vps-panel.js 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353
  1. // content/vps-panel.js — Content script for CPA panel (steps 1, 9)
  2. // Injected on: CPA panel (user-configured URL)
  3. //
  4. // Actual DOM structure (after login click):
  5. // <div class="card">
  6. // <div class="card-header">
  7. // <span class="OAuthPage-module__cardTitle___yFaP0">Codex OAuth</span>
  8. // <button class="btn btn-primary"><span>登录</span></button>
  9. // </div>
  10. // <div class="OAuthPage-module__cardContent___1sXLA">
  11. // <div class="OAuthPage-module__authUrlBox___Iu1d4">
  12. // <div class="OAuthPage-module__authUrlLabel___mYFJB">授权链接:</div>
  13. // <div class="OAuthPage-module__authUrlValue___axvUJ">https://auth.openai.com/...</div>
  14. // <div class="OAuthPage-module__authUrlActions___venPj">
  15. // <button class="btn btn-secondary btn-sm"><span>复制链接</span></button>
  16. // <button class="btn btn-secondary btn-sm"><span>打开链接</span></button>
  17. // </div>
  18. // </div>
  19. // <div class="OAuthPage-module__callbackSection___8kA31">
  20. // <input class="input" placeholder="http://localhost:1455/auth/callback?code=...&state=...">
  21. // <button class="btn btn-secondary btn-sm"><span>提交回调 URL</span></button>
  22. // </div>
  23. // </div>
  24. // </div>
  25. console.log('[MultiPage:vps-panel] Content script loaded on', location.href);
  26. // Listen for commands from Background
  27. chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
  28. if (message.type === 'EXECUTE_STEP') {
  29. resetStopState();
  30. handleStep(message.step, message.payload).then(() => {
  31. sendResponse({ ok: true });
  32. }).catch(err => {
  33. if (isStopError(err)) {
  34. log(`步骤 ${message.step}:已被用户停止。`, 'warn');
  35. sendResponse({ stopped: true, error: err.message });
  36. return;
  37. }
  38. reportError(message.step, err.message);
  39. sendResponse({ error: err.message });
  40. });
  41. return true;
  42. }
  43. });
  44. async function handleStep(step, payload) {
  45. switch (step) {
  46. case 1: return await step1_getOAuthLink(payload);
  47. case 9: return await step9_vpsVerify(payload);
  48. default:
  49. throw new Error(`vps-panel.js 不处理步骤 ${step}`);
  50. }
  51. }
  52. function isVisibleElement(el) {
  53. if (!el) return false;
  54. const style = window.getComputedStyle(el);
  55. const rect = el.getBoundingClientRect();
  56. return style.display !== 'none'
  57. && style.visibility !== 'hidden'
  58. && rect.width > 0
  59. && rect.height > 0;
  60. }
  61. function getActionText(el) {
  62. return [
  63. el?.textContent,
  64. el?.value,
  65. el?.getAttribute?.('aria-label'),
  66. el?.getAttribute?.('title'),
  67. ]
  68. .filter(Boolean)
  69. .join(' ')
  70. .replace(/\s+/g, ' ')
  71. .trim();
  72. }
  73. function getStatusBadgeElement() {
  74. const selectors = [
  75. '#root > div > div > div > main > div > div > div > div > div:nth-child(1) > div > div.OAuthPage-module__cardContent___1sXLA > div.status-badge',
  76. '#root .OAuthPage-module__cardContent___1sXLA > .status-badge',
  77. '.OAuthPage-module__cardContent___1sXLA > .status-badge',
  78. '.status-badge',
  79. ];
  80. for (const selector of selectors) {
  81. const candidates = document.querySelectorAll(selector);
  82. const visible = Array.from(candidates).find(isVisibleElement);
  83. if (visible) return visible;
  84. }
  85. return null;
  86. }
  87. function getStatusBadgeText() {
  88. const statusEl = getStatusBadgeElement();
  89. return statusEl ? (statusEl.textContent || '').replace(/\s+/g, ' ').trim() : '';
  90. }
  91. function isOAuthCallbackTimeoutFailure(statusText) {
  92. return /认证失败:\s*Timeout waiting for OAuth callback/i.test(statusText || '');
  93. }
  94. async function waitForExactSuccessBadge(timeout = 30000) {
  95. const start = Date.now();
  96. while (Date.now() - start < timeout) {
  97. throwIfStopped();
  98. const statusText = getStatusBadgeText();
  99. if (statusText === '认证成功!') {
  100. return statusText;
  101. }
  102. await sleep(200);
  103. }
  104. const finalText = getStatusBadgeText();
  105. if (isOAuthCallbackTimeoutFailure(finalText)) {
  106. throw new Error(`STEP9_OAUTH_TIMEOUT::${finalText}`);
