liuq
/
simple_navigation_page


			
				
					
						
						
							12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169
							import express from 'express';
import cors from 'cors';
import axios from 'axios';
import nodeRSA from 'node-rsa';
import cookieParser from 'cookie-parser';
import { readFileSync } from 'fs';
import { fileURLToPath } from 'url';
import { dirname, join } from 'path';
import { CookieJar } from 'tough-cookie';
import { wrapper } from 'axios-cookiejar-support';

// node-rsa 是 CommonJS 模块，需要使用默认导入
const NodeRSA = nodeRSA;

const __filename = fileURLToPath(import.meta.url);
const __dirname = dirname(__filename);

const app = express();
const PORT = process.env.PORT || 8889;

// 中间件
app.use(cors({
  origin: true,
  credentials: true
}));
app.use(express.json());
app.use(express.urlencoded({ extended: true }));
app.use(cookieParser());

// 请求日志中间件（用于调试）
app.use((req, res, next) => {
  console.log(`[请求] ${req.method} ${req.path} - ${new Date().toISOString()}`);
  next();
});

// 加载自动登录配置
let autoLoginConfig = {};
try {
  const configPath = join(__dirname, 'auto-login-config.json');
  console.log('正在加载自动登录配置文件:', configPath);
  const configData = readFileSync(configPath, 'utf-8');
  autoLoginConfig = JSON.parse(configData);
  console.log('✓ 已加载自动登录配置');
  console.log('  配置的网站数量:', Object.keys(autoLoginConfig).length);
  console.log('  网站列表:', Object.keys(autoLoginConfig).join(', '));
  Object.keys(autoLoginConfig).forEach(siteId => {
    const site = autoLoginConfig[siteId];
    console.log(`  - ${siteId}: ${site.name} (${site.loginMethod})`);
  });
} catch (error) {
  console.error('✗ 加载自动登录配置失败:', error.message);
  console.error('  错误堆栈:', error.stack);
  console.log('将使用默认配置');
}

// RSA 加密函数
// 注意：JSEncrypt 使用 PKCS1 填充，需要匹配
function encryptWithRSA(text, publicKey) {
  try {
    const key = new NodeRSA(publicKey, 'public', {
      encryptionScheme: 'pkcs1'  // 使用 PKCS1 填充，与 JSEncrypt 兼容
    });
    const encrypted = key.encrypt(text, 'base64');
    console.log(`RSA加密: "${text}" -> 长度 ${encrypted.length}`);
    return encrypted;
  } catch (error) {
    console.error('RSA加密失败:', error.message);
    throw error;
  }
}

// 解析 Cookie
function parseCookies(setCookieHeaders) {
  return setCookieHeaders.map(cookie => {
    const match = cookie.match(/^([^=]+)=([^;]+)/);
    if (match) {
      const name = match[1];
      const value = match[2];
      
      // 提取其他属性
      const pathMatch = cookie.match(/Path=([^;]+)/);
      const expiresMatch = cookie.match(/Expires=([^;]+)/);
      const maxAgeMatch = cookie.match(/Max-Age=([^;]+)/);
      const httpOnlyMatch = cookie.match(/HttpOnly/);
      const secureMatch = cookie.match(/Secure/);
      const sameSiteMatch = cookie.match(/SameSite=([^;]+)/);
      
      return {
        name,
        value,
        path: pathMatch ? pathMatch[1] : '/',
        expires: expiresMatch ? expiresMatch[1] : null,
        maxAge: maxAgeMatch ? maxAgeMatch[1] : null,
        httpOnly: !!httpOnlyMatch,
        secure: !!secureMatch,
        sameSite: sameSiteMatch ? sameSiteMatch[1] : null
      };
    }
    return null;
  }).filter(Boolean);
}

// 生成跳转 HTML
function generateRedirectHTML(cookieData, targetHost, targetDomain, requestId = '', customUrl = null, homeAssistantData = null) {
  const targetUrl = customUrl || `http://${targetHost}/`;
  const isHomeAssistant = homeAssistantData !== null;
  
  return `
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>自动登录中...</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
            background: linear-gradient(135deg, #f5f7fa 0%, #c3cfe2 100%);
        }
        .loading {
            text-align: center;
        }
        .spinner {
            border: 4px solid #f3f3f3;
            border-top: 4px solid #3498db;
            border-radius: 50%;
            width: 50px;
            height: 50px;
            animation: spin 1s linear infinite;
            margin: 0 auto 20px;
        }
        @keyframes spin {
            0% { transform: rotate(0deg); }
            100% { transform: rotate(360deg); }
        }
        .message {
            color: #333;
            font-size: 18px;
        }
    </style>
</head>
<body>
    <div class="loading">
        <div class="spinner"></div>
        <div class="message">正在自动登录，请稍候...</div>
    </div>
    <iframe id="cookieFrame" style="display:none;"></iframe>
    <script>
        (function() {
            const requestId = '${requestId}';
            const cookies = ${JSON.stringify(cookieData)};
            const targetUrl = '${targetUrl}';
            const targetDomain = '${targetDomain}';
            const isHomeAssistant = ${isHomeAssistant};
            const homeAssistantData = ${homeAssistantData ? JSON.stringify(homeAssistantData) : 'null'};
            
            console.log('========================================');
            console.log('[浏览器端] 自动登录脚本开始执行');
            console.log('[浏览器端] 请求ID:', requestId);
            console.log('[浏览器端] 目标URL:', targetUrl);
            console.log('[浏览器端] 目标域名:', targetDomain);
            console.log('[浏览器端] Cookie 数量:', cookies.length);
            console.log('[浏览器端] Cookie 详情:', cookies);
            console.log('[浏览器端] 是否为 Home Assistant:', isHomeAssistant);
            console.log('[浏览器端] Home Assistant 数据:', homeAssistantData);
            
