liuq
/
simple_navigation_page


			
				
					
						
						
							12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031
							import express from 'express';
import cors from 'cors';
import axios from 'axios';
import nodeRSA from 'node-rsa';
import cookieParser from 'cookie-parser';
import { readFileSync } from 'fs';
import { fileURLToPath } from 'url';
import { dirname, join } from 'path';
import { CookieJar } from 'tough-cookie';
import { wrapper } from 'axios-cookiejar-support';

// node-rsa 是 CommonJS 模块，需要使用默认导入
const NodeRSA = nodeRSA;

const __filename = fileURLToPath(import.meta.url);
const __dirname = dirname(__filename);

const app = express();
const PORT = process.env.PORT || 8889;

// 中间件
app.use(cors({
  origin: true,
  credentials: true
}));
app.use(express.json());
app.use(express.urlencoded({ extended: true }));
app.use(cookieParser());

// 请求日志中间件（用于调试）
app.use((req, res, next) => {
  console.log(`[请求] ${req.method} ${req.path} - ${new Date().toISOString()}`);
  next();
});

// 加载自动登录配置
let autoLoginConfig = {};
try {
  const configPath = join(__dirname, 'auto-login-config.json');
  console.log('正在加载自动登录配置文件:', configPath);
  const configData = readFileSync(configPath, 'utf-8');
  autoLoginConfig = JSON.parse(configData);
  console.log('✓ 已加载自动登录配置');
  console.log('  配置的网站数量:', Object.keys(autoLoginConfig).length);
  console.log('  网站列表:', Object.keys(autoLoginConfig).join(', '));
  Object.keys(autoLoginConfig).forEach(siteId => {
    const site = autoLoginConfig[siteId];
    console.log(`  - ${siteId}: ${site.name} (${site.loginMethod})`);
  });
} catch (error) {
  console.error('✗ 加载自动登录配置失败:', error.message);
  console.error('  错误堆栈:', error.stack);
  console.log('将使用默认配置');
}

// RSA 加密函数
// 注意：JSEncrypt 使用 PKCS1 填充，需要匹配
function encryptWithRSA(text, publicKey) {
  try {
    const key = new NodeRSA(publicKey, 'public', {
      encryptionScheme: 'pkcs1'  // 使用 PKCS1 填充，与 JSEncrypt 兼容
    });
    const encrypted = key.encrypt(text, 'base64');
    console.log(`RSA加密: "${text}" -> 长度 ${encrypted.length}`);
    return encrypted;
  } catch (error) {
    console.error('RSA加密失败:', error.message);
    throw error;
  }
}

// 解析 Cookie
function parseCookies(setCookieHeaders) {
  return setCookieHeaders.map(cookie => {
    const match = cookie.match(/^([^=]+)=([^;]+)/);
    if (match) {
      const name = match[1];
      const value = match[2];
      
      // 提取其他属性
      const pathMatch = cookie.match(/Path=([^;]+)/);
      const expiresMatch = cookie.match(/Expires=([^;]+)/);
      const maxAgeMatch = cookie.match(/Max-Age=([^;]+)/);
      const httpOnlyMatch = cookie.match(/HttpOnly/);
      const secureMatch = cookie.match(/Secure/);
      const sameSiteMatch = cookie.match(/SameSite=([^;]+)/);
      
      return {
        name,
        value,
        path: pathMatch ? pathMatch[1] : '/',
        expires: expiresMatch ? expiresMatch[1] : null,
        maxAge: maxAgeMatch ? maxAgeMatch[1] : null,
        httpOnly: !!httpOnlyMatch,
        secure: !!secureMatch,
        sameSite: sameSiteMatch ? sameSiteMatch[1] : null
      };
    }
    return null;
  }).filter(Boolean);
}

// 生成跳转 HTML
function generateRedirectHTML(cookieData, targetHost, targetDomain, requestId = '', customUrl = null, homeAssistantData = null) {
  const targetUrl = customUrl || `http://${targetHost}/`;
  const isHomeAssistant = homeAssistantData !== null;
  
  return `
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>自动登录中...</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
            background: linear-gradient(135deg, #f5f7fa 0%, #c3cfe2 100%);
        }
        .loading {
            text-align: center;
        }
        .spinner {
            border: 4px solid #f3f3f3;
            border-top: 4px solid #3498db;
            border-radius: 50%;
            width: 50px;
            height: 50px;
            animation: spin 1s linear infinite;
            margin: 0 auto 20px;
        }
        @keyframes spin {
            0% { transform: rotate(0deg); }
            100% { transform: rotate(360deg); }
        }
        .message {
            color: #333;
            font-size: 18px;
        }
    </style>
</head>
<body>
    <div class="loading">
        <div class="spinner"></div>
        <div class="message">正在自动登录，请稍候...</div>
    </div>
    <iframe id="cookieFrame" style="display:none;"></iframe>
    <script>
        (function() {
            const requestId = '${requestId}';
            const cookies = ${JSON.stringify(cookieData)};
            const targetUrl = '${targetUrl}';
            const targetDomain = '${targetDomain}';
            const isHomeAssistant = ${isHomeAssistant};
            const homeAssistantData = ${homeAssistantData ? JSON.stringify(homeAssistantData) : 'null'};
            
