Scan Succeeds, Download Says Not Logged In: How I Recovered BBDown's Missing Cookie

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
# bbdown_login_core.py — BBDown QR login repair core
# Talks only to Bilibili's official passport endpoints; writes only local BBDown.data
import argparse, os, re, subprocess, sys, time
from urllib.parse import urlparse, parse_qs, quote

GEN_URL = "https://passport.bilibili.com/x/passport-login/web/qrcode/generate?source=main-fe-header"
POLL_URL = "https://passport.bilibili.com/x/passport-login/web/qrcode/poll?qrcode_key={key}&source=main-fe-header"
UA = ("Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 "
      "(KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36")

def log(msg):
    print(f"[{time.strftime('%H:%M:%S')}] {msg}", flush=True)

def mask(v, keep=8):
    return v[:keep] + "……" if len(v) > keep else "……"

def collect_set_cookies(resp):
    out = []
    for r in resp.history + [resp]:
        for k, v in r.headers.items():
            if k.lower() == "set-cookie":
                pair = v.split(";")[0]
                if "=" in pair:
                    n, val = pair.split("=", 1)
                    if n.strip() and val.strip():
                        out.append((urlparse(r.url).netloc, n.strip(), val.strip()))
    return out

def exchange_ticket(session, ticket, gourl):
    """Exchange the cross-domain ticket for real cookies (the step old BBDown never did)"""
    cookies = {}
    urls = [
        f"https://passport.biligame.com/x/passport-login/web/crossDomain?ticket={ticket}&gourl={quote(gourl, safe='')}",
        f"https://passport.bilibili.com/x/passport-login/web/crossDomain?ticket={ticket}&gourl={quote(gourl, safe='')}",
        f"https://passport.biligame.com/crossDomain?ticket={ticket}&gourl={quote(gourl, safe='')}",
    ]
    for url in urls:
        log(f"Trying cross-domain confirm: {urlparse(url).netloc} ...")
        try:
            r = session.get(url, timeout=15, allow_redirects=True)
        except Exception as e:
            log(f"  request failed: {e}")
            continue
        for src, n, v in collect_set_cookies(r):
            log(f"  Set-Cookie from {src}: {n}={mask(v)}")
            cookies[n] = v
        for m in re.findall(r"https?://[^\"'\s<>]+", r.text):
            m = m.replace("\\u0026", "&").replace("&amp;", "&")
            if "sso" in m.lower() and ("bilibili" in m or "biligame" in m):
                try:
                    for _, n, v in collect_set_cookies(session.get(m, timeout=15)):
                        cookies[n] = v
                except Exception:
                    pass
        if "SESSDATA" in cookies:
            log("SESSDATA obtained")
            break
    return cookies

def open_image(path):
    try:
        if sys.platform == "win32":
            os.startfile(path)
        elif sys.platform == "darwin":
            subprocess.Popen(["open", path])
        else:
            subprocess.Popen(["xdg-open", path])
    except Exception:
        pass

def do_login(data_dir):
    import requests, qrcode
    s = requests.Session()
    s.headers.update({"User-Agent": UA, "Referer": "https://passport.bilibili.com/"})

    qr_url = s.get(GEN_URL, timeout=15).json()["data"]["url"]
    key = parse_qs(urlparse(qr_url).query)["qrcode_key"][0]

    png = os.path.join(data_dir, "login_qrcode.png")
    qrcode.make(qr_url).save(png)
    open_image(png)
    log(f"QR code saved and opened: {png}. Scan it with the Bilibili app and confirm.")

    deadline = time.time() + 180
    success_url = None
    while time.time() < deadline:
        time.sleep(2)
        code = s.get(POLL_URL.format(key=key), timeout=15).json()["data"]["code"]
        if code == 86101:
            continue
        if code == 86090:
            log("Scanned. Please confirm on the phone...")
            continue
        if code == 86038:
            log("QR code expired, please re-run")
            return 2
        if code == 0:
            success_url = s.get(POLL_URL.format(key=key), timeout=15).json()["data"]["url"]
            log("Login confirmed")
            break
        log(f"unexpected code={code}")
        return 2
    if not success_url:
        log("Timed out waiting for the scan, please re-run")
        return 2

