
||
@Volatile private var webView: WebView? = null
|
||
@Volatile private var ready = false
|
||
@Volatile private var destroyed = false
|
||
|
||
/**
|
||
* 已判定「本机 WebView 不可用」。
|
||
*
|
||
* 一旦置位，`SongApiClient` 就不再为取址白等 15 秒，直接走原生通道
|
||
* （极米 H1S 实测每次点歌都要等满 15 秒，日志里表现为每首歌前一条
|
||
* 「JS-BRIDGE 15s 未就绪」）。桥万一后来就绪（热更新重载等）会自动清除。
|
||
*/
|
||
@Volatile private var unavailable = false
|
||
private var unavailableReason: String = ""
|
||
|
||
private var loadedFromCache = false
|
||
private var assetRetryAttempted = false
|
||
|
||
/** 最近一次点歌实际命中的歌曲源 host(由 JS reportSongResult 更新, 供远程日志)。 */
|
||
@Volatile
|
||
var lastSongSourceHost: String = ""
|
||
private set
|
||
|
||
/** 必须最终在主线程创建 WebView；可从任意线程调用。 */
|
||
fun init(callback: (Boolean) -> Unit) {
|
||
mainHandler.post {
|
||
if (destroyed) {
|
||
callback(false)
|
||
return@post
|
||
}
|
||
try {
|
||
val cached = File(appContext.filesDir, CACHE_FILE)
|
||
val cachedScript = cached.takeIf(::isValidScript)?.readText(Charsets.UTF_8)
|
||
loadedFromCache = cachedScript != null
|
||
createWebView(cachedScript ?: readAssetScript(), callback)
|
||
updateCache(cached)
|
||
// 看门狗：onPageFinished 一直不回调（WebView 静默失效）时给出**明确原因**。
|
||
// 否则远程日志里只会看到反复的「15s 未就绪」，不知道卡在哪一步。
|
||
mainHandler.postDelayed({
|
||
if (!ready && !destroyed && !unavailable) {
|
||
markUnavailable("初始化超时：onPageFinished 未回调或 KtvApi 未导出")
|
||
callback(false)
|
||
}
|
||
}, BRIDGE_INIT_TIMEOUT_MS)
|
||
} catch (error: Throwable) {
|
||
Log.e(TAG, "WebView init failed", error)
|
||
markUnavailable("WebView 初始化失败: ${error.javaClass.simpleName}: ${error.message}")
|
||
callback(false)
|
||
}
|
||
}
|
||
}
|
||
|
||
private fun createWebView(script: String, callback: (Boolean) -> Unit) {
|
||
webView?.destroy()
|
||
ready = false
|
||
webView = WebView(appContext).apply {
|
||
settings.javaScriptEnabled = true
|
||
settings.domStorageEnabled = true
|
||
addJavascriptInterface(NativeBridge(), "android")
|
||
webViewClient = object : WebViewClient() {
|
||
/**
|
||
* 老系统（API < 24）的 WebView 不读 network_security_config，
|
||
* 系统信任库也没有 Let's Encrypt 新根 → 访问 mws.cherryonline.cn 会直接握手失败。
|
||
* 这里**不做盲目放行**：用 [TlsCompat] 增强后的信任库对同一主机独立校验一次，
|
||
* 只有校验通过（证书链合法且主机名匹配）才继续。
|
||
*/
|
||
override fun onReceivedSslError(
|
||
view: WebView?,
|
||
handler: SslErrorHandler?,
|
||
error: SslError?,
|
||
) {
|
||
val host = runCatching { Uri.parse(view?.url)?.host }.getOrNull()
|
||
val onlyUntrusted = error?.primaryError == SslError.SSL_UNTRUSTED
|
||
if (onlyUntrusted && host != null && TlsCompat.isHostTrustedByOurStore(host)) {
|
||
Log.w(TAG, "legacy TLS: $host 已用增强信任库复核通过，放行 WebView")
|
||
handler?.proceed()
|
||
} else {
|
||
Log.e(TAG, "SSL error NOT overridden: host=$host primary=${error?.primaryError}")
|
||
handler?.cancel()
|
||
}
|
||
}
|
||
|
||
override fun onPageFinished(view: WebView, url: String) {
|
||
view.evaluateJavascript("typeof window.KtvApi === 'function'") { result ->
|
||
if (result == "true") {
|
||
ready = true
|
||
// 桥后来就绪（例如热更新重载成功）→ 清除"不可用"标记，恢复 JS 主路径。
|
||
if (unavailable) {
|
||
unavailable = false
|
||