            console.log('========================================');
            console.log('[浏览器端] 自动登录脚本开始执行');
            console.log('[浏览器端] 请求ID:', requestId);
            console.log('[浏览器端] 目标URL:', targetUrl);
            console.log('[浏览器端] 目标域名:', targetDomain);
            console.log('[浏览器端] Cookie 数量:', cookies.length);
            console.log('[浏览器端] Cookie 详情:', cookies);
            console.log('[浏览器端] 是否为 Home Assistant:', isHomeAssistant);
            console.log('[浏览器端] Home Assistant 数据:', homeAssistantData);
            
            // 方法1: 尝试直接设置 Cookie（可能因为跨域限制而失败）
            if (cookies.length > 0) {
                console.log('[浏览器端] 开始尝试设置 Cookie...');
                let successCount = 0;
                let failCount = 0;
                
                cookies.forEach(function(cookie) {
                    try {
                        // 构建 Cookie 字符串
                        let cookieStr = cookie.name + '=' + cookie.value;
                        cookieStr += '; path=' + (cookie.path || '/');
                        if (cookie.maxAge) {
                            cookieStr += '; max-age=' + cookie.maxAge;
                        }
                        if (cookie.expires) {
                            cookieStr += '; expires=' + cookie.expires;
                        }
                        if (cookie.secure) {
                            cookieStr += '; secure';
                        }
                        if (cookie.sameSite) {
                            cookieStr += '; samesite=' + cookie.sameSite;
                        }
                        // 注意：Domain 属性无法通过 JavaScript 设置跨域 Cookie
                        // 但我们可以尝试设置（浏览器会忽略跨域的 Domain）
                        if (cookie.domain) {
                            cookieStr += '; domain=' + cookie.domain;
                        }
                        
                        document.cookie = cookieStr;
                        console.log('[浏览器端] ✓ 尝试设置 Cookie:', cookie.name);
                        successCount++;
                        
                        // 验证 Cookie 是否设置成功
                        const allCookies = document.cookie;
                        if (allCookies.indexOf(cookie.name + '=') !== -1) {
                            console.log('[浏览器端] ✓ Cookie 设置成功:', cookie.name);
                        } else {
                            console.warn('[浏览器端] ⚠ Cookie 可能未设置成功:', cookie.name, '(可能是跨域限制)');
                        }
                    } catch(e) {
                        console.error('[浏览器端] ✗ 设置 Cookie 失败:', cookie.name, e);
                        failCount++;
                    }
                });
                
                console.log('[浏览器端] Cookie 设置结果: 成功 ' + successCount + ', 失败 ' + failCount);
            } else {
                console.log('[浏览器端] 没有 Cookie 需要设置，直接跳转');
            }
            
            // 对于 Home Assistant，在浏览器端执行登录流程
            if (isHomeAssistant && homeAssistantData) {
                console.log('[浏览器端] Home Assistant 登录，在浏览器端执行登录流程');
                console.log('[浏览器端] 目标 URL:', homeAssistantData.targetBaseUrl);
                console.log('[浏览器端] 用户名:', homeAssistantData.username);
                
                // 异步执行登录流程（通过后端代理避免 CORS）
                async function loginHomeAssistant() {
                    try {
                        console.log('[浏览器端] 步骤1: 创建登录流程（通过代理）...');
                        // 使用后端代理避免 CORS 问题
                        const proxyBaseUrl = window.location.origin; // 后端服务器地址
                        
                        const flowResponse = await fetch(proxyBaseUrl + '/api/home-assistant-proxy/login-flow', {
                            method: 'POST',
                            headers: {
                                'Content-Type': 'application/json'
                            },
                            body: JSON.stringify({
                                targetBaseUrl: homeAssistantData.targetBaseUrl
                            })
                        });
                        
                        if (!flowResponse.ok) {
                            throw new Error('创建登录流程失败: ' + flowResponse.status);
                        }
                        
                        const flowData = await flowResponse.json();
                        console.log('[浏览器端] 流程创建响应:', flowData);
                        
