Skip to content

Commit 9287c79

Browse files
authored
docs: update Thunder login verification guide (#463)
* docs: add GuangYaPan to supported storage list * docs: update thunder login verification
1 parent 33adde2 commit 9287c79

9 files changed

Lines changed: 159 additions & 79 deletions

File tree

48.2 KB
Loading
75.6 KB
Loading
102 KB
Loading
361 KB
Loading
4.84 KB
Loading
10.7 KB
Loading
22.8 KB
Loading

docs/guide/drivers/thunder.md

Lines changed: 80 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ Thunder Browser:Currently only supports mobile phones (Android, iOS)
5151

5252
That is, the mobile phone number, email, and username used for login (there is a probability that you cannot log in, you need to try)
5353

54-
- You need to bring the `+86` area code, for example +86 13722223333 fill in like this
54+
- For phone numbers, try the 11-digit number first. If login fails, try adding the `+86` area code, for example `+86 13722223333`.
5555

5656
<br/>
5757

@@ -65,19 +65,65 @@ password for login
6565

6666

6767

68-
### **CaptchaToken**
68+
### **CaptchaToken / CreditKey / DeviceID**
69+
70+
`CaptchaToken` usually does not need to be filled manually. If `need verify: {url}` appears when logging in or uploading, open the link in the error and complete the verification. The driver will save the new `CaptchaToken` automatically.
71+
72+
`DeviceID` can usually be left empty. The driver will generate and save one automatically. If login verification is triggered, keep the same `DeviceID` before retrying; changing it frequently may make the verification result unusable.
73+
74+
`CreditKey` is only used when login verification is triggered. If the following prompt appears when adding the driver, login verification has been triggered:
75+
76+
![xunlei-login-review-error-1](/img/drivers/xunlei/pr8342/login-review-error-1.png)
6977

70-
Need verify: {url} may appear when logging in or uploading, please visit the link in the error to complete the verification and get CaptchaToken (verification code)
78+
![xunlei-login-review-error-2](/img/drivers/xunlei/pr8342/login-review-error-2.png)
7179

72-
![xunlei](/img/drivers/xunlei/x1.png)
80+
### **Login verification solution**
81+
82+
Use a computer if possible.
83+
84+
Copy the complete data in the box, from the first `{` to the last `}`, for example:
85+
86+
```json
87+
{
88+
"creditkey": "",
89+
"reviewurl": "",
90+
"deviceid": "",
91+
"devicesign": ""
92+
}
93+
```
94+
95+
Open this site:
96+
97+
`https://i.xunlei.com/xlcaptcha/android.html`
98+
99+
![xunlei-captcha-page-initial](/img/drivers/xunlei/pr8342/captcha-page-initial.png)
100+
101+
The image above shows the initial page. This captcha is unrelated to the verification required by the mount.
102+
103+
Open the browser console (F12), enter `reviewCb(the copied data as the parameter)`, and press Enter. Example:
104+
105+
```js
106+
reviewCb({
107+
"creditkey": "",
108+
"reviewurl": "",
109+
"deviceid": "",
110+
"devicesign": ""
111+
})
112+
```
73113

74-
Fill in the mount directory ID account password and save it, there will be a big lump in the upper right corner (cannot be copied),
114+
Then the page will change to SMS verification or smart detection:
75115

76-
Let's go back to adding an account to copy from Https to the end to a new window to get the verification code parameter (CaptchaToken)
116+
![xunlei-reviewcb-console](/img/drivers/xunlei/pr8342/reviewcb-console.png)
77117

78-
See the image below to add
118+
![xunlei-sms-review](/img/drivers/xunlei/pr8342/sms-review.png)
79119

80-
![xunlei](/img/drivers/xunlei/x2.png)
120+
![xunlei-smart-review](/img/drivers/xunlei/pr8342/smart-review.png)
121+
122+
Complete the SMS verification. The smart detection page does not need to be completed. It will not redirect back to AList, and clicking the confirm button may not show any prompt.
123+
124+
Copy `creditkey` from the console, fill it into the driver's `CreditKey` field, then save the driver configuration.
125+
126+
![xunlei-creditkey-field](/img/drivers/xunlei/pr8342/creditkey-field.png)
81127