MiliLog.info("JS-BRIDGE 已恢复可用（${unavailableReason.ifEmpty { "?" }} 已解除）")
|
||
unavailableReason = ""
|
||
}
|
||
Log.i(TAG, "JS runtime ready (${if (loadedFromCache) "cache" else "asset"})")
|
||
MiliLog.info("JS-BRIDGE ready (${if (loadedFromCache) "cache" else "asset"})")
|
||
callback(true)
|
||
} else if (loadedFromCache && !assetRetryAttempted) {
|
||
Log.w(TAG, "Cached JS failed to load; falling back to packaged asset")
|
||
assetRetryAttempted = true
|
||
loadedFromCache = false
|
||
createWebView(readAssetScript(), callback)
|
||
} else {
|
||
Log.e(TAG, "KtvApi was not exported by JS")
|
||
// 老电视盒子上 WebView 不可用/被裁剪时常走这里：桥永远不就绪，
|
||
// 取址只能回退 DB → 「无法生成下载地址」。必须能远程看到。
|
||
markUnavailable("KtvApi 未导出")
|
||
callback(false)
|
||
}
|
||
}
|
||
}
|
||
}
|
||
loadDataWithBaseURL("https://localhost/", wrapHtml(script), "text/html", "UTF-8", null)
|
||
}
|
||
}
|
||
|
||
/** 桥当前是否可用。热更新重载期间会短暂为 false，调用方应据此等待而非立即回退。 */
|
||
fun isReady(): Boolean = ready && !destroyed
|
||
|
||
/** 是否已判定本机 WebView 不可用（用于跳过必然失败的等待）。 */
|
||
fun isUnavailable(): Boolean = unavailable && !destroyed && !ready
|
||
|
||
/**
|
||
* 标记桥在本机不可用。**只在状态首次变化时上报一次**：
|
||
* 这是持久状态，若每次点歌都记一条会把远程日志刷满（实测每首歌一条）。
|
||
*/
|
||
fun markUnavailable(reason: String) {
|
||
if (unavailable) return
|
||
unavailable = true
|
||
unavailableReason = reason
|
||
MiliLog.error("JS-BRIDGE 判定本机 WebView 不可用（$reason），后续点歌直接走原生取址通道")
|
||
}
|
||
|
||
/**
|
||
* 供**原生兜底取址解析器**（[SongUrlResolver]）复用的「干净请求」通道。
|
||
*
|
||
* 与 JS 的 `android.httpGet` 走的是**完全同一条**裸 Socket 路径（只发 Host + Accept，
|
||
* 不带 UA/Connection/Accept-Encoding），因此请求特征与风控表现一致；
|
||
* 且**不依赖 WebView 是否就绪** —— 正是 WebView 不可用的老设备所需要的。
|
||
*/
|
||
fun rawCleanGet(url: String, timeoutMs: Int = 8_000): String {
|
||
val headers = JSONObject().put("Accept", "*/*").toString()
|
||
return NativeBridge().request("GET", url, null, headers, timeoutMs)
|
||
}
|
||
|
||
/**
|
||
* **干净 POST**（原版客户端调 `api.php` 取配置的形态，2026-10 依据 HAR 实测补上）。
|
||
*
|
||
* HAR 实测原版：`POST http://<host>/api.php`，
|
||
* `Content-Type: application/x-www-form-urlencoded`，
|
||
* UA 为 `Dalvik/2.1.0 (Linux; U; Android 12; SM-G9730 Build/…)`，body 为
|
||
* `action=get_config&device_id=<mac>`；而 `i.php`/`do.php` 仍是**只有 Host+Accept**
|
||
* 的干净 GET（[rawCleanGet]）。这里按同样分工实现。
|
||
*/
|
||
fun rawCleanPost(url: String, form: String, timeoutMs: Int = 8_000): String {
|
||
val headers = JSONObject()
|
||
.put("Accept", "*/*")
|
||
.put("Content-Type", "application/x-www-form-urlencoded")
|
||
.put("User-Agent", dalvikUserAgent())
|
||
.toString()
|
||
return NativeBridge().request("POST", url, form, headers, timeoutMs)
|
||
}
|
||
|
||
/** 原版客户端形态的 UA（Dalvik + 本机 Android 版本/型号/Build）。 */
|
||
private fun dalvikUserAgent(): String =
|
||
"Dalvik/2.1.0 (Linux; U; Android ${android.os.Build.VERSION.RELEASE}; " +
|
||
"${android.os.Build.MODEL} Build/${android.os.Build.ID})"
|
||
|
||
fun isDestroyed(): Boolean = destroyed
|
||
|
||
/**
|
||
* 重置 JS 侧歌曲源会话（断网恢复 / 下载重试时调用）。
|
||
*
|
||
* 置空 `window.api` 与 `window._apiInitPromise`，下一次取址会重新构造 API 实例
|
||
* （恢复默认源顺序）并重新登录，避免继续使用失效 token。