            // 方法1: 尝试直接设置 Cookie（可能因为跨域限制而失败）
            if (cookies.length > 0) {
                console.log('[浏览器端] 开始尝试设置 Cookie...');
                let successCount = 0;
                let failCount = 0;
                
                cookies.forEach(function(cookie) {
                    try {
                        // 构建 Cookie 字符串
                        let cookieStr = cookie.name + '=' + cookie.value;
                        cookieStr += '; path=' + (cookie.path || '/');
                        if (cookie.maxAge) {
                            cookieStr += '; max-age=' + cookie.maxAge;
                        }
                        if (cookie.expires) {
                            cookieStr += '; expires=' + cookie.expires;
                        }
                        if (cookie.secure) {
                            cookieStr += '; secure';
                        }
                        if (cookie.sameSite) {
                            cookieStr += '; samesite=' + cookie.sameSite;
                        }
                        // 注意：Domain 属性无法通过 JavaScript 设置跨域 Cookie
                        // 但我们可以尝试设置（浏览器会忽略跨域的 Domain）
                        if (cookie.domain) {
                            cookieStr += '; domain=' + cookie.domain;
                        }
                        
                        document.cookie = cookieStr;
                        console.log('[浏览器端] ✓ 尝试设置 Cookie:', cookie.name);
                        successCount++;
                        
                        // 验证 Cookie 是否设置成功
                        const allCookies = document.cookie;
                        if (allCookies.indexOf(cookie.name + '=') !== -1) {
                            console.log('[浏览器端] ✓ Cookie 设置成功:', cookie.name);
                        } else {
                            console.warn('[浏览器端] ⚠ Cookie 可能未设置成功:', cookie.name, '(可能是跨域限制)');
                        }
                    } catch(e) {
                        console.error('[浏览器端] ✗ 设置 Cookie 失败:', cookie.name, e);
                        failCount++;
                    }
                });
                
                console.log('[浏览器端] Cookie 设置结果: 成功 ' + successCount + ', 失败 ' + failCount);
            } else {
                console.log('[浏览器端] 没有 Cookie 需要设置，直接跳转');
            }
            
            // 对于 Home Assistant，在浏览器端执行登录流程
            if (isHomeAssistant && homeAssistantData) {
                console.log('[浏览器端] Home Assistant 登录，在浏览器端执行登录流程');
                console.log('[浏览器端] 目标 URL:', homeAssistantData.targetBaseUrl);
                console.log('[浏览器端] 用户名:', homeAssistantData.username);
                
                // 异步执行登录流程
                async function loginHomeAssistant() {
                    try {
                        console.log('[浏览器端] 步骤1: 创建登录流程...');
                        const flowResponse = await fetch(homeAssistantData.targetBaseUrl + '/auth/login_flow', {
                            method: 'POST',
                            headers: {
                                'Content-Type': 'application/json'
                            },
                            body: JSON.stringify({
                                client_id: homeAssistantData.targetBaseUrl + '/',
                                handler: ['homeassistant', null],
                                redirect_uri: homeAssistantData.targetBaseUrl + '/'
                            }),
                            credentials: 'include'
                        });
                        
                        const flowData = await flowResponse.json();
                        console.log('[浏览器端] 流程创建响应:', flowData);
                        
                        if (!flowData.flow_id) {
                            throw new Error('无法获取 flow_id');
                        }
                        
                        console.log('[浏览器端] 步骤2: 提交用户名和密码...');
                        const loginResponse = await fetch(homeAssistantData.targetBaseUrl + '/auth/login_flow/' + flowData.flow_id, {
                            method: 'POST',
                            headers: {
                                'Content-Type': 'application/json'
                            },
                            body: JSON.stringify({
                                username: homeAssistantData.username,
                                password: homeAssistantData.password,
                                client_id: homeAssistantData.targetBaseUrl + '/'
                            }),
                            credentials: 'include'
                        });
                        
                        const loginData = await loginResponse.json();
                        console.log('[浏览器端] 登录响应:', loginData);
                        
                        if (loginData.type === 'create_entry') {
                            console.log('[浏览器端] 登录成功！准备跳转到授权端点...');
                            
                            // 构建授权 URL
                            const stateData = {
                                hassUrl: homeAssistantData.targetBaseUrl,
                                clientId: homeAssistantData.targetBaseUrl + '/'
                            };
                            const state = btoa(JSON.stringify(stateData));
                            const redirectUri = homeAssistantData.targetBaseUrl + '/?auth_callback=1';
                            const clientId = homeAssistantData.targetBaseUrl + '/';
                            const authorizeUrl = homeAssistantData.targetBaseUrl + '/auth/authorize?response_type=code&redirect_uri=' + encodeURIComponent(redirectUri) + '&client_id=' + encodeURIComponent(clientId) + '&state=' + encodeURIComponent(state);
                            
                            console.log('[浏览器端] 授权 URL:', authorizeUrl);
                            console.log('[浏览器端] 跳转到授权端点...');
                            console.log('========================================');
                            
