gogogo2000 发表于 2024-5-29 14:14
$input值依然是不对的，它并不是直接把keyvalue拼起来组成的,而是拼起来的hash加requestid等其他值组成的
...
大佬，您前面说 “yspsdkinput并不是hash后的input，而是hash前的原始input” ，而现在说“它并不是直接把keyvalue拼起来组成的,而是拼起来的hash加requestid等其他值组成的”。请问hash前的原始input应该就是keyvalue拼起来组成的吧？ 我有点搞糊涂了{:4_88:}
我试了下确实对不上，应该是你抓包的token是错的，不过你的input是对的
本帖最后由 tvzbiptv 于 2024-5-30 09:27 编辑
token:$token2;
("guid=${YSP.getGuid()}; $cookie","519748109", YSP.getGuid(),"59306155", "b42702bf7309a179d102f3d51b1add2fda0bc7ada64cb801" ,"1", YSP.getTimeStr())
本帖最后由 redsun168 于 2024-5-29 17:48 编辑
gogogo2000 发表于 2024-5-29 17:05
我试了下确实对不上，应该是你抓包的token是错的，不过你的input是对的
抓包没有错，下面有图片(现在时间失效，curl会返回空）
curl 'https://player-api.yangshipin.cn/v1/player/get_live_info' \
-H 'accept: application/json, text/plain, */*' \
-H 'accept-language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6' \
-H 'content-type: application/json;charset=UTF-8' \
-H 'cookie: guid=lw1fm22t_tspy5xw0p9k; versionName=99.99.99; versionCode=999999; vplatform=109; platformVersion=Chrome; deviceModel=125; newLogin=1; nseqId=46; nrequest-id=999999iFY3l8BFVb1716973901291' \
-H 'dnt: 1' \
-H 'origin: https://www.yangshipin.cn' \
-H 'priority: u=1, i' \
-H 'referer: https://www.yangshipin.cn/' \
-H 'request-id: 999999iFY3l8BFVb1716973901291' \
-H 'sec-ch-ua: "Microsoft Edge";v="125", "Chromium";v="125", "Not.A/Brand";v="24"' \
-H 'sec-ch-ua-mobile: ?0' \
-H 'sec-ch-ua-platform: "Windows"' \
-H 'sec-fetch-dest: empty' \
-H 'sec-fetch-mode: cors' \
-H 'sec-fetch-site: same-site' \
-H 'seqid: 46' \
-H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0' \
-H 'yspappid: 519748109' \
-H 'yspplayertoken: /i1eNZrMnk5SA3h3GYi6r/w2F5ydvurBzwCTT/d3eQOPP/sZNvPJIIOjWono8b593eZaums11GKlso9VvX003Kl30tqIk573hwkE1xFLcIc' \
-H 'yspsdkinput: c55447cc8f9e896aac046413c8ed9a42' \
-H 'yspsdksign: ed18c2e8c5e228813fabe4c72a9270a7' \
--data-raw '{"cnlid":"2022576801","livepid":"600001859","stream":"2","guid":"lw1fm22t_tspy5xw0p9k","cKey":"--010B198E3670BC9E8F5D0492BDD7666A62B7866AE8D705DF80BF9AC7578B4598CC6DA2375BDB9AC6C0D28B44141E5127D68A808B07E0275343573CB62167C7750ECF0F7EC01EA846236CF6B54096C6EEC59EE3C65F945CE5B905E28059C579B5BAFCE9983AA584875B2F21BE81E89FD445A5A3E9DCAB202000DEA16512F22CA2D1F5493D58B858CE8D247E2C6B94B1FE44206D5300FA3ACBA0C4F2E1E158F4E727","adjust":1,"sphttps":"1","platform":"5910204","cmd":"2","encryptVer":"8.1","dtype":"1","devid":"devid","otype":"ojson","appVer":"V1.0.0","app_version":"V1.0.0","channel":"ysp_tx","defn":"fhd","rand_str":"tNkUAd5MlJ","signature":"fab7ce7a290cafc20567209cda247418"}'
抓包图片
tvzbiptv 发表于 2024-5-29 17:17
token:$token2;
https://github.com/lizongying/my-tv/blob/JELLY_BEAN_MR1/app/src/main/java/com/lizongy ...
看不出token2的算法 ：
package com.lizongying.mytv.api
data class Token2(
val ret: Int?,
val msg: String?,
val data: Data,
) {
data class Data(
val token: String,
)
}
签名中的token并不是这个playtoken
浏览器输入http://*****/ysp.php?id=cctv1你编辑的源代码 提示什么error呢
要感谢各位大佬，辛苦了
本帖最后由 tvzbiptv 于 2024-5-31 09:41 编辑
滴答滴答
tvzbiptv 发表于 2024-5-31 05:54
gr_user_id=1;
Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, Accept,...
请问yspticket的算法呢？
tqx5201 发表于 2024-5-26 08:19
找到获取yspplayertoken的代码
Sc="ysp_tx",Ec=window.location.href.indexOf("test=on")>-1?"62fb5e14f24 ...
请问这个代码是哪里获取到的？ 现在获取token的盐又变了