  107. }
  108. throw new Error(finalText
  109. ? `CPA 面板状态不是“认证成功!”,当前为“${finalText}”。`
  110. : 'CPA 面板长时间未出现“认证成功!”状态徽标。');
  111. }
  112. function findManagementKeyInput() {
  113. const candidates = document.querySelectorAll(
  114. '.LoginPage-module__loginCard___OgP-R input[type="password"], input[placeholder*="管理密钥"], input[aria-label*="管理密钥"]'
  115. );
  116. return Array.from(candidates).find(isVisibleElement) || null;
  117. }
  118. function findManagementLoginButton() {
  119. const candidates = document.querySelectorAll('.LoginPage-module__loginCard___OgP-R button, .LoginPage-module__loginCard___OgP-R .btn');
  120. return Array.from(candidates).find((el) => {
  121. if (!isVisibleElement(el)) return false;
  122. return /登录|login/i.test(getActionText(el));
  123. }) || null;
  124. }
  125. function findRememberPasswordCheckbox() {
  126. const candidates = document.querySelectorAll('.LoginPage-module__loginCard___OgP-R input[type="checkbox"]');
  127. return Array.from(candidates).find((el) => {
  128. const label = el.closest('label');
  129. const text = getActionText(label || el);
  130. return /记住密码|remember/i.test(text);
  131. }) || null;
  132. }
  133. function findOAuthNavLink() {
  134. const candidates = document.querySelectorAll('a[href*="#/oauth"], a.nav-item, button, [role="link"], [role="button"]');
  135. return Array.from(candidates).find((el) => {
  136. if (!isVisibleElement(el)) return false;
  137. const text = getActionText(el);
  138. const href = el.getAttribute('href') || '';
  139. return href.includes('#/oauth') || /oauth/i.test(text);
  140. }) || null;
  141. }
  142. function findCodexOAuthHeader() {
  143. const candidates = document.querySelectorAll('.card-header, [class*="cardHeader"], .card, [class*="card"]');
  144. return Array.from(candidates).find((el) => {
  145. if (!isVisibleElement(el)) return false;
  146. const text = (el.textContent || '').toLowerCase();
  147. return text.includes('codex') && text.includes('oauth');
  148. }) || null;
  149. }
  150. function findOAuthCardLoginButton(header) {
  151. const card = header?.closest('.card, [class*="card"]') || header?.parentElement || document;
  152. const candidates = card.querySelectorAll('button.btn.btn-primary, button.btn-primary, button.btn');
  153. return Array.from(candidates).find((el) => isVisibleElement(el) && /登录|login/i.test(getActionText(el))) || null;
  154. }
  155. function findAuthUrlElement() {
  156. const candidates = document.querySelectorAll('[class*="authUrlValue"], .OAuthPage-module__authUrlValue___axvUJ');
  157. return Array.from(candidates).find((el) => isVisibleElement(el) && /^https?:\/\//i.test((el.textContent || '').trim())) || null;
  158. }
  159. async function ensureOAuthManagementPage(vpsPassword, step = 1, timeout = 45000) {
  160. const start = Date.now();
  161. let lastLoginAttemptAt = 0;
  162. let lastOauthNavAttemptAt = 0;
  163. while (Date.now() - start < timeout) {
  164. throwIfStopped();
  165. const authUrlEl = findAuthUrlElement();
  166. if (authUrlEl) {
  167. return { header: findCodexOAuthHeader(), authUrlEl };
  168. }
  169. const oauthHeader = findCodexOAuthHeader();
  170. if (oauthHeader) {
  171. return { header: oauthHeader, authUrlEl: null };
  172. }
  173. const managementKeyInput = findManagementKeyInput();
  174. const managementLoginButton = findManagementLoginButton();
  175. if (managementKeyInput && managementLoginButton) {
  176. if (!vpsPassword) {
  177. throw new Error('CPA 面板需要管理密钥,请先在侧边栏填写 CPA Key(管理密钥)。');
  178. }
  179. if ((managementKeyInput.value || '') !== vpsPassword) {
  180. await humanPause(350, 900);
  181. fillInput(managementKeyInput, vpsPassword);
  182. log(`步骤 ${step}:已填写 CPA 管理密钥。`);
  183. }
  184. const rememberCheckbox = findRememberPasswordCheckbox();
  185. if (rememberCheckbox && !rememberCheckbox.checked) {
  186. simulateClick(rememberCheckbox);
  187. log(`步骤 ${step}:已勾选 CPA 面板“记住密码”。`);
  188. await sleep(300);
  189. }
  190. if (Date.now() - lastLoginAttemptAt > 3000) {
  191. lastLoginAttemptAt = Date.now();
  192. await humanPause(350, 900);
  193. simulateClick(managementLoginButton);
  194. log(`步骤 ${step}:已提交 CPA 管理登录。`);
  195. }
  196. await sleep(1500);