|
||
*/
|
||
fun resetApiSession() {
|
||
val view = webView
|
||
if (!ready || destroyed || view == null) return
|
||
mainHandler.post {
|
||
runCatching {
|
||
view.evaluateJavascript(RESET_SESSION_JS, null)
|
||
Log.i(TAG, "reset source api session")
|
||
}.onFailure { Log.w(TAG, "reset source api session failed", it) }
|
||
}
|
||
}
|
||
|
||
fun getSongUrl(
|
||
musicNo: String,
|
||
resolution: String,
|
||
h265: Boolean,
|
||
callback: (String?) -> Unit,
|
||
) {
|
||
if (!ready || destroyed) {
|
||
callback(null)
|
||
return
|
||
}
|
||
val requestId = UUID.randomUUID().toString()
|
||
callbacks[requestId] = callback
|
||
val script = """
|
||
(function() {
|
||
var requestId = ${JSONObject.quote(requestId)};
|
||
var completed = false;
|
||
function finish(url) {
|
||
if (completed) return;
|
||
completed = true;
|
||
clearTimeout(timer);
|
||
android.onUrl(requestId, url || '');
|
||
}
|
||
var timer = setTimeout(function() { finish(''); }, $JS_REQUEST_TIMEOUT_MS);
|
||
Promise.resolve().then(async function() {
|
||
if (!window.api) {
|
||
// 歌曲源按 device 识别:随机/每次更换的 device 会被判"异常行为"。
|
||
// 使用本机当前网卡 mac + 抓包注册的 sn(会话内保持稳定),并保持版本号一致。
|
||
if (window.KtvApiConfig) {
|
||
window.KtvApiConfig.VER = '2.0';
|
||
window.KtvApiConfig.VN = '4.1.3.03281430';
|
||
}
|
||
window.api = new window.KtvApi({mac: ${JSONObject.quote(DEVICE_MAC)}, sn: ${JSONObject.quote(DEVICE_SN)}, maxDeviceRetries: 0, debug: true});
|
||
var _regen = window.api.regenerateDevice;
|
||
window.api.regenerateDevice = function() {
|
||
_regen.call(window.api);
|
||
window.api.mac = ${JSONObject.quote(DEVICE_MAC)};
|
||
window.api.sn = ${JSONObject.quote(DEVICE_SN)};
|
||
};
|
||
}
|
||
if (!window._apiInitPromise) {
|
||
window._apiInitPromise = window.api.init().then(function(ok) {
|
||
if (!ok) throw new Error('API initialization failed');
|
||
return true;
|
||
}).catch(function(error) {
|
||
window._apiInitPromise = null;
|
||
throw error;
|
||
});
|
||
}
|
||
await window._apiInitPromise;
|
||
return window.api.getSongUrl(
|
||
${JSONObject.quote(musicNo)}, ${JSONObject.quote(resolution)}, ${if (h265) "true" else "false"}
|
||
);
|
||
}).then(finish).catch(function(error) {
|
||
android.log('getSongUrl failed: ' + (error && error.message ? error.message : error));
|
||
finish('');
|
||
});
|
||
})();
|
||
""".trimIndent()
|
||
mainHandler.post {
|
||
if (!ready) complete(requestId, null)
|
||
else webView?.evaluateJavascript(script, null) ?: complete(requestId, null)
|
||
}
|
||
}
|
||
|
||
// JS isDemoUrl 已做第一层正则过滤; 这里再做域名白名单兜底, 防止 demo URL 绕过
|
||
private val trustedHostSuffixes = listOf(
|
||
"ktvsky.com", "origjoy.com", "cherryonline.cn", "ac16.vip",
|
||
"ktvdaren.com", "j-make.cn",
|
||
)
|
||
// 已知 demo 域名模式 (Cloudflare R2 测试桶、IP 地址等)
|
||
private val demoHostPatterns = listOf(
|
||
Regex("^\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$"), // 纯 IP
|
||
Regex("^pub-[a-z0-9]+\\.r2\\.dev$"), // R2 demo bucket
|
||
)
|
||
|
||
private fun isTrustedDownloadUrl(url: String?): Boolean {
|
||
if (url == null) return false
|
||