    q = parse_qs(urlparse(success_url).query)
    if "SESSDATA" in q:
        cookie_str = success_url.split("?", 1)[1].replace("&", ";").replace(",", "%2C")
        log("URL carries cookies directly (old flow)")
    elif "ticket" in q:
        log("Got a cross-domain ticket (new flow), exchanging for real cookies ...")
        cookies = exchange_ticket(s, q["ticket"][0], q.get("gourl", ["https://www.bilibili.com"])[0])
        if "SESSDATA" not in cookies:
            log(f"Exchange failed! keys: {', '.join(cookies.keys()) or 'none'}")
            return 3
        cookie_str = ";".join(f"{k}={v}" for k, v in cookies.items()).replace(",", "%2C")
    else:
        log("Unrecognized success URL")
        return 4

    data_file = os.path.join(data_dir, "BBDown.data")
    if os.path.exists(data_file):
        bak = data_file + ".bak-" + time.strftime("%Y%m%d-%H%M%S")
        os.replace(data_file, bak)
        log(f"Backed up the old credential file: {os.path.basename(bak)}")
    with open(data_file, "w", encoding="utf-8") as f:
        f.write(cookie_str)
    log("Done. Verify with a normal BBDown download.")
    return 0

def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("--data-dir", default=".")
    ap.add_argument("--check", action="store_true", help="only check whether BBDown.data contains SESSDATA")
    args = ap.parse_args()
    if args.check:
        data_file = os.path.join(args.data_dir, "BBDown.data")
        if os.path.exists(data_file):
            has = "SESSDATA=" in open(data_file, encoding="utf-8").read()
            print(f"BBDown.data exists, contains SESSDATA: {has}")
            sys.exit(0 if has else 1)
        print("BBDown.data does not exist")
        sys.exit(1)
    sys.exit(do_login(args.data_dir))

if __name__ == "__main__":
    main()

param(
    [string]$BBDownDir = (Get-Location).Path,
    [switch]$CheckOnly
)
$ErrorActionPreference = "Stop"
$core = Join-Path $PSScriptRoot "bbdown_login_core.py"
if (-not (Test-Path $core)) { throw "bbdown_login_core.py not found next to this script" }

# 1. Locate Python 3 (py launcher first, then PATH; install via the built-in winget if absent)
$py = $null
foreach ($cand in @(@("py", "-3"), @("python"))) {
    try {
        $v = & $cand[0] -c "import sys; print(sys.version_info[0])" 2>$null
        if ($v -eq "3") { $py = $cand; break }
    } catch { }
}
if (-not $py) {
    Write-Host "Python 3 not found. Installing via winget..."
    winget install --id Python.Python.3.12 --silent --accept-package-agreements --accept-source-agreements
    $py = @("py", "-3")
}

# 2. Isolated venv + two pure-Python dependencies
$venv = Join-Path $env:TEMP "bbdown-login-venv"
if (-not (Test-Path (Join-Path $venv "Scripts\python.exe"))) { & $py[0] $py[1] -m venv $venv }
$vpy = Join-Path $venv "Scripts\python.exe"
& $vpy -m pip install --quiet --disable-pip-version-check requests qrcode
if ($LASTEXITCODE -ne 0) { throw "pip install failed" }

# 3. Check or repair
if ($CheckOnly) { & $vpy $core --data-dir $BBDownDir --check; return }
& $vpy $core --data-dir $BBDownDir
if ($LASTEXITCODE -ne 0) { throw "login fix failed, see messages above" }

# 4. Verify
$exe = Join-Path $BBDownDir "BBDown.exe"
if (Test-Path $exe) {
    Write-Host "`n[Verify] BBDown parse test..."
    $out = & $exe --only-show-info BV1Ad4y1g7AZ 2>&1 | Out-String
    if ($out -match "尚未登录") { Write-Host "VERIFY FAILED: still reports not logged in." -ForegroundColor Red }
    elseif ($out -match "任务完成|共计") { Write-Host "VERIFY OK: logged in and parse succeeded." -ForegroundColor Green }
    else { Write-Host "VERIFY UNCLEAR: review the output above manually." }
} else {
    Write-Host "BBDown.exe not found in $BBDownDir; skip verify."
}

#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
CORE="$SCRIPT_DIR/bbdown_login_core.py"
[ -f "$CORE" ] || { echo "bbdown_login_core.py not found next to this script"; exit 1; }

MODE="${1:-}"
if [ "$MODE" = "--check" ]; then DATA_DIR="${2:-.}"; else DATA_DIR="${1:-.}"; fi