                            window.location.href = authorizeUrl;
                        } else {
                            throw new Error('登录失败: ' + JSON.stringify(loginData));
                        }
                    } catch (error) {
                        console.error('[浏览器端] 登录失败:', error);
                        alert('自动登录失败: ' + error.message + '\\n\\n将跳转到登录页面，请手动登录。');
                        window.location.href = targetUrl;
                    }
                }
                
                // 执行登录
                loginHomeAssistant();
                return;
            }
            
            // 方法2: 使用隐藏的 iframe 加载目标站点，让服务器设置 Cookie
            // 然后跳转到目标站点
            console.log('[浏览器端] 创建隐藏 iframe 加载目标站点...');
            const iframe = document.getElementById('cookieFrame');
            
            iframe.onload = function() {
                console.log('[浏览器端] iframe 加载完成');
            };
            
            iframe.onerror = function(error) {
                console.error('[浏览器端] iframe 加载失败:', error);
            };
            
            iframe.src = targetUrl;
            
            // 延迟跳转，确保 iframe 加载完成
            setTimeout(function() {
                console.log('[浏览器端] 准备跳转到目标站点:', targetUrl);
                console.log('[浏览器端] 当前页面 Cookie:', document.cookie);
                console.log('========================================');
                window.location.href = targetUrl;
            }, 1500);
        })();
    </script>
</body>
</html>
  `;
}

// 处理 RSA 加密表单登录
async function handleRSAEncryptedFormLogin(config, credentials) {
  const { targetBaseUrl, loginUrl, loginMethodConfig } = config;
  const { publicKey, usernameField, passwordField, captchaField, captchaRequired, contentType, successCode, successField } = loginMethodConfig;
  
  console.log('=== RSA 加密表单登录 ===');
  console.log(`目标URL: ${targetBaseUrl}${loginUrl}`);
  console.log(`用户名: ${credentials.username}`);
  console.log(`密码: ${'*'.repeat(credentials.password.length)}`);
  console.log(`内容类型: ${contentType}`);
  console.log(`成功标识字段: ${successField || 'code'}, 成功值: ${successCode}`);
  
  // 加密用户名和密码
  const usernameEncrypted = encryptWithRSA(credentials.username, publicKey);
  const passwordEncrypted = encryptWithRSA(credentials.password, publicKey);
  
  console.log('用户名和密码已加密');
  console.log(`加密后用户名长度: ${usernameEncrypted.length}`);
  console.log(`加密后密码长度: ${passwordEncrypted.length}`);
  
  // 构建请求数据
  const requestData = {
    [usernameField]: usernameEncrypted,
    [passwordField]: passwordEncrypted
  };
  
  if (captchaField) {
    requestData[captchaField] = captchaRequired ? '' : '';
  }
  
  // 发送登录请求
  const headers = {};
  let requestBody;
  
  if (contentType === 'application/x-www-form-urlencoded') {
    headers['Content-Type'] = 'application/x-www-form-urlencoded';
    requestBody = new URLSearchParams(requestData).toString();
  } else if (contentType === 'application/json') {
    headers['Content-Type'] = 'application/json';
    requestBody = JSON.stringify(requestData);
  } else {
    requestBody = requestData;
  }
  
  console.log(`发送登录请求到: ${targetBaseUrl}${loginUrl}`);
  
  // 添加可能需要的请求头（模拟浏览器请求）
  headers['Referer'] = `${targetBaseUrl}/`;
  headers['Origin'] = targetBaseUrl;
  headers['User-Agent'] = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
  headers['Accept'] = 'application/json, text/javascript, */*; q=0.01';
  headers['Accept-Language'] = 'zh-CN,zh;q=0.9,en;q=0.8';
  headers['X-Requested-With'] = 'XMLHttpRequest';
  
  console.log(`请求头:`, JSON.stringify(headers, null, 2));
  console.log(`请求体长度: ${requestBody.length} 字符`);
  console.log(`请求体内容预览: ${requestBody.substring(0, 300)}...`);
  
  // 先访问登录页面获取可能的session cookie
  console.log('先访问登录页面获取session...');
  try {
    const loginPageResponse = await axios.get(`${targetBaseUrl}/`, {
      headers: {
        'User-Agent': headers['User-Agent']
      },
      withCredentials: true,
      maxRedirects: 5
    });
    console.log('登录页面访问成功，获取到的Cookie:', loginPageResponse.headers['set-cookie'] || []);
  } catch (error) {
    console.log('访问登录页面失败（可能不需要）:', error.message);
  }
  
  const loginResponse = await axios.post(
    `${targetBaseUrl}${loginUrl}`,
    requestBody,
    {
      headers,
      withCredentials: true,
      maxRedirects: 0,
      validateStatus: function (status) {
        return status >= 200 && status < 400;
      }
    }
  );
  
  console.log(`登录响应状态码: ${loginResponse.status}`);
  console.log(`响应头:`, JSON.stringify(loginResponse.headers, null, 2));
  console.log(`响应数据:`, JSON.stringify(loginResponse.data, null, 2));
  
  // 检查登录是否成功
  const responseData = loginResponse.data || {};
  const successValue = successField ? responseData[successField] : responseData.code;
  
  console.log(`成功标识值: ${successValue}, 期望值: ${successCode}`);
  
  if (successValue === successCode) {
    const cookies = loginResponse.headers['set-cookie'] || [];
    console.log(`登录成功！获取到 ${cookies.length} 个 Cookie`);
    cookies.forEach((cookie, index) => {
      console.log(`Cookie ${index + 1}: ${cookie.substring(0, 100)}...`);
    });
    return {
      success: true,
      cookies: cookies,
      response: loginResponse.data
    };
  } else {
    console.error(`登录失败！响应:`, responseData);
    return {
      success: false,
      message: responseData.msg || responseData.message || '登录失败',
      response: responseData
    };
  }
}