                        if (!flowData.flow_id) {
                            throw new Error('无法获取 flow_id');
                        }
                        
                        console.log('[浏览器端] 步骤2: 提交用户名和密码（通过代理）...');
                        const loginResponse = await fetch(proxyBaseUrl + '/api/home-assistant-proxy/login', {
                            method: 'POST',
                            headers: {
                                'Content-Type': 'application/json'
                            },
                            body: JSON.stringify({
                                targetBaseUrl: homeAssistantData.targetBaseUrl,
                                flowId: flowData.flow_id,
                                username: homeAssistantData.username,
                                password: homeAssistantData.password
                            })
                        });
                        
                        if (!loginResponse.ok) {
                            throw new Error('登录失败: ' + loginResponse.status);
                        }
                        
                        const loginData = await loginResponse.json();
                        console.log('[浏览器端] 登录响应:', loginData);
                        
                        if (loginData.type === 'create_entry') {
                            console.log('[浏览器端] 登录成功！准备跳转到授权端点...');
                            
                            // 构建授权 URL
                            const stateData = {
                                hassUrl: homeAssistantData.targetBaseUrl,
                                clientId: homeAssistantData.targetBaseUrl + '/'
                            };
                            const state = btoa(JSON.stringify(stateData));
                            const redirectUri = homeAssistantData.targetBaseUrl + '/?auth_callback=1';
                            const clientId = homeAssistantData.targetBaseUrl + '/';
                            const authorizeUrl = homeAssistantData.targetBaseUrl + '/auth/authorize?response_type=code&redirect_uri=' + encodeURIComponent(redirectUri) + '&client_id=' + encodeURIComponent(clientId) + '&state=' + encodeURIComponent(state);
                            
                            console.log('[浏览器端] 授权 URL:', authorizeUrl);
                            console.log('[浏览器端] 跳转到授权端点...');
                            console.log('========================================');
                            
                            window.location.href = authorizeUrl;
                        } else {
                            throw new Error('登录失败: ' + JSON.stringify(loginData));
                        }
                    } catch (error) {
                        console.error('[浏览器端] 登录失败:', error);
                        alert('自动登录失败: ' + error.message + '\\n\\n将跳转到登录页面，请手动登录。');
                        window.location.href = targetUrl;
                    }
                }
                
                // 执行登录
                loginHomeAssistant();
                return;
            }
            
            // 方法2: 使用隐藏的 iframe 加载目标站点，让服务器设置 Cookie
            // 然后跳转到目标站点
            console.log('[浏览器端] 创建隐藏 iframe 加载目标站点...');
            const iframe = document.getElementById('cookieFrame');
            
            iframe.onload = function() {
                console.log('[浏览器端] iframe 加载完成');
            };
            
            iframe.onerror = function(error) {
                console.error('[浏览器端] iframe 加载失败:', error);
            };
            
            iframe.src = targetUrl;
            
            // 延迟跳转，确保 iframe 加载完成
            setTimeout(function() {
                console.log('[浏览器端] 准备跳转到目标站点:', targetUrl);
                console.log('[浏览器端] 当前页面 Cookie:', document.cookie);
                console.log('========================================');
                window.location.href = targetUrl;
            }, 1500);
        })();
    </script>
</body>
</html>
  `;
}

// 处理 RSA 加密表单登录
async function handleRSAEncryptedFormLogin(config, credentials) {
  const { targetBaseUrl, loginUrl, loginMethodConfig } = config;
  const { publicKey, usernameField, passwordField, captchaField, captchaRequired, contentType, successCode, successField } = loginMethodConfig;
  
  console.log('=== RSA 加密表单登录 ===');
  console.log(`目标URL: ${targetBaseUrl}${loginUrl}`);
  console.log(`用户名: ${credentials.username}`);
  console.log(`密码: ${'*'.repeat(credentials.password.length)}`);
  console.log(`内容类型: ${contentType}`);
  console.log(`成功标识字段: ${successField || 'code'}, 成功值: ${successCode}`);
  
  // 加密用户名和密码
  const usernameEncrypted = encryptWithRSA(credentials.username, publicKey);
  const passwordEncrypted = encryptWithRSA(credentials.password, publicKey);
  
  console.log('用户名和密码已加密');
  console.log(`加密后用户名长度: ${usernameEncrypted.length}`);
  console.log(`加密后密码长度: ${passwordEncrypted.length}`);
  
  // 构建请求数据
  const requestData = {
    [usernameField]: usernameEncrypted,
    [passwordField]: passwordEncrypted
  };
  
  if (captchaField) {
    requestData[captchaField] = captchaRequired ? '' : '';
  }
  