# 1. Ensure Python 3 and venv support (apt only when missing)
if ! command -v python3 >/dev/null 2>&1; then
  sudo apt-get update && sudo apt-get install -y python3
fi
if ! python3 -m venv --help >/dev/null 2>&1; then
  sudo apt-get install -y python3-venv
fi

# 2. Isolated venv + dependencies
VENV="$HOME/.cache/bbdown-login-venv"
if [ ! -x "$VENV/bin/python" ] && [ ! -x "$VENV/Scripts/python.exe" ]; then
  python3 -m venv "$VENV"
fi
VPY="$VENV/bin/python"
[ -x "$VPY" ] || VPY="$VENV/Scripts/python.exe"
"$VPY" -m pip install --quiet --disable-pip-version-check requests qrcode

# 3. Check or repair
if [ "$MODE" = "--check" ]; then exec "$VPY" "$CORE" --data-dir "$DATA_DIR" --check; fi
"$VPY" "$CORE" --data-dir "$DATA_DIR"

# 4. Verify
if [ -x "$DATA_DIR/BBDown" ]; then
  echo "[Verify] BBDown parse test..."
  if "$DATA_DIR/BBDown" --only-show-info BV1Ad4y1g7AZ 2>&1 | grep -q "尚未登录"; then
    echo "VERIFY FAILED: still reports not logged in."
  else
    echo "VERIFY OK: logged in and parse succeeded."
  fi
else
  echo "BBDown binary not found in $DATA_DIR; skip verify."
fi

#!/bin/zsh
set -euo pipefail
SCRIPT_DIR="${0:A:h}"
CORE="$SCRIPT_DIR/bbdown_login_core.py"
[ -f "$CORE" ] || { echo "bbdown_login_core.py not found next to this script"; exit 1; }

MODE="${1:-}"
if [[ "$MODE" == "--check" ]]; then DATA_DIR="${2:-.}"; else DATA_DIR="${1:-.}"; fi

# 1. macOS 26 ships python3 with the command-line tools; if absent, ask for it instead of mutating the system
if ! command -v python3 >/dev/null 2>&1; then
  echo "python3 not found. Run 'xcode-select --install' first, then re-run."
  exit 1
fi

# 2. Isolated venv + dependencies
VENV="$HOME/.cache/bbdown-login-venv"
if [[ ! -x "$VENV/bin/python" && ! -x "$VENV/Scripts/python.exe" ]]; then
  python3 -m venv "$VENV"
fi
VPY="$VENV/bin/python"
[[ -x "$VPY" ]] || VPY="$VENV/Scripts/python.exe"
"$VPY" -m pip install --quiet --disable-pip-version-check requests qrcode

# 3. Check or repair
if [[ "$MODE" == "--check" ]]; then exec "$VPY" "$CORE" --data-dir "$DATA_DIR" --check; fi
"$VPY" "$CORE" --data-dir "$DATA_DIR"

# 4. Verify
BBDOWN_BIN=""
for c in "$DATA_DIR/BBDown" "$DATA_DIR/BBDown.exe"; do
  [[ -x "$c" ]] && BBDOWN_BIN="$c" && break
done
if [[ -n "$BBDOWN_BIN" ]]; then
  echo "[Verify] BBDown parse test..."
  if "$BBDOWN_BIN" --only-show-info BV1Ad4y1g7AZ 2>&1 | grep -q "尚未登录"; then
    echo "VERIFY FAILED: still reports not logged in."
  else
    echo "VERIFY OK: logged in and parse succeeded."
  fi
else
  echo "BBDown binary not found in $DATA_DIR; skip verify."
fi

Please fix the "not logged in" problem of BBDown QR login on this machine. Requirements:
1. Locate the BBDown executable directory and the actual BBDown.data path (in 1.6.3 it lives next to the exe).
2. Inspect BBDown.data: if it contains ticket= but no SESSDATA=, apply the fix described in the article; otherwise report the actual content to the user first.
3. Choose the repair path by OS: Windows 11 via PowerShell, Ubuntu 26.04 via bash, macOS 26 via zsh; create an isolated venv with the system Python, install the two pure-Python libraries requests and qrcode, then run the core login script.
4. Remind the user to scan the QR code; never skip the human confirmation step; never try to redeem an old ticket (it expires within minutes).
5. Verify after the fix: run BBDown to parse a public video and confirm the output contains no "not logged in" line.
6. Never print full cookies, raw SESSDATA or ticket values, private addresses, full computer names, or any account information; always mask.
7. Do not modify the BBDown binary itself, do not install unknown binaries, do not upload any local files.