fix(doubao_new): update bizAuth api format

Signed-off-by: MadDogOwner <xiaoran@xrgzs.top>

Author: xrgzs

drivers/doubao_new/auth.go

@@ -17,6 +17,7 @@ import (
 	"time"
 
 	"github.com/OpenListTeam/OpenList/v4/drivers/base"
+	"github.com/OpenListTeam/OpenList/v4/pkg/cookie"
 	"github.com/go-resty/resty/v2"
 	"github.com/google/uuid"
 	"golang.org/x/crypto/pbkdf2"
@@ -28,6 +29,9 @@ const (
 	doubaoBizAuthClientID          = "cli_a872ee858eae100e"
 	doubaoBizAuthClientType        = "Lark"
 	doubaoBizAuthScope             = "internal"
+	doubaoBizAuthAid               = "497858"
+	doubaoBizAuthSDKSource         = "web"
+	doubaoBizAuthSDKVersion        = "2.2.11-doubao.0"
 )
 
 type Clock interface {
@@ -397,45 +401,45 @@ func shouldRefreshJWT(token string, aheadSeconds int64) bool {
 	return payload.Exp <= time.Now().Unix()+aheadSeconds
 }
 
-type bizAuthResp struct {
-	BaseResp
-	Data struct {
-		AccessToken string `json:"access_token"`
-		AuthScheme  string `json:"auth_scheme"`
-		ExpiresIn   int64  `json:"expires_in"`
-	} `json:"data"`
-}
-
-func (d *DoubaoNew) tryFetchBizAuth(urlStr, dpop string) (string, error) {
+func (d *DoubaoNew) fetchBizAuth(dpop string) (string, error) {
 	client := base.RestyClient.Clone()
 	req := client.R()
-	req.SetHeader("accept", "*/*")
+	req.SetHeader("accept", "application/json, text/javascript")
 	req.SetHeader("origin", DoubaoURL)
 	req.SetHeader("referer", DoubaoURL+"/")
-	req.SetHeader("content-type", "application/json")
-	req.SetHeader("cookie", d.Cookie)
+	req.SetHeader("content-type", "application/x-www-form-urlencoded")
+	if d.Cookie != "" {
+		req.SetHeader("cookie", d.Cookie)
+		if csrf := strings.TrimSpace(cookie.GetStr(d.Cookie, "passport_csrf_token")); csrf != "" {
+			req.SetHeader("x-tt-passport-csrf-token", csrf)
+		}
+	}
 	if oldAuth := d.resolveAuthorization(); oldAuth != "" {
 		req.SetHeader("authorization", oldAuth)
 	}
 	if dpop != "" {
 		req.SetHeader("dpop", dpop)
 	}
-	req.SetBody(base.Json{
-		"client_id":   doubaoBizAuthClientID,
-		"client_type": doubaoBizAuthClientType,
-		"scope":       doubaoBizAuthScope,
-		"d_pop":       dpop,
-	})
-
-	res, err := req.Post(urlStr)
+	values := url.Values{}
+	values.Set("client_id", doubaoBizAuthClientID)
+	values.Set("client_type", doubaoBizAuthClientType)
+	values.Set("scope", doubaoBizAuthScope)
+	values.Set("d_pop", dpop)
+	req.SetBody(values.Encode())
+	req.SetQueryParam("aid", doubaoBizAuthAid)
+	req.SetQueryParam("account_sdk_source", doubaoBizAuthSDKSource)
+	req.SetQueryParam("sdk_version", doubaoBizAuthSDKVersion)
+
+	res, err := req.Post(DoubaoURL + "/passport/user/biz_auth/")
 	if err != nil {
 		return "", err
 	}
 	var resp bizAuthResp
 	if err = json.Unmarshal(res.Body(), &resp); err != nil {
 		return "", err
 	}
-	if resp.Code != 0 || strings.TrimSpace(resp.Data.AccessToken) == "" {
+	ok := (resp.Code == 0 || strings.EqualFold(strings.TrimSpace(resp.Message), "success")) && strings.TrimSpace(resp.Data.AccessToken) != ""
+	if !ok {
 		msg := resp.Msg
 		if msg == "" {
 			msg = resp.Message
@@ -449,22 +453,14 @@ func (d *DoubaoNew) tryFetchBizAuth(urlStr, dpop string) (string, error) {
 }
 
 func (d *DoubaoNew) refreshAuthorizationWithDPoP(dpop string) (string, error) {
-	endpoints := []string{
-		"/passport/web/user/biz_auth/",
-		"/passport/web/user/anonymity_user_biz_auth/",
+	token, err := d.fetchBizAuth(dpop)
+	if err == nil && token != "" {
+		return token, nil
 	}
-	var lastErr error
-	for _, ep := range endpoints {
-		token, err := d.tryFetchBizAuth(DoubaoURL+ep, dpop)
-		if err == nil && token != "" {
-			return token, nil
-		}
-		lastErr = err
-	}
-	if lastErr == nil {
-		lastErr = errors.New("biz auth refresh failed")
+	if err == nil {
+		err = errors.New("biz auth refresh failed")
 	}
-	return "", lastErr
+	return "", err
 }
 
 func (d *DoubaoNew) resolveDPoPKeyPair() (*ecdsa.PrivateKey, error) {

drivers/doubao_new/types.go

@@ -180,3 +180,13 @@ type TaskStatusData struct {
 	IsFinish bool `json:"is_finish"`
 	IsFail   bool `json:"is_fail"`
 }
+
+type bizAuthResp struct {
+	BaseResp
+	Data struct {
+		AccessToken string `json:"access_token"`
+		AuthScheme  string `json:"auth_scheme"`
+		ExpiresIn   int64  `json:"expires_in"`
+	} `json:"data"`
+	Message string `json:"message"`
+}