  // 发送登录请求
  const headers = {};
  let requestBody;
  
  if (contentType === 'application/x-www-form-urlencoded') {
    headers['Content-Type'] = 'application/x-www-form-urlencoded';
    requestBody = new URLSearchParams(requestData).toString();
  } else if (contentType === 'application/json') {
    headers['Content-Type'] = 'application/json';
    requestBody = JSON.stringify(requestData);
  } else {
    requestBody = requestData;
  }
  
  console.log(`发送登录请求到: ${targetBaseUrl}${loginUrl}`);
  
  // 添加可能需要的请求头（模拟浏览器请求）
  headers['Referer'] = `${targetBaseUrl}/`;
  headers['Origin'] = targetBaseUrl;
  headers['User-Agent'] = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
  headers['Accept'] = 'application/json, text/javascript, */*; q=0.01';
  headers['Accept-Language'] = 'zh-CN,zh;q=0.9,en;q=0.8';
  headers['X-Requested-With'] = 'XMLHttpRequest';
  
  console.log(`请求头:`, JSON.stringify(headers, null, 2));
  console.log(`请求体长度: ${requestBody.length} 字符`);
  console.log(`请求体内容预览: ${requestBody.substring(0, 300)}...`);
  
  // 先访问登录页面获取可能的session cookie
  console.log('先访问登录页面获取session...');
  try {
    const loginPageResponse = await axios.get(`${targetBaseUrl}/`, {
      headers: {
        'User-Agent': headers['User-Agent']
      },
      withCredentials: true,
      maxRedirects: 5
    });
    console.log('登录页面访问成功，获取到的Cookie:', loginPageResponse.headers['set-cookie'] || []);
  } catch (error) {
    console.log('访问登录页面失败（可能不需要）:', error.message);
  }
  
  const loginResponse = await axios.post(
    `${targetBaseUrl}${loginUrl}`,
    requestBody,
    {
      headers,
      withCredentials: true,
      maxRedirects: 0,
      validateStatus: function (status) {
        return status >= 200 && status < 400;
      }
    }
  );
  
  console.log(`登录响应状态码: ${loginResponse.status}`);
  console.log(`响应头:`, JSON.stringify(loginResponse.headers, null, 2));
  console.log(`响应数据:`, JSON.stringify(loginResponse.data, null, 2));
  
  // 检查登录是否成功
  const responseData = loginResponse.data || {};
  const successValue = successField ? responseData[successField] : responseData.code;
  
  console.log(`成功标识值: ${successValue}, 期望值: ${successCode}`);
  
  if (successValue === successCode) {
    const cookies = loginResponse.headers['set-cookie'] || [];
    console.log(`登录成功！获取到 ${cookies.length} 个 Cookie`);
    cookies.forEach((cookie, index) => {
      console.log(`Cookie ${index + 1}: ${cookie.substring(0, 100)}...`);
    });
    return {
      success: true,
      cookies: cookies,
      response: loginResponse.data
    };
  } else {
    console.error(`登录失败！响应:`, responseData);
    return {
      success: false,
      message: responseData.msg || responseData.message || '登录失败',
      response: responseData
    };
  }
}

// 处理 Home Assistant 登录（OAuth2 流程）
async function handleHomeAssistantLogin(config, credentials) {
  const { targetBaseUrl } = config;
  
  console.log('=== Home Assistant 登录 (OAuth2 模式) ===');
  console.log(`目标URL: ${targetBaseUrl}`);
  console.log(`用户名: ${credentials.username}`);
  console.log(`密码: ${'*'.repeat(credentials.password.length)}`);
  
  const baseHeaders = {
    'Content-Type': 'application/json',
    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
    'Accept': 'application/json, text/plain, */*',
    'Origin': targetBaseUrl
  };
  
  try {
    // ==========================================
    // 步骤1: 创建登录流程 (Init Flow)
    // ==========================================
    console.log('步骤1: 创建登录流程...');
    const flowResponse = await axios.post(
      `${targetBaseUrl}/auth/login_flow`,
      {
        client_id: `${targetBaseUrl}/`, // clientId 必须和浏览器访问的一致
        handler: ['homeassistant', null],
        redirect_uri: `${targetBaseUrl}/?auth_callback=1`
      },
      { 
        headers: baseHeaders,
        validateStatus: function (status) {
          return status >= 200 && status < 500;
        }
      }
    );
    
    console.log(`流程创建响应状态码: ${flowResponse.status}`);
    console.log(`流程创建响应数据:`, JSON.stringify(flowResponse.data, null, 2));
    
    if (flowResponse.status !== 200) {
      return {
        success: false,
        message: `创建登录流程失败，状态码: ${flowResponse.status}`,
        response: flowResponse.data
      };
    }
    
    const flowId = flowResponse.data?.flow_id;
    if (!flowId) {
      console.error('无法获取 flow_id');
      return {
        success: false,
        message: '无法获取 flow_id',
        response: flowResponse.data
      };
    }
    
    console.log(`获取到 flow_id: ${flowId}`);
    
