Smail/test/tools/testuser2_setup_security.py

61 lines
2.4 KiB
Python

import urllib.request, ssl, json, http.cookiejar
ctx = ssl.create_default_context()
ctx.check_hostname = False
ctx.verify_mode = ssl.CERT_NONE
cj = http.cookiejar.CookieJar()
opener = urllib.request.build_opener(urllib.request.HTTPSHandler(context=ctx), urllib.request.HTTPCookieProcessor(cj))
# 1. 登录 testuser2
login_payload = json.dumps({"account": "testuser2", "password": "Password123!"}).encode("utf-8")
req = urllib.request.Request("https://47.108.78.12/api/v1/login", data=login_payload, headers={
"Content-Type": "application/json",
"Host": "mail.solit.cn",
"Origin": "https://mail.solit.cn"
})
resp = opener.open(req, timeout=5)
data = json.loads(resp.read().decode())
print("Testuser2 login resp:", data)
csrf_token = ""
for c in cj:
if c.name == "smail_csrf":
csrf_token = c.value
headers = {
"Content-Type": "application/json",
"Host": "mail.solit.cn",
"Origin": "https://mail.solit.cn",
"Referer": "https://mail.solit.cn/",
"X-CSRF-Token": csrf_token
}
# 2. 如果需要强制修改密码,先修改密码
if data.get("data", {}).get("must_change_password"):
print("Testuser2 must change password, updating...")
pwd_payload = json.dumps({
"old_password": "Password123!",
"new_password": "UserPass1234!"
}).encode("utf-8")
req_chg = urllib.request.Request("https://47.108.78.12/api/v1/settings/modify_password", data=pwd_payload, headers=headers)
resp_chg = opener.open(req_chg, timeout=5)
print("Change password resp:", resp_chg.read().decode())
# 3. 设置密保问题
q_payload = json.dumps({
"question": "毕业学校",
"answer": "清华大学"
}).encode("utf-8")
req_q = urllib.request.Request("https://47.108.78.12/api/v1/security/credentials/question", data=q_payload, headers=headers)
resp_q = opener.open(req_q, timeout=5)
print("Set question resp:", resp_q.read().decode())
# 4. 生成一组离线恢复码
codes_payload = json.dumps({"count": 5}).encode("utf-8")
req_c = urllib.request.Request("https://47.108.78.12/api/v1/security/credentials/recovery-codes", data=codes_payload, headers=headers)
resp_c = opener.open(req_c, timeout=5)
c_data = json.loads(resp_c.read().decode())
print("Generate recovery codes resp:", c_data)
if c_data.get("data", {}).get("codes"):
with open("test/tools/testuser2_codes.json", "w", encoding="utf-8") as f:
json.dump(c_data["data"], f, ensure_ascii=False, indent=2)