// 处理 Home Assistant 登录（OAuth2 流程）
async function handleHomeAssistantLogin(config, credentials) {
  const { targetBaseUrl } = config;
  
  console.log('=== Home Assistant 登录 ===');
  console.log(`目标URL: ${targetBaseUrl}`);
  console.log(`用户名: ${credentials.username}`);
  console.log(`密码: ${'*'.repeat(credentials.password.length)}`);
  
  // 创建 Cookie jar 来保持会话
  const cookieJar = new CookieJar();
  const client = wrapper(axios.create({
    jar: cookieJar,
    withCredentials: true
  }));
  
  const baseHeaders = {
    'Content-Type': 'application/json',
    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
    'Accept': 'application/json, text/plain, */*',
    'Origin': targetBaseUrl,
    'Referer': `${targetBaseUrl}/`
  };
  
  // 先访问首页获取初始 Cookie（如果需要）
  let initialCookies = [];
  try {
    console.log('访问首页获取初始 Cookie...');
    const homeResponse = await client.get(`${targetBaseUrl}/`, {
      headers: {
        'User-Agent': baseHeaders['User-Agent']
      },
      maxRedirects: 5
    });
    initialCookies = homeResponse.headers['set-cookie'] || [];
    console.log(`获取到 ${initialCookies.length} 个初始 Cookie`);
    // 从 Cookie jar 中获取 Cookie
    const jarCookies = await cookieJar.getCookies(targetBaseUrl);
    console.log(`Cookie jar 中有 ${jarCookies.length} 个 Cookie`);
  } catch (error) {
    console.log('访问首页失败（可能不需要）:', error.message);
  }
  
  // 步骤1: 创建登录流程
  console.log('步骤1: 创建登录流程...');
  let flowResponse;
  try {
    flowResponse = await client.post(
      `${targetBaseUrl}/auth/login_flow`,
      {
        client_id: `${targetBaseUrl}/`,
        handler: ['homeassistant', null],
        redirect_uri: `${targetBaseUrl}/`
      },
      {
        headers: baseHeaders,
        maxRedirects: 0,
        validateStatus: function (status) {
          return status >= 200 && status < 500;
        }
      }
    );
  } catch (error) {
    console.error('创建登录流程失败:', error.message);
    if (error.response) {
      console.error('响应状态:', error.response.status);
      console.error('响应数据:', JSON.stringify(error.response.data, null, 2));
      return {
        success: false,
        message: `创建登录流程失败: ${error.response.status} - ${JSON.stringify(error.response.data)}`,
        response: error.response.data
      };
    }
    return {
      success: false,
      message: `创建登录流程失败: ${error.message}`,
      response: null
    };
  }
  
  console.log(`流程创建响应状态码: ${flowResponse.status}`);
  console.log(`流程创建响应数据:`, JSON.stringify(flowResponse.data, null, 2));
  
  if (flowResponse.status !== 200) {
    return {
      success: false,
      message: `创建登录流程失败，状态码: ${flowResponse.status}`,
      response: flowResponse.data
    };
  }
  
  const flowId = flowResponse.data?.flow_id;
  if (!flowId) {
    console.error('无法获取 flow_id');
    return {
      success: false,
      message: '无法获取 flow_id',
      response: flowResponse.data
    };
  }
  
  console.log(`获取到 flow_id: ${flowId}`);
  
  // 步骤2: 提交用户名和密码
  console.log('步骤2: 提交用户名和密码...');
  let loginResponse;
  try {
    loginResponse = await client.post(
      `${targetBaseUrl}/auth/login_flow/${flowId}`,
      {
        username: credentials.username,
        password: credentials.password,
        client_id: `${targetBaseUrl}/`
      },
      {
        headers: baseHeaders,
        maxRedirects: 0,
        validateStatus: function (status) {
          return status >= 200 && status < 500;
        }
      }
    );
  } catch (error) {
    console.error('提交登录信息失败:', error.message);
    if (error.response) {
      console.error('响应状态:', error.response.status);
      console.error('响应数据:', JSON.stringify(error.response.data, null, 2));
      return {
        success: false,
        message: `提交登录信息失败: ${error.response.status} - ${JSON.stringify(error.response.data)}`,
        response: error.response.data
      };
    }
    return {
      success: false,
      message: `提交登录信息失败: ${error.message}`,
      response: null
    };
  }
  
  console.log(`登录响应状态码: ${loginResponse.status}`);
  console.log(`登录响应数据:`, JSON.stringify(loginResponse.data, null, 2));
  
  // 检查登录是否成功
  const responseData = loginResponse.data || {};
  const responseType = responseData.type;
  
  console.log(`响应类型: ${responseType}`);
  
  // Home Assistant 登录成功时，type 为 "create_entry"
  if (responseType === 'create_entry') {
    // 从 Cookie jar 中获取所有 Cookie
    console.log('从 Cookie jar 中获取 Cookie...');
    const jarCookies = await cookieJar.getCookies(targetBaseUrl);
    console.log(`Cookie jar 中有 ${jarCookies.length} 个 Cookie`);
    