    // ==========================================
    // 步骤2: 提交用户名和密码 (Submit Credentials)
    // ==========================================
    console.log('步骤2: 提交用户名和密码...');
    const loginResponse = await axios.post(
      `${targetBaseUrl}/auth/login_flow/${flowId}`,
      {
        username: credentials.username,
        password: credentials.password,
        client_id: `${targetBaseUrl}/` // 保持一致
      },
      { 
        headers: baseHeaders,
        validateStatus: function (status) {
          return status >= 200 && status < 500;
        }
      }
    );
    
    console.log(`登录响应状态码: ${loginResponse.status}`);
    console.log(`登录响应数据:`, JSON.stringify(loginResponse.data, null, 2));
    
    // ==========================================
    // 步骤3: 构造浏览器跳转 URL (关键修正)
    // ==========================================
    const responseData = loginResponse.data || {};
    const responseType = responseData.type;
    
    console.log(`响应类型: ${responseType}`);
    
    // 如果登录成功，type 通常是 'create_entry'
    if (responseData.result) {
      const authCode = responseData.result;
      console.log(`登录成功！获取到 Authorization Code: ${authCode}`);
      
      // 构造魔术链接，让浏览器去完成 Token 交换
      // 格式: http://ha-url/?auth_callback=1&code=YOUR_CODE
      const redirectUrl = `${targetBaseUrl}/?auth_callback=1&code=${encodeURIComponent(authCode)}`;
      
      console.log('生成自动登录跳转链接:', redirectUrl);
      console.log('Home Assistant 前端将自动识别 URL 中的 code 并完成 Token 交换');
      
      // 返回跳转 URL，让浏览器直接跳转
      return {
        success: true,
        redirectUrl: redirectUrl, // 告诉上层直接跳转这个 URL
        cookies: [], // HA 不需要 Cookie
        response: loginResponse.data
      };
    } else {
      console.error('登录未返回 Authorization Code:', responseData);
      return {
        success: false,
        message: '登录失败: 未返回授权码',
        response: responseData
      };
    }
    
  } catch (error) {
    console.error('Home Assistant 登录流程异常:', error.message);
    if (error.response) {
      console.error('响应状态:', error.response.status);
      console.error('响应数据:', JSON.stringify(error.response.data, null, 2));
      return {
        success: false,
        message: `登录失败: ${error.response.status} - ${JSON.stringify(error.response.data)}`,
        response: error.response.data
      };
    }
    return {
      success: false,
      message: `登录失败: ${error.message}`,
      response: null
    };
  }
}

// 处理普通表单登录（未加密）
async function handlePlainFormLogin(config, credentials) {
  const { targetBaseUrl, loginUrl, loginMethodConfig } = config;
  const { usernameField, passwordField, captchaField, contentType, successCode, successField } = loginMethodConfig;
  
  console.log('=== 普通表单登录 ===');
  console.log(`目标URL: ${targetBaseUrl}${loginUrl}`);
  console.log(`用户名: ${credentials.username}`);
  console.log(`密码: ${'*'.repeat(credentials.password.length)}`);
  console.log(`内容类型: ${contentType}`);
  console.log(`成功标识字段: ${successField || 'code'}, 成功值: ${successCode}`);
  
  // 构建请求数据
  const requestData = {
    [usernameField]: credentials.username,
    [passwordField]: credentials.password
  };
  
  if (captchaField) {
    requestData[captchaField] = '';
  }
  
  // 发送登录请求
  const headers = {};
  let requestBody;
  
  if (contentType === 'application/x-www-form-urlencoded') {
    headers['Content-Type'] = 'application/x-www-form-urlencoded';
    requestBody = new URLSearchParams(requestData).toString();
  } else if (contentType === 'application/json') {
    headers['Content-Type'] = 'application/json';
    requestBody = JSON.stringify(requestData);
  } else {
    requestBody = requestData;
  }
  
  console.log(`发送登录请求到: ${targetBaseUrl}${loginUrl}`);
  console.log(`请求头:`, JSON.stringify(headers, null, 2));
  console.log(`请求体:`, contentType === 'application/json' ? requestBody : requestBody.substring(0, 200) + '...');
  
  const loginResponse = await axios.post(
    `${targetBaseUrl}${loginUrl}`,
    requestBody,
    {
      headers,
      withCredentials: true,
      maxRedirects: 0,
      validateStatus: function (status) {
        return status >= 200 && status < 400;
      }
    }
  );
  
  console.log(`登录响应状态码: ${loginResponse.status}`);
  console.log(`响应数据:`, JSON.stringify(loginResponse.data, null, 2));
  