if (!url.startsWith("http://") && !url.startsWith("https://")) return false
|
||
val host = runCatching { java.net.URI(url).host }.getOrNull() ?: return false
|
||
if (demoHostPatterns.any { it.matches(host) }) {
|
||
Log.w(TAG, "Rejected demo URL host: $host")
|
||
return false
|
||
}
|
||
val trusted = trustedHostSuffixes.any { host.endsWith(it) }
|
||
if (!trusted) Log.w(TAG, "Untrusted URL host: $host")
|
||
return trusted
|
||
}
|
||
|
||
private fun complete(requestId: String, url: String?) {
|
||
// 先屏蔽/替换广告视频,再做域名白名单校验。
|
||
callbacks.remove(requestId)?.invoke(AdVideoFilter.resolve(url)?.takeIf { isTrustedDownloadUrl(it) })
|
||
}
|
||
|
||
private fun readAssetScript(): String =
|
||
appContext.assets.open(JS_FILE).bufferedReader(Charsets.UTF_8).use { it.readText() }
|
||
|
||
private fun isValidScript(file: File): Boolean =
|
||
runCatching {
|
||
file.isFile && file.length() in 1_001..500_000 &&
|
||
file.readText(Charsets.UTF_8).let {
|
||
it.contains("KtvApi") && it.contains("KTV_BRIDGE_API: 13")
|
||
}
|
||
}.getOrDefault(false)
|
||
|
||
/** 下载成功后原子替换缓存；新脚本在下次启动时生效。 */
|
||
private fun updateCache(cacheFile: File) {
|
||
Thread({
|
||
val tempFile = File(cacheFile.parentFile, "${cacheFile.name}.tmp")
|
||
try {
|
||
val connection = (URL(REMOTE_JS_URL).openConnection() as HttpURLConnection).apply {
|
||
connectTimeout = 10_000
|
||
readTimeout = 15_000
|
||
instanceFollowRedirects = true
|
||
setRequestProperty("User-Agent", "KTV-Updater/2.0")
|
||
}
|
||
try {
|
||
if (connection.responseCode != HttpURLConnection.HTTP_OK) {
|
||
throw IllegalStateException("HTTP ${connection.responseCode}")
|
||
}
|
||
val declaredLength = connection.contentLengthCompat()
|
||
require(declaredLength < 0 || declaredLength <= MAX_RESPONSE_BYTES) { "JS file is too large" }
|
||
val bytes = connection.inputStream.use { it.readBytes() }
|
||
require(bytes.size <= MAX_RESPONSE_BYTES) { "JS file is too large" }
|
||
val script = String(bytes, StandardCharsets.UTF_8)
|
||
require(
|
||
script.length > 1000 && script.contains("KtvApi") &&
|
||
script.contains("KTV_BRIDGE_API: 13"),
|
||
) { "Invalid or incompatible JS file" }
|
||
tempFile.writeText(script, Charsets.UTF_8)
|
||
if (!tempFile.renameTo(cacheFile)) {
|
||
cacheFile.writeText(script, Charsets.UTF_8)
|
||
tempFile.delete()
|
||
}
|
||
Log.i(TAG, "JS cache updated from Gitea (${script.length} chars)")
|
||
// 启动后刚拉到的新版本直接生效；若已有请求在执行，则留到下次启动。
|
||
mainHandler.post {
|
||
if (ready && callbacks.isEmpty() && !destroyed) {
|
||
loadedFromCache = true
|
||
createWebView(script) { ok -> Log.i(TAG, "Hot-reloaded JS: $ok") }
|
||
}
|
||
}
|
||
} finally {
|
||
connection.disconnect()
|
||
}
|
||
} catch (error: Throwable) {
|
||
tempFile.delete()
|
||
Log.w(TAG, "JS update failed: ${error.message}")
|
||
}
|
||
}, "ktv-js-updater").start()
|
||
}
|
||
|
||
private fun wrapHtml(script: String): String {
|
||
val escaped = script.replace("</script", "<\\/script", ignoreCase = true)
|
||
// 诊断 + console 桥（必须在主脚本之前执行）：
|
||
// 1) 上报 WebView 内核版本与 ES2017(async/await) 支持情况 —— 老盒子（Android 5.x 的
|
||