    // 合并所有请求的 Cookie（从响应头和 Cookie jar）
    const flowCookies = flowResponse.headers['set-cookie'] || [];
    const loginCookies = loginResponse.headers['set-cookie'] || [];
    const allCookies = [...initialCookies, ...flowCookies, ...loginCookies];
    
    // 从 Cookie jar 转换为 Set-Cookie 格式
    jarCookies.forEach(cookie => {
      let cookieStr = `${cookie.key}=${cookie.value}`;
      if (cookie.path) cookieStr += `; Path=${cookie.path}`;
      if (cookie.domain) cookieStr += `; Domain=${cookie.domain}`;
      if (cookie.expires) cookieStr += `; Expires=${cookie.expires.toUTCString()}`;
      if (cookie.maxAge) cookieStr += `; Max-Age=${cookie.maxAge}`;
      if (cookie.secure) cookieStr += `; Secure`;
      if (cookie.httpOnly) cookieStr += `; HttpOnly`;
      if (cookie.sameSite) cookieStr += `; SameSite=${cookie.sameSite}`;
      allCookies.push(cookieStr);
    });
    
    // 去重 Cookie（保留最后一个）
    const cookieMap = new Map();
    allCookies.forEach(cookie => {
      const name = cookie.split('=')[0];
      cookieMap.set(name, cookie);
    });
    let uniqueCookies = Array.from(cookieMap.values());
    
    console.log(`登录成功！获取到 ${uniqueCookies.length} 个唯一 Cookie`);
    uniqueCookies.forEach((cookie, index) => {
      console.log(`Cookie ${index + 1}: ${cookie.substring(0, 100)}...`);
    });
    
    // 步骤3: 处理 OAuth2 授权流程
    // 登录成功后，Home Assistant 需要完成 OAuth2 授权才能访问主页面
    console.log('步骤3: 处理 OAuth2 授权流程...');
    try {
      // 构建 state 参数（base64 编码的 JSON）
      const stateData = {
        hassUrl: targetBaseUrl,
        clientId: `${targetBaseUrl}/`
      };
      const state = Buffer.from(JSON.stringify(stateData)).toString('base64');
      
      // 构建授权 URL
      const redirectUri = `${targetBaseUrl}/?auth_callback=1`;
      const clientId = `${targetBaseUrl}/`;
      const authorizeUrl = `${targetBaseUrl}/auth/authorize?response_type=code&redirect_uri=${encodeURIComponent(redirectUri)}&client_id=${encodeURIComponent(clientId)}&state=${encodeURIComponent(state)}`;
      
      console.log(`访问授权端点: ${authorizeUrl}`);
      
      // 使用 Cookie jar 的客户端访问授权端点，跟随重定向
      const authorizeResponse = await client.get(authorizeUrl, {
        headers: {
          'User-Agent': baseHeaders['User-Agent'],
          'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',
          'Accept-Language': 'zh-CN,zh;q=0.9,en;q=0.8',
          'Referer': `${targetBaseUrl}/`
        },
        maxRedirects: 10, // 增加重定向次数
        validateStatus: function (status) {
          return status >= 200 && status < 400;
        }
      });
      
      console.log(`授权响应状态码: ${authorizeResponse.status}`);
      const finalUrl = authorizeResponse.request?.res?.responseUrl || authorizeResponse.config?.url || authorizeUrl;
      console.log(`授权最终 URL: ${finalUrl}`);
      
      // 检查是否是重定向到回调 URL
      if (finalUrl.includes('auth_callback=1') || finalUrl.includes('code=')) {
        console.log('检测到授权回调，访问回调 URL 获取 Cookie...');
        try {
          const callbackResponse = await client.get(finalUrl, {
            headers: {
              'User-Agent': baseHeaders['User-Agent'],
              'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',
              'Referer': authorizeUrl
            },
            maxRedirects: 5,
            validateStatus: function (status) {
              return status >= 200 && status < 400;
            }
          });
          console.log(`回调响应状态码: ${callbackResponse.status}`);
        } catch (callbackError) {
          console.log('访问回调 URL 失败:', callbackError.message);
        }
      }
      
      // 尝试访问主页面来触发 Cookie 设置
      console.log('访问主页面以触发 Cookie 设置...');
      try {
        const homePageResponse = await client.get(`${targetBaseUrl}/`, {
          headers: {
            'User-Agent': baseHeaders['User-Agent'],
            'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',
            'Referer': finalUrl
          },
          maxRedirects: 5,
          validateStatus: function (status) {
            return status >= 200 && status < 400;
          }
        });
        console.log(`主页面响应状态码: ${homePageResponse.status}`);
      } catch (homeError) {
        console.log('访问主页面失败:', homeError.message);
      }
      
      // 从 Cookie jar 中获取授权后的 Cookie
      const authorizeJarCookies = await cookieJar.getCookies(targetBaseUrl);
      console.log(`授权后 Cookie jar 中有 ${authorizeJarCookies.length} 个 Cookie`);
      
      // 获取授权响应中的 Cookie
      const authorizeCookies = authorizeResponse.headers['set-cookie'] || [];
      console.log(`授权响应获取到 ${authorizeCookies.length} 个 Cookie`);
      
      // 从 Cookie jar 转换为 Set-Cookie 格式并合并
      authorizeJarCookies.forEach(cookie => {
        let cookieStr = `${cookie.key}=${cookie.value}`;
        if (cookie.path) cookieStr += `; Path=${cookie.path}`;
        if (cookie.domain) cookieStr += `; Domain=${cookie.domain}`;
        if (cookie.expires) cookieStr += `; Expires=${cookie.expires.toUTCString()}`;
        if (cookie.maxAge) cookieStr += `; Max-Age=${cookie.maxAge}`;
        if (cookie.secure) cookieStr += `; Secure`;
        if (cookie.httpOnly) cookieStr += `; HttpOnly`;
        if (cookie.sameSite) cookieStr += `; SameSite=${cookie.sameSite}`;
        cookieMap.set(cookie.key, cookieStr);
      });
      