  // 检查登录是否成功
  const responseData = loginResponse.data || {};
  const successValue = successField ? responseData[successField] : responseData.code;
  
  console.log(`成功标识值: ${successValue}, 期望值: ${successCode}`);
  
  if (successValue === successCode) {
    const cookies = loginResponse.headers['set-cookie'] || [];
    console.log(`登录成功！获取到 ${cookies.length} 个 Cookie`);
    cookies.forEach((cookie, index) => {
      console.log(`Cookie ${index + 1}: ${cookie.substring(0, 100)}...`);
    });
    return {
      success: true,
      cookies: cookies,
      response: loginResponse.data
    };
  } else {
    console.error(`登录失败！响应:`, responseData);
    return {
      success: false,
      message: responseData.msg || responseData.message || '登录失败',
      response: responseData
    };
  }
}

// 通用的自动登录端点
app.get('/api/auto-login/:siteId', async (req, res) => {
  const startTime = Date.now();
  const requestId = `${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
  
  // 立即输出日志，确认请求已到达
  console.log('\n' + '='.repeat(80));
  console.log(`[${requestId}] ⚡⚡⚡ 收到自动登录请求！⚡⚡⚡`);
  console.log(`[${requestId}] 时间: ${new Date().toISOString()}`);
  console.log(`[${requestId}] 请求路径: ${req.path}`);
  console.log(`[${requestId}] 请求方法: ${req.method}`);
  console.log(`[${requestId}] 完整URL: ${req.protocol}://${req.get('host')}${req.originalUrl}`);
  console.log(`[${requestId}] 客户端IP: ${req.ip || req.connection.remoteAddress || req.socket.remoteAddress}`);
  console.log(`[${requestId}] User-Agent: ${req.get('user-agent') || 'Unknown'}`);
  
  try {
    const { siteId } = req.params;
    console.log(`[${requestId}] 网站ID: ${siteId}`);
    
    // 获取网站配置
    const config = autoLoginConfig[siteId];
    if (!config) {
      console.error(`[${requestId}] 错误: 未找到网站ID "${siteId}" 的配置`);
      console.error(`[${requestId}] 可用的网站ID: ${Object.keys(autoLoginConfig).join(', ') || '无'}`);
      return res.status(404).json({
        success: false,
        message: `未找到网站ID "${siteId}" 的配置`,
        availableSites: Object.keys(autoLoginConfig)
      });
    }
    
    console.log(`[${requestId}] 网站名称: ${config.name}`);
    console.log(`[${requestId}] 目标地址: ${config.targetBaseUrl}`);
    console.log(`[${requestId}] 登录方法: ${config.loginMethod}`);
    
    // 获取登录凭据（优先使用环境变量）
    const envUsername = process.env[config.credentials.envUsername];
    const envPassword = process.env[config.credentials.envPassword];
    const credentials = {
      username: envUsername || config.credentials.username,
      password: envPassword || config.credentials.password
    };
    
    console.log(`[${requestId}] 凭据来源: ${envUsername ? '环境变量' : '配置文件'}`);
    console.log(`[${requestId}] 用户名: ${credentials.username}`);
    console.log(`[${requestId}] 密码: ${'*'.repeat(credentials.password.length)}`);
    
    if (!credentials.username || !credentials.password) {
      console.error(`[${requestId}] 错误: 登录凭据未配置`);
      return res.status(400).json({
        success: false,
        message: '登录凭据未配置'
      });
    }
    
    // 根据登录方法处理登录
    let loginResult;
    console.log(`[${requestId}] 开始执行登录...`);
    switch (config.loginMethod) {
      case 'rsa-encrypted-form':
        loginResult = await handleRSAEncryptedFormLogin(config, credentials);
        break;
      case 'plain-form':
        loginResult = await handlePlainFormLogin(config, credentials);
        break;
      case 'home-assistant':
        loginResult = await handleHomeAssistantLogin(config, credentials);
        break;
      default:
        console.error(`[${requestId}] 错误: 不支持的登录方法: ${config.loginMethod}`);
        return res.status(400).json({
          success: false,
          message: `不支持的登录方法: ${config.loginMethod}`
        });
    }
    
    if (!loginResult.success) {
      console.error(`[${requestId}] 登录失败:`, loginResult.message);
      console.error(`[${requestId}] 失败响应:`, JSON.stringify(loginResult.response, null, 2));
      const duration = Date.now() - startTime;
      console.log(`[${requestId}] 总耗时: ${duration}ms`);
      console.log('='.repeat(80) + '\n');
      