82128
<br/>
83129

@@ -113,7 +159,7 @@ Or use the proxy function in this program to transfer.
113159
### **Login Type**
114160

115161
1. When selecting User, you only need to fill in the username and password
116-
- User You need to bring the `+86` area code, for example +86 13722223333 fill in like this
162+
- For phone numbers, try the 11-digit number first. If login fails, try adding the `+86` area code, for example `+86 13722223333`.
117163

118164

119165
2. **RefreshToken**: Just fill in RefreshToken when selecting RefreshToken
@@ -124,7 +170,7 @@ Or use the proxy function in this program to transfer.
124170

125171
### **Signature Type**
126172

127-
**Algorithms**When selecting Algorithms, just fill in the Algorithms (it is difficult to obtain, and needs to be reversed)
173+
**Algorithms**: When selecting Algorithms, fill in Algorithms. The default value has been updated to the parameters built into the current driver, so normally keep the default.
128174

129175
**Captcha sign**: Only fill in CaptchaSign and Timestamp when selecting CaptchaSign
130176

@@ -147,53 +193,48 @@ Login type and Sign type recommended options
147193

148194
### **DeviceID**
149195

150-
The value calculated by md5 is used to determine the logged in device
196+
Used to identify the login device. If left empty, the driver will generate and save one automatically. If login verification is triggered, keep the same `DeviceID` and retry.
151197

152198
### **ClientID, ClientSecret, ClientVersion, PackageName**
153199

154-
It is related to the signature, fill in according to the actual situation
155-
156-
### **UserAgent**
157-
158-
UserAgent used by API requests, may be inaccessible or speed limited if the setting is incorrect
159-
160-
### **DownUserAgent**
161-
162-
The User Agent used for downloading, if the setting is wrong, it will not be downloaded (it will be used when the agent is turned on) Fixed parameters:
163-
**Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36**
164-
165-
<br/>
200+
These values are related to signing and login. The defaults have been updated to:
166201

202+
- `ClientID`: `Xp6vsxz_7IYVw2BB`
203+
- `ClientSecret`: `Xp6vsy4tN9toTVdMSpomVdXpRmES`
204+
- `ClientVersion`: `8.31.0.9726`
205+
- `PackageName`: `com.xunlei.downloadprovider`
167206

207+
Normally keep the defaults.
168208

169-
## **Key data acquisition process**
209+
### **UserAgent**
170210

171-
Obtain Xunlei request data through network analysis tools (packet capture tools) --- Please read the following information carefully
211+
UserAgent used by API requests. Incorrect values may cause access failure or speed limits. The default has been updated to `ANDROID-com.xunlei.downloadprovider/8.31.0.9726 ... sdkVersion/512000 ...`.
172212

173-
Open Xunlei and log in to your account (the picture below uses the PC client to operate, and the web terminal is also available)
213+
### **DownUserAgent**
174214

175-
Included in the request https://xluser-ssl.xunlei.com/v1/shield/captcha/init
176-
CaptchaSign, Timestamp, DeviceID, ClientID, ClientVersion, PackageName, User-Agent
215+
The User Agent used for downloading. Incorrect values may cause download failures or abnormal speed (used when proxy is enabled). Default:
177216

178-
**Note**: After obtaining the information of the two pictures, slowly select the data from the two data captured and fill in it
217+
`Dalvik/2.1.0 (Linux; U; Android 12; M2004J7AC Build/SP1A.210812.016)`
179218

180-
After logging in to Thunder and opening the packet capture tool, it is possible that the information of **v1/shield/captcha/init** cannot be immediately obtained at this time.
219+
### **CreditKey**
181220

182-
Do not close the Xunlei PC client and the packet capture tool, just wait, it will refresh automatically after **5 minutes**
221+
Only used when login verification is triggered. Use the same handling steps as [CaptchaToken / CreditKey / DeviceID](#captchatoken--creditkey--deviceid). After a successful login, the driver clears this field.
183222