      // 合并授权响应中的 Cookie
      authorizeCookies.forEach(cookie => {
        const name = cookie.split('=')[0];
        cookieMap.set(name, cookie);
      });
      
      uniqueCookies = Array.from(cookieMap.values());
      
      console.log(`授权完成！最终获取到 ${uniqueCookies.length} 个唯一 Cookie`);
      
      // 如果还是没有 Cookie，尝试使用登录结果中的 token
      if (uniqueCookies.length === 0 && responseData.result) {
        console.log(`尝试使用登录结果中的 token: ${responseData.result}`);
        // 这里可以尝试使用 token 来获取访问令牌
        // 但 Home Assistant 的 token 通常需要通过浏览器来设置 Cookie
      }
    } catch (error) {
      console.log('授权流程失败（可能不需要）:', error.message);
      if (error.response) {
        console.log('授权响应状态:', error.response.status);
        console.log('授权响应 URL:', error.response.request?.res?.responseUrl || error.config?.url);
      }
      // 授权失败不影响登录，继续使用已有的 Cookie
    }
    
    return {
      success: true,
      cookies: uniqueCookies,
      response: loginResponse.data
    };
  } else {
    console.error(`登录失败！响应:`, responseData);
    const errorMessage = responseData.errors?.base?.[0] 
      || responseData.errors?.username?.[0]
      || responseData.errors?.password?.[0]
      || responseData.message 
      || `登录失败，响应类型: ${responseType}`;
    return {
      success: false,
      message: errorMessage,
      response: responseData
    };
  }
}

// 处理普通表单登录（未加密）
async function handlePlainFormLogin(config, credentials) {
  const { targetBaseUrl, loginUrl, loginMethodConfig } = config;
  const { usernameField, passwordField, captchaField, contentType, successCode, successField } = loginMethodConfig;
  
  console.log('=== 普通表单登录 ===');
  console.log(`目标URL: ${targetBaseUrl}${loginUrl}`);
  console.log(`用户名: ${credentials.username}`);
  console.log(`密码: ${'*'.repeat(credentials.password.length)}`);
  console.log(`内容类型: ${contentType}`);
  console.log(`成功标识字段: ${successField || 'code'}, 成功值: ${successCode}`);
  
  // 构建请求数据
  const requestData = {
    [usernameField]: credentials.username,
    [passwordField]: credentials.password
  };
  
  if (captchaField) {
    requestData[captchaField] = '';
  }
  
  // 发送登录请求
  const headers = {};
  let requestBody;
  
  if (contentType === 'application/x-www-form-urlencoded') {
    headers['Content-Type'] = 'application/x-www-form-urlencoded';
    requestBody = new URLSearchParams(requestData).toString();
  } else if (contentType === 'application/json') {
    headers['Content-Type'] = 'application/json';
    requestBody = JSON.stringify(requestData);
  } else {
    requestBody = requestData;
  }
  
  console.log(`发送登录请求到: ${targetBaseUrl}${loginUrl}`);
  console.log(`请求头:`, JSON.stringify(headers, null, 2));
  console.log(`请求体:`, contentType === 'application/json' ? requestBody : requestBody.substring(0, 200) + '...');
  
  const loginResponse = await axios.post(
    `${targetBaseUrl}${loginUrl}`,
    requestBody,
    {
      headers,
      withCredentials: true,
      maxRedirects: 0,
      validateStatus: function (status) {
        return status >= 200 && status < 400;
      }
    }
  );
  
  console.log(`登录响应状态码: ${loginResponse.status}`);
  console.log(`响应数据:`, JSON.stringify(loginResponse.data, null, 2));
  
  // 检查登录是否成功
  const responseData = loginResponse.data || {};
  const successValue = successField ? responseData[successField] : responseData.code;
  
  console.log(`成功标识值: ${successValue}, 期望值: ${successCode}`);
  
  if (successValue === successCode) {
    const cookies = loginResponse.headers['set-cookie'] || [];
    console.log(`登录成功！获取到 ${cookies.length} 个 Cookie`);
    cookies.forEach((cookie, index) => {
      console.log(`Cookie ${index + 1}: ${cookie.substring(0, 100)}...`);
    });
    return {
      success: true,
      cookies: cookies,
      response: loginResponse.data
    };
  } else {
    console.error(`登录失败！响应:`, responseData);
    return {
      success: false,
      message: responseData.msg || responseData.message || '登录失败',
      response: responseData
    };
  }
}

// 通用的自动登录端点
app.get('/api/auto-login/:siteId', async (req, res) => {
  const startTime = Date.now();
  const requestId = `${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
  
  // 立即输出日志，确认请求已到达
  console.log('\n' + '='.repeat(80));
  console.log(`[${requestId}] ⚡⚡⚡ 收到自动登录请求！⚡⚡⚡`);
  console.log(`[${requestId}] 时间: ${new Date().toISOString()}`);
  console.log(`[${requestId}] 请求路径: ${req.path}`);
  console.log(`[${requestId}] 请求方法: ${req.method}`);
  console.log(`[${requestId}] 完整URL: ${req.protocol}://${req.get('host')}${req.originalUrl}`);
  console.log(`[${requestId}] 客户端IP: ${req.ip || req.connection.remoteAddress || req.socket.remoteAddress}`);
  console.log(`[${requestId}] User-Agent: ${req.get('user-agent') || 'Unknown'}`);
  
  try {
    const { siteId } = req.params;
    console.log(`[${requestId}] 网站ID: ${siteId}`);
    