// WebView 可能是 Chrome 39~4x）不支持 async/await 会让**整个脚本语法报错**，
|
||
// 表现为 `window.KtvApi` 未导出、桥永远不就绪；这条日志可直接定死该原因。
|
||
// （用 new Function 做特性探测，避免探测语句本身引起语法错误。）
|
||
// 2) window.onerror 捕获脚本解析/运行错误 —— 语法错误也会触发它，能拿到真实报错。
|
||
// 3) console.log 桥接：ktv_api.js 的 _log() 细节原本只进 WebView 控制台。
|
||
val consoleBridge = """
|
||
(function(){
|
||
try {
|
||
window.onerror = function(msg, src, line, col){
|
||
try { android.log('JS-ERROR ' + msg + ' @' + line + ':' + col); } catch(e) {}
|
||
};
|
||
} catch(e) {}
|
||
try {
|
||
var es = 'unknown';
|
||
try { new Function('return (async function(){})'); es = 'yes'; } catch(e) { es = 'no'; }
|
||
try {
|
||
android.log('WEBVIEW ua=' + navigator.userAgent +
|
||
' asyncFunction=' + es + ' promise=' + (typeof Promise));
|
||
} catch(e) {}
|
||
} catch(e) {}
|
||
try {
|
||
var orig = console.log;
|
||
console.log = function(){
|
||
try { android.log(Array.prototype.map.call(arguments, String).join(' ')); } catch(e) {}
|
||
if (orig) { try { orig.apply(console, arguments); } catch(e) {} }
|
||
};
|
||
} catch(e) {}
|
||
})();
|
||
""".trimIndent()
|
||
return "<!doctype html><html><head><meta charset=\"utf-8\"></head><body><script>$consoleBridge</script>" +
|
||
"<script>$escaped</script></body></html>"
|
||
}
|
||
|
||
inner class NativeBridge {
|
||
@JavascriptInterface
|
||
fun log(message: String) {
|
||
Log.d(TAG, message)
|
||
// 把 JS 侧日志接进远程日志：歌曲源解析（token/do.php/多源排序）的失败原因
|
||
// 以前只走 console.log，现场完全看不到。加上前缀便于检索与过滤。
|
||
runCatching { MiliLog.local("JS ${message.take(180)}") }
|
||
}
|
||
|
||
@JavascriptInterface
|
||
fun onUrl(requestId: String, url: String) {
|
||
Log.d(TAG, "URL result ${requestId.take(8)}: ${url.take(100)}")
|
||
complete(requestId, url)
|
||
}
|
||
|
||
@JavascriptInterface
|
||
fun rsaEncryptPkcs1(publicKeyBase64: String, plaintext: String): String =
|
||
runCatching {
|
||
val keyBytes = Base64.decode(publicKeyBase64.replace("\\s".toRegex(), ""), Base64.DEFAULT)
|
||
val publicKey = KeyFactory.getInstance("RSA").generatePublic(X509EncodedKeySpec(keyBytes))
|
||
val cipher = Cipher.getInstance("RSA/ECB/PKCS1Padding")
|
||
cipher.init(Cipher.ENCRYPT_MODE, publicKey)
|
||
Base64.encodeToString(cipher.doFinal(plaintext.toByteArray(Charsets.UTF_8)), Base64.NO_WRAP)
|
||
}.onFailure { Log.e(TAG, "RSA encryption failed", it) }.getOrDefault("")
|
||
|
||
@JavascriptInterface
|
||
fun httpGet(url: String, headersJson: String, timeoutMs: Int): String =
|
||
request("GET", url, null, headersJson, timeoutMs)
|
||
|
||
@JavascriptInterface
|
||
fun httpPost(url: String, body: String, headersJson: String, timeoutMs: Int): String =
|
||
request("POST", url, body, headersJson, timeoutMs)
|
||
|
||
// 任务3: JS 点歌结果上报(成功/失败 + 实际命中的歌曲源 host)。
|
||
// 由 Kotlin 调用方(SongOkDownloadManager)补充标题后写入远程日志,
|
||
// 同时成功即表示窗口/网络恢复 → 复位 e.ac19 窗口守卫提示状态。
|
||
@JavascriptInterface
|
||
fun reportSongResult(status: String, host: String, musicno: String, detail: String) {
|
||
val ok = status == "ok"
|
||
if (host.isNotBlank()) lastSongSourceHost = host
|
||
if (ok) Eac19WindowGuard.noteUrlOk()
|
||