184-
You will see the parameters as shown in the figure below, and you can fill in it according to the acquisition (if you can't see it clearly, you can right-click to copy the picture and link it to the browser to open a new window)
223+
<br/>
185224

186-
See **v1/shield/captcha/init** and grab it, please **immediately don't delay for a second** Right-click Xunlei in the taskbar in the lower right corner to exit, exit completely and then reopen to get * *Figure II**
187225

188-
![xunlei](/img/drivers/xunlei/x4.png)
189226

190-
Restarting Thunder will refresh the token
227+
## **Key data acquisition process**
191228

192-
The request to https://xluser-ssl.xunlei.com/v1/auth/token contains RefreshToken (please use the returned value), ClientSecret (does not exist on the web side)
229+
After PR [#8342](https://github.com/AlistGo/alist/pull/8342), username/password login for `Thunder` and `ThunderExpert` was changed:
193230

194-
![xunlei](/img/drivers/xunlei/x5.png)
231+
1. The driver first calls `https://xluser-ssl.xunlei.com/xluser.core.login/v3/login` to get `sessionID`.
232+
2. It then calls `https://xluser-ssl.xunlei.com/v1/auth/signin/token` to exchange the token used by AList.
233+
3. Login parameters were updated to Xunlei Android client `8.31.0.9726` and `sdkVersion/512000`.
234+
4. A `CreditKey` field was added for login verification.
235+
5. The normal `Thunder` driver can also customize `DeviceID`.
195236

196-
Figure 1 contains **7** parameters | Figure 1 contains **2** parameters | a fixed parameter (Down UserAgent), ten parameters and 3 options and a mount path, just write and save, before saving Remember to check~
237+
Therefore, the old process of capturing `v1/shield/captcha/init` and `v1/auth/token` to obtain `CaptchaSign`, `Timestamp`, `RefreshToken`, and related fields is outdated. Prefer the normal `Thunder` driver and only fill in username and password. Use `ThunderExpert` only when advanced parameters or custom UserAgent are needed.
197238