    // 获取网站配置
    const config = autoLoginConfig[siteId];
    if (!config) {
      console.error(`[${requestId}] 错误: 未找到网站ID "${siteId}" 的配置`);
      console.error(`[${requestId}] 可用的网站ID: ${Object.keys(autoLoginConfig).join(', ') || '无'}`);
      return res.status(404).json({
        success: false,
        message: `未找到网站ID "${siteId}" 的配置`,
        availableSites: Object.keys(autoLoginConfig)
      });
    }
    
    console.log(`[${requestId}] 网站名称: ${config.name}`);
    console.log(`[${requestId}] 目标地址: ${config.targetBaseUrl}`);
    console.log(`[${requestId}] 登录方法: ${config.loginMethod}`);
    
    // 获取登录凭据（优先使用环境变量）
    const envUsername = process.env[config.credentials.envUsername];
    const envPassword = process.env[config.credentials.envPassword];
    const credentials = {
      username: envUsername || config.credentials.username,
      password: envPassword || config.credentials.password
    };
    
    console.log(`[${requestId}] 凭据来源: ${envUsername ? '环境变量' : '配置文件'}`);
    console.log(`[${requestId}] 用户名: ${credentials.username}`);
    console.log(`[${requestId}] 密码: ${'*'.repeat(credentials.password.length)}`);
    
    if (!credentials.username || !credentials.password) {
      console.error(`[${requestId}] 错误: 登录凭据未配置`);
      return res.status(400).json({
        success: false,
        message: '登录凭据未配置'
      });
    }
    
    // 根据登录方法处理登录
    let loginResult;
    console.log(`[${requestId}] 开始执行登录...`);
    switch (config.loginMethod) {
      case 'rsa-encrypted-form':
        loginResult = await handleRSAEncryptedFormLogin(config, credentials);
        break;
      case 'plain-form':
        loginResult = await handlePlainFormLogin(config, credentials);
        break;
      case 'home-assistant':
        loginResult = await handleHomeAssistantLogin(config, credentials);
        break;
      default:
        console.error(`[${requestId}] 错误: 不支持的登录方法: ${config.loginMethod}`);
        return res.status(400).json({
          success: false,
          message: `不支持的登录方法: ${config.loginMethod}`
        });
    }
    
    if (!loginResult.success) {
      console.error(`[${requestId}] 登录失败:`, loginResult.message);
      console.error(`[${requestId}] 失败响应:`, JSON.stringify(loginResult.response, null, 2));
      const duration = Date.now() - startTime;
      console.log(`[${requestId}] 总耗时: ${duration}ms`);
      console.log('='.repeat(80) + '\n');
      
      // 返回错误页面而不是 JSON
      const errorHtml = `
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>自动登录失败</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
            background: linear-gradient(135deg, #f5f7fa 0%, #c3cfe2 100%);
        }
        .error-container {
            background: white;
            padding: 40px;
            border-radius: 12px;
            box-shadow: 0 10px 30px rgba(0, 0, 0, 0.1);
            max-width: 600px;
            text-align: center;
        }
        .error-icon {
            font-size: 64px;
            margin-bottom: 20px;
        }
        .error-title {
            font-size: 24px;
            color: #e74c3c;
            margin-bottom: 15px;
        }
        .error-message {
            font-size: 16px;
            color: #666;
            margin-bottom: 20px;
            line-height: 1.6;
        }
        .error-details {
            background: #f8f9fa;
            padding: 15px;
            border-radius: 8px;
            margin-top: 20px;
            text-align: left;
            font-size: 14px;
            color: #555;
        }
        .error-details pre {
            margin: 0;
            white-space: pre-wrap;
            word-wrap: break-word;
        }
    </style>
</head>
<body>
    <div class="error-container">
        <div class="error-icon">❌</div>
        <div class="error-title">自动登录失败</div>
        <div class="error-message">${loginResult.message}</div>
        <div class="error-details">
            <strong>请求ID:</strong> ${requestId}<br>
            <strong>网站:</strong> ${config.name}<br>
            <strong>详细信息:</strong>
            <pre>${JSON.stringify(loginResult.response, null, 2)}</pre>
        </div>
        <button onclick="window.history.back()" style="margin-top: 20px; padding: 10px 20px; background: #3498db; color: white; border: none; border-radius: 6px; cursor: pointer;">返回</button>
    </div>
</body>
</html>
      `;
      return res.status(500).send(errorHtml);
    }
    
    console.log(`[${requestId}] 登录成功！`);
    
    // 解析 Cookie
    const cookieData = parseCookies(loginResult.cookies);
    console.log(`[${requestId}] 解析到 ${cookieData.length} 个 Cookie:`);
    cookieData.forEach((cookie, index) => {
      console.log(`[${requestId}]   Cookie ${index + 1}: ${cookie.name} = ${cookie.value.substring(0, 20)}...`);
    });
    
