|
| 1 | +package lanzou |
| 2 | + |
| 3 | +import ( |
| 4 | + "fmt" |
| 5 | + "net/http" |
| 6 | + "net/http/httptest" |
| 7 | + "testing" |
| 8 | + |
| 9 | + "github.com/alist-org/alist/v3/drivers/base" |
| 10 | + "github.com/go-resty/resty/v2" |
| 11 | +) |
| 12 | + |
| 13 | +func TestFindFileID(t *testing.T) { |
| 14 | + tests := []struct { |
| 15 | + name string |
| 16 | + html string |
| 17 | + want string |
| 18 | + ok bool |
| 19 | + }{ |
| 20 | + {name: "legacy single quoted path", html: `url: '/ajaxm.php?file=12345'`, want: "12345", ok: true}, |
| 21 | + {name: "double quoted path", html: `url: "/ajaxm.php?file=23456"`, want: "23456", ok: true}, |
| 22 | + {name: "absolute URL", html: `url: "https://example.lanzouv.com/ajaxm.php?file=34567"`, want: "34567", ok: true}, |
| 23 | + {name: "unquoted expression", html: `fetch('/ajaxm.php?file=45678&p=1')`, want: "45678", ok: true}, |
| 24 | + {name: "password file endpoint", html: `url : '/ajaxfile.php?file=215138709'`, want: "215138709", ok: true}, |
| 25 | + {name: "f_id variable", html: `var f_id = '56789';`, want: "56789", ok: true}, |
| 26 | + {name: "fid variable without quotes", html: `let fid=67890;`, want: "67890", ok: true}, |
| 27 | + {name: "missing ID", html: `url: '/ajaxm.php?action=downprocess'`, ok: false}, |
| 28 | + } |
| 29 | + |
| 30 | + for _, tt := range tests { |
| 31 | + t.Run(tt.name, func(t *testing.T) { |
| 32 | + got, ok := findFileID(tt.html) |
| 33 | + if got != tt.want || ok != tt.ok { |
| 34 | + t.Fatalf("findFileID() = (%q, %v), want (%q, %v)", got, ok, tt.want, tt.ok) |
| 35 | + } |
| 36 | + }) |
| 37 | + } |
| 38 | +} |
| 39 | + |
| 40 | +func TestGetAjaxmPath(t *testing.T) { |
| 41 | + tests := []struct { |
| 42 | + name string |
| 43 | + html string |
| 44 | + want string |
| 45 | + }{ |
| 46 | + {name: "legacy page with file ID", html: `url: '/ajaxm.php?file=12345'`, want: "/ajaxm.php?file=12345"}, |
| 47 | + {name: "password file endpoint", html: `url : '/ajaxfile.php?file=215138709'`, want: "/ajaxfile.php?file=215138709"}, |
| 48 | + {name: "new page without file ID", html: `data: {'action':'downprocess','sign':sign,'ves':1}`, want: "/ajaxm.php"}, |
| 49 | + } |
| 50 | + |
| 51 | + for _, tt := range tests { |
| 52 | + t.Run(tt.name, func(t *testing.T) { |
| 53 | + if got := getAjaxmPath(tt.html); got != tt.want { |
| 54 | + t.Fatalf("getAjaxmPath() = %q, want %q", got, tt.want) |
| 55 | + } |
| 56 | + }) |
| 57 | + } |
| 58 | +} |
| 59 | + |
| 60 | +func TestGetFilesByShareURLWithoutFileID(t *testing.T) { |
| 61 | + originalClient, originalNoRedirectClient := base.RestyClient, base.NoRedirectClient |
| 62 | + base.RestyClient = resty.New() |
| 63 | + base.NoRedirectClient = resty.New().SetRedirectPolicy(resty.RedirectPolicyFunc( |
| 64 | + func(_ *http.Request, _ []*http.Request) error { return http.ErrUseLastResponse }, |
| 65 | + )) |
| 66 | + t.Cleanup(func() { |
| 67 | + base.RestyClient = originalClient |
| 68 | + base.NoRedirectClient = originalNoRedirectClient |
| 69 | + }) |
| 70 | + |
| 71 | + var server *httptest.Server |
| 72 | + server = httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| 73 | + switch r.URL.Path { |
| 74 | + case "/fn": |
| 75 | + fmt.Fprint(w, `<script>var sign = 'test-sign'; data: {'action':'downprocess','sign':sign,'ves':1}</script>`) |
| 76 | + case "/ajaxm.php": |
| 77 | + if r.URL.RawQuery != "" { |
| 78 | + t.Errorf("unexpected ajaxm query: %q", r.URL.RawQuery) |
| 79 | + } |
| 80 | + w.Header().Set("Content-Type", "application/json") |
| 81 | + fmt.Fprintf(w, `{"zt":1,"dom":%q,"url":"download","inf":0}`, server.URL) |
| 82 | + case "/file/download": |
| 83 | + w.Header().Set("Location", server.URL+"/direct") |