// 具体含标题的日志由 SongOkDownloadManager 在拿到 URL 后统一写,
|
||
// 这里只留简短来源记录, 避免重复刷屏。
|
||
if (!ok) {
|
||
MiliLog.error("点歌失败 编号=$musicno 请求源=$host 详情=${detail.take(160)}")
|
||
}
|
||
}
|
||
|
||
/** 供 [rawCleanGet] 与 [NativeBridge.httpGet]/[httpPost] 共用的请求入口。 */
|
||
internal fun request(method: String, url: String, body: String?, headersJson: String, timeoutMs: Int): String {
|
||
// 歌曲源(如 w.w345.my)的 do.php 风控只放行"干净"请求(原版仅 Host+Accept;
|
||
// 带任何 UA/Connection/Accept-Encoding 头都会被拒)。裸 Socket 只发 Host+JS 头。
|
||
// 任何 HTTP 状态(200/403 等)都直接用裸 Socket 结果,不再用 HttpURLConnection
|
||
// 补发第二次(限流时补发只会双倍放大请求量,加速被源限流)。
|
||
val raw = rawRequest(method, url, body, headersJson, timeoutMs)
|
||
val status = runCatching { JSONObject(raw).optInt("status") }.getOrDefault(0)
|
||
if (status > 0) {
|
||
// 远程日志: 风控/服务端错误(403/5xx)实时上报, 便于排查间歇性点歌失败。
|
||
if (status == 403 || status >= 500) {
|
||
MiliLog.localError("HTTP-$status $method $url")
|
||
}
|
||
// 歌曲源试用窗口/风控到期: 对陌生出口 IP 可能返回 403"检测到异常行为",
|
||
// 换公网 IP 恢复。通知 UI 弹一次提示引导换 IP。
|
||
// ⚠️ 取 token 的 `/i.php` 同样会 403（2026-10 实测主源 w.w345.my/i.php 就是 403）——
|
||
// 以前只认 `/music/do.php`，全都 403 时用户看不到任何提示。
|
||
if (status == 403 && (url.contains("/i.php") || url.contains("/music/do.php"))) {
|
||
Eac19WindowGuard.noteRiskBlocked()
|
||
}
|
||
return raw
|
||
}
|
||
// 仅当裸 Socket 连接失败(status=0)时回退 HttpURLConnection。
|
||
Log.w(TAG, "raw socket connect failed, falling back to HttpURLConnection: $url")
|
||
val fallback = httpRequest(method, url, body, headersJson, timeoutMs)
|
||
val fallbackStatus = runCatching { JSONObject(fallback).optInt("status") }.getOrDefault(0)
|
||
if (fallbackStatus == 0) {
|
||
// 两个通道都失败 → 网络不可达/解析失败, 实时上报。
|
||
val err = runCatching { JSONObject(fallback).optString("error") }.getOrDefault("")
|
||
MiliLog.localError("NET-ERR $method $url $err")
|
||
}
|
||
return fallback
|
||
}
|
||
|
||
/** HttpURLConnection 通道:JS 未指定 UA/编码/连接时改中性值,避免默认头触发风控。 */
|
||
private fun httpRequest(method: String, url: String, body: String?, headersJson: String, timeoutMs: Int): String {
|
||
var connection: HttpURLConnection? = null
|
||
return try {
|
||
require(url.startsWith("http://") || url.startsWith("https://")) { "Unsupported URL" }
|
||
connection = URL(url).openConnection() as HttpURLConnection
|
||
connection.requestMethod = method
|
||
connection.connectTimeout = timeoutMs.coerceIn(1_000, 30_000)
|
||
connection.readTimeout = timeoutMs.coerceIn(1_000, 30_000)
|
||
connection.instanceFollowRedirects = true
|
||
val headers = JSONObject(headersJson.ifBlank { "{}" })
|
||
headers.keys().forEach { name -> connection.setRequestProperty(name, headers.optString(name)) }
|
||
// 歌曲源的 /music/do.php 风控只放行"干净"的请求(抓包只发 Host+Accept):
|
||
// 空 UA、Dalvik、okhttp、Chrome 的 UA 都会返回"检测到异常行为",Go UA 可放行。
|
||
// HttpURLConnection 默认会补 Dalvik UA、Accept-Encoding: gzip、Connection: Keep-Alive,
|
||
// 这里在 JS 未显式指定时全部改成中性值,尽量贴近原版请求。
|
||
if (!headers.has("User-Agent")) connection.setRequestProperty("User-Agent", "Go-http-client/1.1")
|
||
if (!headers.has("Accept-Encoding")) connection.setRequestProperty("Accept-Encoding", "identity")