198239
<br/>
199240

@@ -636,4 +677,4 @@ flowchart TB
636677
click c1 "../drivers/common.html#webdav-policy"
637678
```
638679

639-
::::
680+
::::

docs/zh/guide/drivers/thunder.md

Lines changed: 79 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -54,8 +54,7 @@ star: true
5454

5555
即用于登陆的手机号,邮箱,用户名(有概率无法登录,需要尝试)
5656

57-
1. 在获取验证码之前填写手机号先不要携带 `+86` 区号
58-
2. 获取验证码后填写需要携带 `+86` 区号,例如 +86 13722223333 这样填写
57+
- 手机号可先直接填写 11 位手机号;如果登录失败,再尝试携带 `+86` 区号,例如 `+86 13722223333`
5958

6059
<br/>
6160

@@ -69,19 +68,65 @@ star: true
6968

7069

7170

72-
### **CaptchaToken**
71+
### **CaptchaToken / 信任密钥 / 设备ID**
7372

74-
在登录或上传是可能出现 need verify: {url},请访问错误中的链接完成验证得到 CaptchaToken(验证码)
73+
`CaptchaToken` 一般不需要手动填写。登录或上传时如果出现 `need verify: {url}`,请打开错误中的链接完成验证,驱动会自动保存新的 `CaptchaToken`
7574

76-
![xunlei](/img/drivers/xunlei/x1.png)
75+
`设备ID` 默认留空即可,驱动会自动生成并保存。触发登录验证后,不要频繁更换 `设备ID`,否则可能导致验证结果无法复用。
7776

78-
填写好挂载目录 ID 账号 密码后保存,右上角会出现一大坨(没法复制),
77+
`信任密钥(CreditKey)` 只在触发登录验证时使用。保存驱动时如果出现下图所示的情况,就是触发了登录验证:
7978

80-
我们回到添加账号这里来复制 从 Https 开始复制到结束到一个新窗口进行获取验证码参数(CaptchaToken)
79+
![xunlei-login-review-error-1](/img/drivers/xunlei/pr8342/login-review-error-1.png)
8180

82-
看下图添加
81+
![xunlei-login-review-error-2](/img/drivers/xunlei/pr8342/login-review-error-2.png)
8382

84-
![xunlei](/img/drivers/xunlei/x2.png)
83+
### **登录验证的解决办法**
84+
85+
尽量使用电脑操作。
86+
87+
完整复制方框中的数据,从第一个 `{` 开始到最后一个 `}` 结束,例如:
88+
89+
```json
90+
{
91+
"creditkey": "",
92+
"reviewurl": "",
93+
"deviceid": "",
94+
"devicesign": ""
95+
}
96+
```
97+
98+
打开下面的网站:
99+
100+
`https://i.xunlei.com/xlcaptcha/android.html`
101+
102+
![xunlei-captcha-page-initial](/img/drivers/xunlei/pr8342/captcha-page-initial.png)
103+
104+
上图是刚打开的样子,注意这个验证码与挂载所需的验证无关。
105+
106+
打开浏览器控制台(F12),输入 `reviewCb(中间的参数为之前复制的数据)` 后回车,例如:
107+
108+
```js
109+
reviewCb({
110+
"creditkey": "",
111+
"reviewurl": "",
112+
"deviceid": "",
113+
"devicesign": ""
114+
})
115+
```
116+
117+
即可看到页面变成短信验证或智能检测:
118+
119+
![xunlei-reviewcb-console](/img/drivers/xunlei/pr8342/reviewcb-console.png)
120+
121+
![xunlei-sms-review](/img/drivers/xunlei/pr8342/sms-review.png)
122+
123+
![xunlei-smart-review](/img/drivers/xunlei/pr8342/smart-review.png)
124+
125+
完成短信验证,智能检测页面无需完成。这里不会跳转回 AList,且点击确定按钮后可能没有任何提示。
126+
127+
复制控制台中的 `creditkey`,并将其填回驱动配置的 `信任密钥(CreditKey)` 字段中,然后保存驱动配置。
128+
129+
![xunlei-creditkey-field](/img/drivers/xunlei/pr8342/creditkey-field.png)
85130

86131
<br/>
87132

@@ -117,7 +162,7 @@ flowchart TB
117162
### **登录类型**
118163

119164
1. 选择 `用户名` 时填用户名和密码
120-
- 用户名需要携带 `+86` 区号,例如 +86 13722223333 这样填写
165+
- 手机号可先直接填写 11 位手机号;如果登录失败,再尝试携带 `+86` 区号,例如 `+86 13722223333`
121166

122167

123168
2. 选择 `刷新令牌`时只需填写 `刷新令牌`
@@ -128,7 +173,7 @@ flowchart TB
128173

129174
### **签名类型**
130175

131-
选择 `算法` 时需填写 `算法`(比较难获取,需要逆向)
