feat(python): 完成 Python 全量迁移——剩余平台、登录通道与公共层修复

- 新增 5sing/apple/xm/me/qt/lr 平台包与取流实现（含 xm-sign、MissEvan 签名、蜻蜓 HMAC、Apple developer token） - 新增 wy/kg/tx/lr 登录：扫码、手机号、账密（kg 20028 风控指纹）、cookie 绑定、kg/tx 续期 - request 层：保留多值 Set-Cookie；JSON body 紧凑化（修复 kg 网关验签）；直连不经系统代理（对齐 Node） - 登录路由统一 Body(embed=True)，修复扫码轮询 422；lifespan 接入登录续期调度 - ruff/format/pyright 全绿；14 平台真实联网与 HTTP 路由验证通过
2026-10-23 21:55:45 +08:00
1 parent 800871ef6e
commit dfc06bf4de
@@ -0,0 +1,130 @@
+"""登录态存储 —— 各平台凭据持久化（data/auth.json，不入库）。
+
+结构：{ wy: {...}, kg: {...}, tx: {...}, _kg_device: {...} }
+
+凭据是明文敏感数据：文件以 0600 创建；写入走「同目录临时文件 + 原子替换」，
+避免写中途崩溃留下截断 JSON（那会导致下次启动解析失败而丢掉全部平台凭据）。
+DATA_DIR 环境变量可覆盖存储目录（测试用，避免污染真实登录态）。
+"""
+
+from __future__ import annotations
+
+import json
+import os
+import threading
+import time
+from datetime import UTC
+from typing import Any
+
+from app.config import data_dir
+
+_lock = threading.Lock()
+_cache: dict[str, Any] = {}
+_loaded = False
+
+
+def _data_file():
+    return data_dir() / "auth.json"
+
+
+def _load() -> dict[str, Any]:
+    global _cache, _loaded
+    if _loaded:
+        return _cache
+    path = _data_file()
+    if not path.exists():
+        _cache = {}
+        _loaded = True
+        return _cache
+    try:
+        _cache = json.loads(path.read_text(encoding="utf-8"))
+    except (ValueError, OSError) as err:
+        # 解析失败绝不能静默清空：先改名备份，让残留凭据仍可人工抢救；
+        # 否则下一次 set_credentials 就会用空表覆盖掉本可恢复的文件。
+        backup = path.with_name(f"{path.name}.corrupt-{int(time.time() * 1000)}")
+        try:
+            path.rename(backup)
+            print(f"[auth/store] {path} 解析失败，已备份为 {backup}，本次以空凭据启动: {err}")
+        except OSError:
+            print(f"[auth/store] {path} 解析失败且备份未成功，本次以空凭据启动: {err}")
+        _cache = {}
+    _loaded = True
+    return _cache
+
+
+def _save(data: dict[str, Any]) -> None:
+    global _cache, _loaded
+    _cache = data
+    _loaded = True
+    path = _data_file()
+    path.parent.mkdir(parents=True, exist_ok=True)
+    tmp = path.with_name(f"{path.name}.{os.getpid()}.tmp")
+    try:
+        fd = os.open(tmp, os.O_WRONLY | os.O_CREAT | os.O_TRUNC, 0o600)
+        with os.fdopen(fd, "w", encoding="utf-8") as handle:
+            handle.write(json.dumps(data, ensure_ascii=False, indent=2))
+        os.replace(tmp, path)
+    except OSError:
+        try:
+            tmp.unlink()
+        except OSError:
+            pass
+        raise
+
+
+def get_credentials(platform: str) -> dict[str, Any] | None:
+    with _lock:
+        return _load().get(platform)
+
+
+def set_credentials(platform: str, credentials: dict[str, Any]) -> None:
+    with _lock:
+        data = _load()
+        merged = {**data.get(platform, {}), **credentials, "updatedAt": _iso_now()}
+        data[platform] = merged
+        _save(data)
+
+
+def clear_credentials(platform: str) -> None:
+    with _lock:
+        data = _load()
+        data.pop(platform, None)
+        _save(data)
+
+
+def _iso_now() -> str:
+    from datetime import datetime
+
+    return datetime.now(UTC).isoformat(timespec="milliseconds").replace("+00:00", "Z")
+
+
+# ---- 各平台便捷读法（未登录返回空值，与原文一致） ----
+
+
+def get_wy_cookie() -> str:
+    cred = get_credentials("wy") or {}
+    return str(cred.get("cookie") or "")
+
+
+def get_kg_auth() -> dict[str, Any] | None:
+    cred = get_credentials("kg") or {}
+    if not cred.get("token"):
+        return None
+    return {"token": cred["token"], "userid": cred.get("userid") or 0}
+
+
+def get_tx_auth() -> dict[str, Any] | None:
+    import re
+
+    cred = get_credentials("tx") or {}
+    cookie = str(cred.get("cookie") or "")
+    if not cookie:
+        return None
+    match = re.search(r"uin=(\d+)", cookie)
+    return {"cookie": cookie, "uin": match.group(1) if match else "0"}
+
+
+def get_cookie(platform: str) -> str:
+    """通用 cookie 读取（xm/me/lr/mg/bd/joox/apple/5sing 等）。"""
+    cred = get_credentials(platform) or {}
+    return str(cred.get("cookie") or "").strip()