|
||
if (!headers.has("Connection")) connection.setRequestProperty("Connection", "close")
|
||
if (body != null) {
|
||
connection.doOutput = true
|
||
connection.outputStream.use { it.write(body.toByteArray(Charsets.UTF_8)) }
|
||
}
|
||
val status = connection.responseCode
|
||
val stream = if (status >= 400) connection.errorStream else connection.inputStream
|
||
val responseBody = stream?.bufferedReader(Charsets.UTF_8)?.use { it.readText() }.orEmpty()
|
||
JSONObject().put("status", status).put("body", responseBody).toString()
|
||
} catch (error: Throwable) {
|
||
Log.w(TAG, "$method request failed: ${error.message}")
|
||
JSONObject().put("status", 0).put("body", "").put("error", error.message.orEmpty()).toString()
|
||
} finally {
|
||
connection?.disconnect()
|
||
}
|
||
}
|
||
|
||
/** 裸 Socket 通道:只发 Host + JS 指定的请求头,不再补任何默认头(UA/Connection/Accept-Encoding)。 */
|
||
private fun rawRequest(method: String, url: String, body: String?, headersJson: String, timeoutMs: Int): String {
|
||
var socket: Socket? = null
|
||
return try {
|
||
require(url.startsWith("http://") || url.startsWith("https://")) { "Unsupported URL" }
|
||
val isHttps = url.startsWith("https://")
|
||
val uri = URL(url).toURI()
|
||
val port = if (uri.port > 0) uri.port else if (isHttps) 443 else 80
|
||
val connectTimeout = timeoutMs.coerceIn(1_000, 30_000)
|
||
socket = if (isHttps) {
|
||
// 用 TlsCompat 的工厂（系统信任 ∪ 内置根证书）：裸 socket 走的是
|
||
// SSLSocketFactory.getDefault()，不受 HttpsURLConnection 的默认工厂影响，
|
||
// network_security_config 也管不到它 —— 老设备上会因缺 ISRG 新根握手失败。
|
||
//
|
||
// ⚠️ 必须用「先连接、再包装」的写法：`createSocket()`（无主机参数）拿到的
|
||
// SSLSocket **不会带上主机名**，SNI 与证书主机名校验都会受影响（共享 CDN /
|
||
// 反代多证书时直接握手失败）。`createSocket(plain, host, port, true)` 既补上
|
||
// 主机名，又保住了上面显式设置的连接超时。
|
||
val plain = Socket().apply {
|
||
connect(java.net.InetSocketAddress(uri.host, port), connectTimeout)
|
||
}
|
||
(TlsCompat.sslSocketFactory()
|
||
.createSocket(plain, uri.host, port, true) as SSLSocket).apply {
|
||
startHandshake()
|
||
}
|
||
} else {
|
||
// ⚠️ 必须显式给连接超时：原写法 `Socket(host, port)` 的连接阶段**不受**
|
||
// soTimeout 约束，遇到路由黑洞会按系统 TCP 超时(约 2 分钟)干等，
|
||
// 多个源叠加会把 JS 的 3 分钟预算耗光，表现为「无法生成下载地址」。
|
||
Socket().apply {
|
||
connect(java.net.InetSocketAddress(uri.host, port), connectTimeout)
|
||
}
|
||
}
|
||
socket.soTimeout = timeoutMs.coerceIn(1_000, 30_000)
|
||
val path = if (uri.rawQuery != null) "${uri.rawPath}?${uri.rawQuery}" else uri.rawPath
|
||
val requestText = StringBuilder()
|
||
requestText.append("$method $path HTTP/1.1\r\n")
|
||
requestText.append("Host: ${uri.host}\r\n")
|
||
val headers = JSONObject(headersJson.ifBlank { "{}" })
|
||
headers.keys().forEach { name -> requestText.append("$name: ${headers.optString(name)}\r\n") }
|
||
val bodyBytes = body?.toByteArray(Charsets.UTF_8)
|
||
if (bodyBytes != null) requestText.append("Content-Length: ${bodyBytes.size}\r\n")
|
||
requestText.append("\r\n")
|
||
val out = socket.getOutputStream()
|
||
out.write(requestText.toString().toByteArray(Charsets.UTF_8))
|
||
if (bodyBytes != null) out.write(bodyBytes)
