91 lines
2.9 KiB
Python
91 lines
2.9 KiB
Python
|
#!/usr/bin/env python3
|
|||
|
|
"""生产最终冒烟：SPA 资源 + 登录链路（错误凭据）+ 清理本次产生的失败计数键"""
|
|||
|
|
import json
|
|||
|
|
import socket
|
|||
|
|
import urllib.error
|
|||
|
|
import urllib.request
|
|||
|
|
from urllib.parse import unquote, urlparse
|
|||
|
|
|
|||
|
|
DOMAIN = "https://app.anzhizhichong.com"
|
|||
|
|
ENV_FILE = "/data/pms/api-server/.env"
|
|||
|
|
FAKE_PHONE = "00000000000"
|
|||
|
|
|
|||
|
|
|
|||
|
|
def env(name):
|
|||
|
|
with open(ENV_FILE) as fh:
|
|||
|
|
for line in fh:
|
|||
|
|
if line.startswith(name + "="):
|
|||
|
|
return line.split("=", 1)[1].strip()
|
|||
|
|
raise SystemExit(f"{name} missing")
|
|||
|
|
|
|||
|
|
|
|||
|
|
class Redis:
|
|||
|
|
def __init__(self, url):
|
|||
|
|
u = urlparse(url)
|
|||
|
|
self.sock = socket.create_connection((u.hostname, u.port or 6379), timeout=5)
|
|||
|
|
self.fh = self.sock.makefile("rwb")
|
|||
|
|
if u.password:
|
|||
|
|
self.cmd("AUTH", unquote(u.password))
|
|||
|
|
self.cmd("SELECT", str(int((u.path or "/0").lstrip("/") or 0)))
|
|||
|
|
|
|||
|
|
def _reply(self):
|
|||
|
|
line = self.fh.readline()
|
|||
|
|
if line.startswith(b"$"):
|
|||
|
|
n = int(line[1:])
|
|||
|
|
return None if n == -1 else self.fh.read(n + 2)[:-2].decode()
|
|||
|
|
return line.strip().decode()
|
|||
|
|
|
|||
|
|
def cmd(self, *args):
|
|||
|
|
out = b"*%d\r\n" % len(args)
|
|||
|
|
for a in args:
|
|||
|
|
a = a.encode() if isinstance(a, str) else a
|
|||
|
|
out += b"$%d\r\n%s\r\n" % (len(a), a)
|
|||
|
|
self.fh.write(out)
|
|||
|
|
self.fh.flush()
|
|||
|
|
return self._reply()
|
|||
|
|
|
|||
|
|
|
|||
|
|
def http(method, path, data=None, headers=None):
|
|||
|
|
req = urllib.request.Request(DOMAIN + path, data=data, method=method)
|
|||
|
|
for k, v in (headers or {}).items():
|
|||
|
|
req.add_header(k, v)
|
|||
|
|
try:
|
|||
|
|
with urllib.request.urlopen(req, timeout=20) as resp:
|
|||
|
|
return resp.status, dict(resp.headers), resp.read()
|
|||
|
|
except urllib.error.HTTPError as exc:
|
|||
|
|
return exc.code, dict(exc.headers), exc.read()
|
|||
|
|
|
|||
|
|
|
|||
|
|
def main():
|
|||
|
|
st, _, body = http("GET", "/pms/")
|
|||
|
|
print(f"[SPA] GET /pms/ -> {st} bytes={len(body)}")
|
|||
|
|
asset = None
|
|||
|
|
for token in body.decode(errors="ignore").split('"'):
|
|||
|
|
if token.startswith("/pms/assets/") and token.endswith(".js"):
|
|||
|
|
asset = token
|
|||
|
|
break
|
|||
|
|
if asset:
|
|||
|
|
st, _, blob = http("GET", asset)
|
|||
|
|
print(f"[SPA] GET {asset} -> {st} bytes={len(blob)}")
|
|||
|
|
|
|||
|
|
st, _, body = http("GET", "/api/pms/auth/challenge")
|
|||
|
|
print(f"[login] GET /api/pms/auth/challenge -> {st} (JSON 长度 {len(body)})")
|
|||
|
|
|
|||
|
|
st, _, body = http(
|
|||
|
|
"POST",
|
|||
|
|
"/api/pms/auth/login",
|
|||
|
|
json.dumps({"phone": FAKE_PHONE, "password": "x", "challenge_id": "", "captcha_x": 0}).encode(),
|
|||
|
|
{"Content-Type": "application/json"},
|
|||
|
|
)
|
|||
|
|
print(f"[login] POST /api/pms/auth/login（无 challenge）-> {st} {body.decode()[:120]}")
|
|||
|
|
|
|||
|
|
redis = Redis(env("REDIS_URL"))
|
|||
|
|
for key in (f"auth:fail:phone:{FAKE_PHONE}", "auth:fail:ip:unknown"):
|
|||
|
|
redis.cmd("DEL", key)
|
|||
|
|
print("[cleanup] 清理测试产生的 Redis 计数键完成")
|
|||
|
|
return 0
|
|||
|
|
|
|||
|
|
|
|||
|
|
if __name__ == "__main__":
|
|||
|
|
raise SystemExit(main())
|