    // 生成跳转 HTML（添加更多调试信息）
    // 对于 Home Assistant，如果没有 Cookie，让浏览器端完成登录
    let redirectUrl = `http://${config.targetHost}/`;
    let homeAssistantLoginData = null;
    
    if (config.loginMethod === 'home-assistant' && cookieData.length === 0) {
      console.log(`[${requestId}] Home Assistant 无 Cookie，准备在浏览器端完成登录流程`);
      // 传递登录信息给浏览器端
      homeAssistantLoginData = {
        targetBaseUrl: config.targetBaseUrl,
        username: credentials.username,
        password: credentials.password,
        // 如果后端已获取到 result token，也传递过去
        resultToken: loginResult.response?.result
      };
      redirectUrl = config.targetBaseUrl;
      console.log(`[${requestId}] 将在浏览器端执行 Home Assistant 登录流程`);
    }
    
    console.log(`[${requestId}] 生成跳转页面，目标: ${redirectUrl}`);
    const html = generateRedirectHTML(
      cookieData,
      config.targetHost,
      config.targetDomain,
      requestId,
      redirectUrl,
      homeAssistantLoginData
    );
    
    // 在响应头中设置 Cookie
    console.log(`[${requestId}] 设置响应头 Cookie...`);
    loginResult.cookies.forEach((cookie, index) => {
      // 修改 Cookie 的 Domain，移除端口号
      let modifiedCookie = cookie.replace(/Domain=[^;]+/i, `Domain=${config.targetDomain}`);
      res.setHeader('Set-Cookie', modifiedCookie);
      console.log(`[${requestId}]   设置 Cookie ${index + 1}: ${modifiedCookie.substring(0, 80)}...`);
    });
    
    const duration = Date.now() - startTime;
    console.log(`[${requestId}] 总耗时: ${duration}ms`);
    console.log(`[${requestId}] 返回跳转页面`);
    console.log('='.repeat(80) + '\n');
    
    res.send(html);
  } catch (error) {
    const duration = Date.now() - startTime;
    console.error(`[${requestId}] 自动登录异常:`, error.message);
    console.error(`[${requestId}] 错误堆栈:`, error.stack);
    if (error.response) {
      console.error(`[${requestId}] 响应状态:`, error.response.status);
      console.error(`[${requestId}] 响应头:`, JSON.stringify(error.response.headers, null, 2));
      console.error(`[${requestId}] 响应数据:`, JSON.stringify(error.response.data, null, 2));
    }
    if (error.request) {
      console.error(`[${requestId}] 请求信息:`, {
        url: error.config?.url,
        method: error.config?.method,
        headers: error.config?.headers
      });
    }
    console.log(`[${requestId}] 总耗时: ${duration}ms`);
    console.log('='.repeat(80) + '\n');
    res.status(500).json({
      success: false,
      message: '自动登录失败: ' + error.message,
      error: process.env.NODE_ENV === 'development' ? error.stack : undefined
    });
  }
});

// 获取所有配置的网站列表
app.get('/api/auto-login', (req, res) => {
  const sites = Object.keys(autoLoginConfig).map(siteId => ({
    id: siteId,
    name: autoLoginConfig[siteId].name,
    endpoint: `/api/auto-login/${siteId}`
  }));
  res.json({ sites });
});

// 健康检查端点
app.get('/api/health', (req, res) => {
  res.json({ 
    status: 'ok',
    timestamp: new Date().toISOString(),
    port: PORT,
    configuredSites: Object.keys(autoLoginConfig)
  });
});

// 测试端点 - 用于验证配置
app.get('/api/test/:siteId', (req, res) => {
  const { siteId } = req.params;
  const config = autoLoginConfig[siteId];
  
  if (!config) {
    return res.json({
      success: false,
      message: `未找到网站ID "${siteId}" 的配置`,
      availableSites: Object.keys(autoLoginConfig)
    });
  }
  
  const envUsername = process.env[config.credentials.envUsername];
  const envPassword = process.env[config.credentials.envPassword];
  const credentials = {
    username: envUsername || config.credentials.username,
    password: envPassword || config.credentials.password
  };
  
  res.json({
    success: true,
    siteId,
    config: {
      name: config.name,
      targetBaseUrl: config.targetBaseUrl,
      loginMethod: config.loginMethod,
      loginUrl: config.loginUrl,
      hasCredentials: !!(credentials.username && credentials.password),
      credentialsSource: envUsername ? '环境变量' : '配置文件',
      username: credentials.username,
      passwordLength: credentials.password ? credentials.password.length : 0
    }
  });
});

app.listen(PORT, '0.0.0.0', () => {
  console.log('\n' + '='.repeat(80));
  console.log('🚀 后端服务器启动成功！');
  console.log('='.repeat(80));
  console.log(`📍 本地地址: http://localhost:${PORT}`);
  console.log(`📍 服务器地址: http://0.0.0.0:${PORT}`);
  console.log(`📍 外部访问: http://222.243.138.146:${PORT} (通过防火墙端口映射)`);
  console.log(`\n📋 已配置的自动登录网站: ${Object.keys(autoLoginConfig).join(', ') || '无'}`);
  console.log(`\n🔗 可用端点:`);
  console.log(`   - 健康检查: http://localhost:${PORT}/api/health`);
  console.log(`   - 测试配置: http://localhost:${PORT}/api/test/:siteId`);
  console.log(`   - 自动登录: http://localhost:${PORT}/api/auto-login/:siteId`);
  console.log(`\n💡 提示: 确保防火墙已配置端口映射 (前端:8888, 后端:8889 -> 外网)`);
  console.log('='.repeat(80) + '\n');
});