      // 返回错误页面而不是 JSON
      const errorHtml = `
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>自动登录失败</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
            background: linear-gradient(135deg, #f5f7fa 0%, #c3cfe2 100%);
        }
        .error-container {
            background: white;
            padding: 40px;
            border-radius: 12px;
            box-shadow: 0 10px 30px rgba(0, 0, 0, 0.1);
            max-width: 600px;
            text-align: center;
        }
        .error-icon {
            font-size: 64px;
            margin-bottom: 20px;
        }
        .error-title {
            font-size: 24px;
            color: #e74c3c;
            margin-bottom: 15px;
        }
        .error-message {
            font-size: 16px;
            color: #666;
            margin-bottom: 20px;
            line-height: 1.6;
        }
        .error-details {
            background: #f8f9fa;
            padding: 15px;
            border-radius: 8px;
            margin-top: 20px;
            text-align: left;
            font-size: 14px;
            color: #555;
        }
        .error-details pre {
            margin: 0;
            white-space: pre-wrap;
            word-wrap: break-word;
        }
    </style>
</head>
<body>
    <div class="error-container">
        <div class="error-icon">❌</div>
        <div class="error-title">自动登录失败</div>
        <div class="error-message">${loginResult.message}</div>
        <div class="error-details">
            <strong>请求ID:</strong> ${requestId}<br>
            <strong>网站:</strong> ${config.name}<br>
            <strong>详细信息:</strong>
            <pre>${JSON.stringify(loginResult.response, null, 2)}</pre>
        </div>
        <button onclick="window.history.back()" style="margin-top: 20px; padding: 10px 20px; background: #3498db; color: white; border: none; border-radius: 6px; cursor: pointer;">返回</button>
    </div>
</body>
</html>
      `;
      return res.status(500).send(errorHtml);
    }
    
    console.log(`[${requestId}] 登录成功！`);
    
    // 对于 Home Assistant，如果返回了 redirectUrl，直接重定向
    if (config.loginMethod === 'home-assistant' && loginResult.redirectUrl) {
      console.log(`[${requestId}] Home Assistant 登录成功，直接重定向到: ${loginResult.redirectUrl}`);
      console.log(`[${requestId}] 总耗时: ${Date.now() - startTime}ms`);
      console.log('='.repeat(80) + '\n');
      
      // 直接重定向到带有 auth code 的 URL
      return res.redirect(loginResult.redirectUrl);
    }
    
    // 解析 Cookie
    const cookieData = parseCookies(loginResult.cookies);
    console.log(`[${requestId}] 解析到 ${cookieData.length} 个 Cookie:`);
    cookieData.forEach((cookie, index) => {
      console.log(`[${requestId}]   Cookie ${index + 1}: ${cookie.name} = ${cookie.value.substring(0, 20)}...`);
    });
    
    // 生成跳转 HTML
    let redirectUrl = `http://${config.targetHost}/`;
    
    console.log(`[${requestId}] 生成跳转页面，目标: ${redirectUrl}`);
    const html = generateRedirectHTML(
      cookieData,
      config.targetHost,
      config.targetDomain,
      requestId,
      redirectUrl,
      null
    );
    
    // 在响应头中设置 Cookie
    console.log(`[${requestId}] 设置响应头 Cookie...`);
    loginResult.cookies.forEach((cookie, index) => {
      // 修改 Cookie 的 Domain，移除端口号
      let modifiedCookie = cookie.replace(/Domain=[^;]+/i, `Domain=${config.targetDomain}`);
      res.setHeader('Set-Cookie', modifiedCookie);
      console.log(`[${requestId}]   设置 Cookie ${index + 1}: ${modifiedCookie.substring(0, 80)}...`);
    });
    
    const duration = Date.now() - startTime;
    console.log(`[${requestId}] 总耗时: ${duration}ms`);
    console.log(`[${requestId}] 返回跳转页面`);
    console.log('='.repeat(80) + '\n');
    
    res.send(html);
  } catch (error) {
    const duration = Date.now() - startTime;
    console.error(`[${requestId}] 自动登录异常:`, error.message);
    console.error(`[${requestId}] 错误堆栈:`, error.stack);
    if (error.response) {
      console.error(`[${requestId}] 响应状态:`, error.response.status);
      console.error(`[${requestId}] 响应头:`, JSON.stringify(error.response.headers, null, 2));
      console.error(`[${requestId}] 响应数据:`, JSON.stringify(error.response.data, null, 2));
    }
    if (error.request) {
      console.error(`[${requestId}] 请求信息:`, {
        url: error.config?.url,
        method: error.config?.method,
        headers: error.config?.headers
      });
    }
    console.log(`[${requestId}] 总耗时: ${duration}ms`);
    console.log('='.repeat(80) + '\n');
    res.status(500).json({
      success: false,
      message: '自动登录失败: ' + error.message,
      error: process.env.NODE_ENV === 'development' ? error.stack : undefined
    });
  }
});