176+
选择 `算法` 时填写 `算法`,默认值已更新为当前驱动内置参数,一般保持默认即可
132177

133178
选择 `验证码签名` 时只需填写 `验证码签名``时间戳`
134179

@@ -151,54 +196,48 @@ CaptchaSign = "1." + str
151196

152197
### **设备ID**
153198

154-
通过 MD5 计算的值,用于判断登录的设备
199+
用于判断登录设备。留空时驱动会自动生成并保存;如果触发登录验证,建议保持同一个 `设备ID` 后再重试。
155200

156201
### **客户端ID, 客户端秘钥, 客户端版本, 包名**
157202

158-
与签名有关,根据实际情况填写
159-
160-
### **用户代理**
161-
162-
API 请求使用的 UserAgent,设置错误可能无法访问或限速
163-
164-
### **下载用户代理**
165-
166-
下载时用到的 User Agent,如果设置错误会无法下载(开启代理会使用) 固定参数:
203+
与签名和登录有关。默认值已更新为:
167204

168-
`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36`
169-
170-
<br/>
205+
- `客户端ID``Xp6vsxz_7IYVw2BB`
206+
- `客户端秘钥``Xp6vsy4tN9toTVdMSpomVdXpRmES`
207+
- `客户端版本``8.31.0.9726`
208+
- `包名``com.xunlei.downloadprovider`
171209

210+
一般保持默认即可。
172211

212+
### **用户代理**
173213

174-
## **关键数据获取流程**
175-
176-
通过网络分析工具(抓包工具)获取迅雷请求数据
214+
API 请求使用的 UserAgent,设置错误可能无法访问或限速。默认值已更新到 `ANDROID-com.xunlei.downloadprovider/8.31.0.9726 ... sdkVersion/512000 ...`
177215

178-
打开迅雷并登录账号(下图使用的是 PC 客户端来操作的,Web 端也可以)
216+
### **下载用户代理**
179217

180-
请求 https://xluser-ssl.xunlei.com/v1/shield/captcha/init 中包含
181-
CaptchaSign、Timestamp、DeviceID、ClientID、ClientVersion、PackageName、User-Agent
218+
下载时用到的 User Agent,如果设置错误可能无法下载或速度异常(开启代理会使用)。默认值:
182219

183-
注:获取好两张图信息后再慢慢的从抓到的两条数据内挑选数据填进去
220+
`Dalvik/2.1.0 (Linux; U; Android 12; M2004J7AC Build/SP1A.210812.016)`
184221

185-
登录迅雷 打开抓包工具后,这时候可能,不能立马获取到 `v1/shield/captcha/init` 的信息,
222+
### **信任密钥**
186223

187-
迅雷 PC 客户端 和抓包工具不要关闭,等待即可,**5 分钟左右** 就会自动刷新
224+
仅在触发登录验证时使用,处理方法同上方 [CaptchaToken / 信任密钥 / 设备ID](#captchatoken--信任密钥--设备id)。登录成功后驱动会清空该字段。
188225

189-
就会看到如下图的参数 照着获取填写即可(看不清的话可以右键复制图片链接到浏览器新开个窗口打开)
226+
<br/>
190227

191-
看到 `v1/shield/captcha/init` 抓取到后 请**立刻马上不要耽误一秒钟** 把迅雷在右下角任务栏的迅雷右键点击退出,彻底退出 然后重新打开 获取到**图二**
192228

193-
![xunlei](/img/drivers/xunlei/x4.png)
194229

195-
重启迅雷会刷新 token
230+
## **关键数据获取流程**
196231

197-
请求 https://xluser-ssl.xunlei.com/v1/auth/token 中包含 RefreshToken(请使用返回的值)、ClientSecret(web 端不存在)
232+
PR [#8342](https://github.com/AlistGo/alist/pull/8342) 后,`迅雷``迅雷专家版` 的账号密码登录流程已调整:
198233

199-
![xunlei](/img/drivers/xunlei/x5.png)
234+
1. 先调用 `https://xluser-ssl.xunlei.com/xluser.core.login/v3/login` 获取 `sessionID`
235+
2. 再调用 `https://xluser-ssl.xunlei.com/v1/auth/signin/token` 换取 AList 使用的登录令牌。
236+
3. 登录参数更新到迅雷 Android 客户端 `8.31.0.9726``sdkVersion/512000`
237+
4. 新增 `信任密钥(CreditKey)` 字段,用于处理登录验证。
238+
5. `迅雷` 普通版也支持自定义 `设备ID`
200239

201-
图一包含 **7 条** 参数 | 图一包含 **2 条** 参数 | 一条固定参数(Down UserAgent) ,十条参数 和 3 个选项 以及一个挂载路径,写好保存即可,保存前记得检查喔~~
240+
因此,旧文档中通过抓包 `v1/shield/captcha/init``v1/auth/token` 来获取 `CaptchaSign``Timestamp``RefreshToken` 等参数的流程已经过期。普通用户优先使用 `迅雷` 驱动,只填写用户名和密码;需要高级参数或自定义 UserAgent 时再使用 `迅雷专家版`
202241

203242
<br/>
204243

0 commit comments

Comments
 (0)