  197. continue;
  198. }
  199. const oauthNavLink = findOAuthNavLink();
  200. if (oauthNavLink && Date.now() - lastOauthNavAttemptAt > 2000) {
  201. lastOauthNavAttemptAt = Date.now();
  202. await humanPause(300, 800);
  203. simulateClick(oauthNavLink);
  204. log(`步骤 ${step}:已打开“OAuth 登录”导航。`);
  205. await sleep(1200);
  206. continue;
  207. }
  208. await sleep(250);
  209. }
  210. throw new Error('无法进入 CPA 的 OAuth 管理页面,请检查面板是否正常加载。URL: ' + location.href);
  211. }
  212. // ============================================================
  213. // Step 1: Get OAuth Link
  214. // ============================================================
  215. async function step1_getOAuthLink(payload) {
  216. const { vpsPassword } = payload || {};
  217. log('步骤 1:正在等待 CPA 面板加载并进入 OAuth 页面...');
  218. const { header, authUrlEl: existingAuthUrlEl } = await ensureOAuthManagementPage(vpsPassword, 1);
  219. let authUrlEl = existingAuthUrlEl;
  220. if (!authUrlEl) {
  221. const loginBtn = findOAuthCardLoginButton(header);
  222. if (!loginBtn) {
  223. throw new Error('已找到 Codex OAuth 卡片,但卡片内没有登录按钮。URL: ' + location.href);
  224. }
  225. if (loginBtn.disabled) {
  226. log('步骤 1:OAuth 登录按钮当前不可用,正在等待授权链接出现...');
  227. } else {
  228. await humanPause(500, 1400);
  229. simulateClick(loginBtn);
  230. log('步骤 1:已点击 OAuth 登录按钮,正在等待授权链接...');
  231. }
  232. try {
  233. authUrlEl = await waitForElement('[class*="authUrlValue"]', 15000);
  234. } catch {
  235. throw new Error(
  236. '点击 OAuth 登录按钮后未出现授权链接。' +
  237. '请检查 CPA 面板服务是否正在运行。URL: ' + location.href
  238. );
  239. }
  240. } else {
  241. log('步骤 1:CPA 面板上已显示授权链接。');
  242. }
  243. const oauthUrl = (authUrlEl.textContent || '').trim();
  244. if (!oauthUrl || !oauthUrl.startsWith('http')) {
  245. throw new Error(`拿到的 OAuth 链接无效:\"${oauthUrl.slice(0, 50)}\"。应为 http 开头的 URL。`);
  246. }
  247. log(`步骤 1:已获取 OAuth 链接:${oauthUrl.slice(0, 80)}...`, 'ok');
  248. reportComplete(1, { oauthUrl });
  249. }
  250. // ============================================================
  251. // Step 9: CPA Verify — paste localhost URL and submit
  252. // ============================================================
  253. async function step9_vpsVerify(payload) {
  254. await ensureOAuthManagementPage(payload?.vpsPassword, 9);
  255. // Get localhostUrl from payload (passed directly by background) or fallback to state
  256. let localhostUrl = payload?.localhostUrl;
  257. if (!localhostUrl) {
  258. log('步骤 9:payload 中没有 localhostUrl,正在从状态中读取...');
  259. const state = await chrome.runtime.sendMessage({ type: 'GET_STATE' });
  260. localhostUrl = state.localhostUrl;
  261. }
  262. if (!localhostUrl) {
  263. throw new Error('未找到 localhost 回调地址,请先完成步骤 8。');
  264. }
  265. log(`步骤 9:已获取 localhostUrl:${localhostUrl.slice(0, 60)}...`);
  266. log('步骤 9:正在查找回调地址输入框...');
  267. // Find the callback URL input
  268. // Actual DOM: <input class="input" placeholder="http://localhost:1455/auth/callback?code=...&state=...">
  269. let urlInput = null;
  270. try {
  271. urlInput = await waitForElement('[class*="callbackSection"] input.input', 10000);
  272. } catch {
  273. try {
  274. urlInput = await waitForElement('input[placeholder*="localhost"]', 5000);
  275. } catch {
  276. throw new Error('在 CPA 面板中未找到回调地址输入框。URL: ' + location.href);
  277. }
  278. }
  279. await humanPause(600, 1500);
  280. fillInput(urlInput, localhostUrl);
  281. log(`步骤 9:已填写回调地址:${localhostUrl.slice(0, 80)}...`);
  282. // Find and click "提交回调 URL" button
  283. let submitBtn = null;
  284. try {
  285. submitBtn = await waitForElementByText(
  286. '[class*="callbackActions"] button, [class*="callbackSection"] button',
  287. /提交/,
  288. 5000
  289. );
  290. } catch {
  291. try {
  292. submitBtn = await waitForElementByText('button.btn', /提交回调/, 5000);
  293. } catch {
  294. throw new Error('未找到“提交回调 URL”按钮。URL: ' + location.href);
  295. }
  296. }
  297. await humanPause(450, 1200);
  298. simulateClick(submitBtn);
  299. log('步骤 9:已点击“提交回调 URL”,正在等待认证结果...');
  300. const verifiedStatus = await waitForExactSuccessBadge();
  301. log(`步骤 9:${verifiedStatus}`, 'ok');
  302. reportComplete(9, { localhostUrl, verifiedStatus });
  303. }