| 84 | + w.WriteHeader(http.StatusFound) |
| 85 | + default: |
| 86 | + http.NotFound(w, r) |
| 87 | + } |
| 88 | + })) |
| 89 | + t.Cleanup(server.Close) |
| 90 | + |
| 91 | + d := &LanZou{Addition: Addition{ShareUrl: server.URL, UserAgent: "test"}} |
| 92 | + sharePage := `<title>test.txt - 蓝奏云</title><iframe src="/fn"></iframe><span>大小 1 M</span>` |
| 93 | + file, err := d.getFilesByShareUrl("share-id", "", sharePage) |
| 94 | + if err != nil { |
| 95 | + t.Fatalf("getFilesByShareUrl() error = %v", err) |
| 96 | + } |
| 97 | + if file.Url != server.URL+"/direct" { |
| 98 | + t.Fatalf("file URL = %q, want %q", file.Url, server.URL+"/direct") |
| 99 | + } |
| 100 | +} |
| 101 | + |
| 102 | +func TestGetPasswordFileThroughAjaxfileEndpoint(t *testing.T) { |
| 103 | + originalClient, originalNoRedirectClient := base.RestyClient, base.NoRedirectClient |
| 104 | + base.RestyClient = resty.New() |
| 105 | + base.NoRedirectClient = resty.New().SetRedirectPolicy(resty.RedirectPolicyFunc( |
| 106 | + func(_ *http.Request, _ []*http.Request) error { return http.ErrUseLastResponse }, |
| 107 | + )) |
| 108 | + t.Cleanup(func() { |
| 109 | + base.RestyClient = originalClient |
| 110 | + base.NoRedirectClient = originalNoRedirectClient |
| 111 | + }) |
| 112 | + |
| 113 | + var server *httptest.Server |
| 114 | + server = httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| 115 | + switch r.URL.Path { |
| 116 | + case "/share-id": |
| 117 | + http.SetCookie(w, &http.Cookie{Name: "share_session", Value: "ok", Path: "/"}) |
| 118 | + fmt.Fprint(w, `<title>protected.apk - 蓝奏云</title><div id="passwddiv"></div><script> |
| 119 | +function down_p(){ |
| 120 | +var sign = 'test-sign'; |
| 121 | +$.ajax({url:'/ajaxfile.php?file=215138709',data:{'action':'downprocess','sign':sign,'kd':1,'p':pwd}}); |
| 122 | +}</script><span>大小 1 M</span>`) |
| 123 | + case "/ajaxfile.php": |
| 124 | + if r.URL.Query().Get("file") != "215138709" { |
| 125 | + t.Errorf("unexpected file query: %q", r.URL.RawQuery) |
| 126 | + } |
| 127 | + cookie, err := r.Cookie("share_session") |
| 128 | + if err != nil || cookie.Value != "ok" { |
| 129 | + t.Errorf("share cookie missing: %v", err) |
| 130 | + } |
| 131 | + if got := r.Header.Get("Referer"); got != server.URL+"/share-id" { |
| 132 | + t.Errorf("Referer = %q", got) |
| 133 | + } |
| 134 | + if got := r.Header.Get("Origin"); got != server.URL { |
| 135 | + t.Errorf("Origin = %q", got) |
| 136 | + } |
| 137 | + if got := r.Header.Get("X-Requested-With"); got != "XMLHttpRequest" { |
| 138 | + t.Errorf("X-Requested-With = %q", got) |
| 139 | + } |
| 140 | + if err := r.ParseForm(); err != nil { |
| 141 | + t.Fatal(err) |
| 142 | + } |
| 143 | + if got := r.Form.Get("p"); got != "1234" { |
| 144 | + t.Errorf("password = %q", got) |
| 145 | + } |
| 146 | + w.Header().Set("Content-Type", "application/json") |
| 147 | + fmt.Fprintf(w, `{"zt":1,"dom":%q,"url":"download","inf":"protected.apk"}`, server.URL) |
| 148 | + case "/file/download": |
| 149 | + w.Header().Set("Location", server.URL+"/direct") |
| 150 | + w.WriteHeader(http.StatusFound) |
| 151 | + default: |
| 152 | + http.NotFound(w, r) |
| 153 | + } |
| 154 | + })) |
| 155 | + t.Cleanup(server.Close) |
| 156 | + |
| 157 | + d := &LanZou{Addition: Addition{ShareUrl: server.URL, UserAgent: "test"}} |
| 158 | + file, err := d.GetFilesByShareUrl("share-id", "1234") |
| 159 | + if err != nil { |
| 160 | + t.Fatalf("GetFilesByShareUrl() error = %v", err) |
| 161 | + } |
| 162 | + if file.Url != server.URL+"/direct" { |
| 163 | + t.Fatalf("file URL = %q, want %q", file.Url, server.URL+"/direct") |
| 164 | + } |
| 165 | +} |
0 commit comments