|
||
out.flush()
|
||
|
||
val input = BufferedInputStream(socket.getInputStream())
|
||
val statusLine = readAsciiLine(input)
|
||
val status = statusLine?.split(" ")?.getOrNull(1)?.toIntOrNull() ?: 0
|
||
var contentLength = -1L
|
||
var chunked = false
|
||
while (true) {
|
||
val line = readAsciiLine(input) ?: break
|
||
if (line.isEmpty()) break
|
||
val idx = line.indexOf(':')
|
||
if (idx > 0) {
|
||
val name = line.substring(0, idx).trim().lowercase(Locale.ROOT)
|
||
val value = line.substring(idx + 1).trim()
|
||
if (name == "content-length") contentLength = value.toLongOrNull() ?: -1L
|
||
if (name == "transfer-encoding" && value.contains("chunked")) chunked = true
|
||
}
|
||
}
|
||
val responseBody = when {
|
||
chunked -> readChunkedBody(input)
|
||
contentLength >= 0 -> String(readExact(input, contentLength), Charsets.UTF_8)
|
||
else -> input.readBytes().toString(Charsets.UTF_8)
|
||
}
|
||
JSONObject().put("status", status).put("body", responseBody).toString()
|
||
} catch (error: Throwable) {
|
||
Log.w(TAG, "raw request failed: ${error.message}")
|
||
// 裸 Socket 失败原因以前只在 logcat：点歌失败时远程日志里什么都看不到。
|
||
MiliLog.warn(
|
||
"RAW-ERR $method ${runCatching { java.net.URI(url).host }.getOrNull() ?: url} " +
|
||
"${error.javaClass.simpleName}: ${error.message}",
|
||
)
|
||
JSONObject().put("status", 0).put("body", "").put("error", error.message.orEmpty()).toString()
|
||
} finally {
|
||
try { socket?.close() } catch (ignored: Exception) {}
|
||
}
|
||
}
|
||
|
||
private fun readAsciiLine(input: InputStream): String? {
|
||
val sb = StringBuilder()
|
||
while (true) {
|
||
val b = input.read()
|
||
if (b < 0) return if (sb.isEmpty()) null else sb.toString()
|
||
if (b == '\n'.code) {
|
||
if (sb.isNotEmpty() && sb[sb.length - 1] == '\r') sb.setLength(sb.length - 1)
|
||
return sb.toString()
|
||
}
|
||
sb.append(b.toChar())
|
||
}
|
||
}
|
||
|
||
private fun readExact(input: InputStream, length: Long): ByteArray {
|
||
val result = ByteArray(length.coerceAtMost(Int.MAX_VALUE.toLong()).toInt())
|
||
var off = 0
|
||
while (off < result.size) {
|
||
val n = input.read(result, off, result.size - off)
|
||
if (n < 0) break
|
||
off += n
|
||
}
|
||
return if (off == result.size) result else result.copyOf(off)
|
||
}
|
||
|
||
private fun readChunkedBody(input: InputStream): String {
|
||
val out = ByteArrayOutputStream()
|
||
while (true) {
|
||
val sizeLine = readAsciiLine(input) ?: break
|
||
val size = sizeLine.substringBefore(';').trim().toIntOrNull(16) ?: 0
|
||
if (size <= 0) break
|
||
out.write(readExact(input, size.toLong()))
|
||
readAsciiLine(input) // 吃掉 chunk 尾部 CRLF
|
||
}
|
||
// ByteArrayOutputStream.toString(Charset) 是 API 33+；低版本用 String(bytes, charset)。
|
||
return String(out.toByteArray(), Charsets.UTF_8)
|
||
}
|
||
}
|
||
|
||
fun destroy() {
|
||
destroyed = true
|
||
ready = false
|
||
callbacks.keys.toList().forEach { complete(it, null) }
|
||
mainHandler.post {
|
||
webView?.removeJavascriptInterface("android")
|
||
webView?.destroy()
|
||
webView = null
|
||
}
|
||
}
|
||
}
|