// Home Assistant 登录代理端点（解决浏览器 CORS 问题）
app.post('/api/home-assistant-proxy/login-flow', async (req, res) => {
  try {
    const targetBaseUrl = req.body.targetBaseUrl;
    console.log('[代理] 创建 Home Assistant 登录流程:', targetBaseUrl);
    
    const response = await axios.post(
      `${targetBaseUrl}/auth/login_flow`,
      {
        client_id: `${targetBaseUrl}/`,
        handler: ['homeassistant', null],
        redirect_uri: `${targetBaseUrl}/`
      },
      {
        headers: {
          'Content-Type': 'application/json'
        }
      }
    );
    
    res.json(response.data);
  } catch (error) {
    console.error('[代理] 创建登录流程失败:', error.message);
    res.status(500).json({ error: error.message });
  }
});

app.post('/api/home-assistant-proxy/login', async (req, res) => {
  try {
    const { targetBaseUrl, flowId, username, password } = req.body;
    console.log('[代理] 提交 Home Assistant 登录凭据:', targetBaseUrl, flowId);
    
    const response = await axios.post(
      `${targetBaseUrl}/auth/login_flow/${flowId}`,
      {
        username: username,
        password: password,
        client_id: `${targetBaseUrl}/`
      },
      {
        headers: {
          'Content-Type': 'application/json'
        }
      }
    );
    
    res.json(response.data);
  } catch (error) {
    console.error('[代理] 登录失败:', error.message);
    res.status(500).json({ error: error.message });
  }
});

// 获取所有配置的网站列表
app.get('/api/auto-login', (req, res) => {
  const sites = Object.keys(autoLoginConfig).map(siteId => ({
    id: siteId,
    name: autoLoginConfig[siteId].name,
    endpoint: `/api/auto-login/${siteId}`
  }));
  res.json({ sites });
});

// 健康检查端点
app.get('/api/health', (req, res) => {
  res.json({ 
    status: 'ok',
    timestamp: new Date().toISOString(),
    port: PORT,
    configuredSites: Object.keys(autoLoginConfig)
  });
});

// 测试端点 - 用于验证配置
app.get('/api/test/:siteId', (req, res) => {
  const { siteId } = req.params;
  const config = autoLoginConfig[siteId];
  
  if (!config) {
    return res.json({
      success: false,
      message: `未找到网站ID "${siteId}" 的配置`,
      availableSites: Object.keys(autoLoginConfig)
    });
  }
  
  const envUsername = process.env[config.credentials.envUsername];
  const envPassword = process.env[config.credentials.envPassword];
  const credentials = {
    username: envUsername || config.credentials.username,
    password: envPassword || config.credentials.password
  };
  
  res.json({
    success: true,
    siteId,
    config: {
      name: config.name,
      targetBaseUrl: config.targetBaseUrl,
      loginMethod: config.loginMethod,
      loginUrl: config.loginUrl,
      hasCredentials: !!(credentials.username && credentials.password),
      credentialsSource: envUsername ? '环境变量' : '配置文件',
      username: credentials.username,
      passwordLength: credentials.password ? credentials.password.length : 0
    }
  });
});

app.listen(PORT, '0.0.0.0', () => {
  console.log('\n' + '='.repeat(80));
  console.log('🚀 后端服务器启动成功！');
  console.log('='.repeat(80));
  console.log(`📍 本地地址: http://localhost:${PORT}`);
  console.log(`📍 服务器地址: http://0.0.0.0:${PORT}`);
  console.log(`📍 外部访问: http://222.243.138.146:${PORT} (通过防火墙端口映射)`);
  console.log(`\n📋 已配置的自动登录网站: ${Object.keys(autoLoginConfig).join(', ') || '无'}`);
  console.log(`\n🔗 可用端点:`);
  console.log(`   - 健康检查: http://localhost:${PORT}/api/health`);
  console.log(`   - 测试配置: http://localhost:${PORT}/api/test/:siteId`);
  console.log(`   - 自动登录: http://localhost:${PORT}/api/auto-login/:siteId`);
  console.log(`\n💡 提示: 确保防火墙已配置端口映射 (前端:8888, 后端:8889 -> 外网)`);
  console.log('='.repeat(80) + '\n');
});