Python请求如何调用js函数来计算post之前的某个值？

Question

我使用要求（2.2.1）登录网址http://tx3.netease.com/logging.php?action=login，但这个网址的登录逻辑不同于Django的CSRF令牌机制，即：

1. 当你得到这个URL，有两个导入值为formhash和sts，它们都将用于js函数do_encrypt（文件http://tx3.netease.com/forumdata/cache/rsa/rsa_min.js）中。这很好，我可以很容易地抓住他们。

HTML文本的关键部分是：

<form method="post" name="login" id="loginform" class="s_clear" onsubmit="do_encrypt('ori_password','password');pwdclear = 1;" action="logging.php?action=login&amp;loginsubmit=yes"> 
<input type="hidden" name="formhash" value="91e54489" /> 
<input type="hidden" name="referer" value="http://tx3.netease.com/" /> 
<input type="hidden" name="sts" id="sts" value="1409414053" /> 
<input type="hidden" name="password" id="password" /> 
... 
<input type="password" id="ori_password" name="ori_password" onfocus="clearpwd()" onkeypress="detectCapsLock(event, this)" size="36" class="txt" tabindex="1" autocomplete="off" /> 
... 
</form> 

2.输入电子邮件和原始密码ori_password，点击提交按钮将调用do_encrypt，将使用formhash，sts和ori_password设置实时后邮政字典的密码password。问题出来 - 似乎没有办法直接得到password字符串。 （为了便于比较，你可以直接在Django的情况下获得csrfmiddlewaretoken从session_client.cookies['csrftoken']）

这是代码：

import requests 
import json 
import re 

loginUrl = "http://tx3.netease.com/logging.php?action=login" 

client = requests.session() 

r = client.get(loginUrl) 
r.encoding='gb18030' 

stsPat = re.compile('<input type="hidden" name="sts" id="sts" value="(\d+?)" />') 
formhashPat = re.compile('<input type="hidden" name="formhash" value="([\d\w]+?)" />') 

sts = stsPat.search(r.text).groups()[0] 
formhash = formhashPat.search(r.text).groups()[0] 


loginData={ 
    'username' : "smaller9@163.com", 
    'password' : ..., # Set by js function do_encrypt 
    'referer':'/', 
    'loginfield':'username', 
    'ori_password':'', # it's `111111`, but `do_encrypt` will set it to empty. 
    'loginsubmit':'true', 
    'sts':sts, 
    'formhash':formhash, 
    } 
# r = client.post(url=loginUrl,data=loginData) 

Answer 1

假设你有这样的权限，请尝试使用selenium登录，因为我认为这将是更符合你最终要做的事情。

from selenium import webdriver 

USERNAME = "foo@bar.com" 
PASSWORD = "superelite" 

# create a driver 
driver = webdriver.Firefox() 

# get the homepage 
driver.get("http://tx3.netease.com/logging.php?action=login") 

un_elm = driver.find_element_by_id("username") 
pw_elm = driver.find_element_by_id("ori_password") 
submit = driver.find_element_by_css_selector("[name=loginsubmit]") 

un_elm.send_keys(USERNAME) 
pw_elm.send_keys(PASSWORD) 

# click submit 
submit.click() 

# get the PHPSESSID cookie as that has your login data, if you want to use 
# it elsewhere 
# print driver.get_cookies(): 

# do something else ...