扫码成功、下载未登录：BBDown 弄丢的 Cookie 是这样找回来的

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
# bbdown_login_core.py — BBDown 扫码登录修复核心
# 只访问 B 站官方 passport 接口；Cookie 只写本机 BBDown.data
import argparse, os, re, subprocess, sys, time
from urllib.parse import urlparse, parse_qs, quote

GEN_URL = "https://passport.bilibili.com/x/passport-login/web/qrcode/generate?source=main-fe-header"
POLL_URL = "https://passport.bilibili.com/x/passport-login/web/qrcode/poll?qrcode_key={key}&source=main-fe-header"
UA = ("Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 "
      "(KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36")

def log(msg):
    print(f"[{time.strftime('%H:%M:%S')}] {msg}", flush=True)

def mask(v, keep=8):
    return v[:keep] + "……" if len(v) > keep else "……"

def collect_set_cookies(resp):
    out = []
    for r in resp.history + [resp]:
        for k, v in r.headers.items():
            if k.lower() == "set-cookie":
                pair = v.split(";")[0]
                if "=" in pair:
                    n, val = pair.split("=", 1)
                    if n.strip() and val.strip():
                        out.append((urlparse(r.url).netloc, n.strip(), val.strip()))
    return out

def exchange_ticket(session, ticket, gourl):
    """拿跨域 ticket 换真实 Cookie（老版 BBDown 缺失的一步）"""
    cookies = {}
    urls = [
        f"https://passport.biligame.com/x/passport-login/web/crossDomain?ticket={ticket}&gourl={quote(gourl, safe='')}",
        f"https://passport.bilibili.com/x/passport-login/web/crossDomain?ticket={ticket}&gourl={quote(gourl, safe='')}",
        f"https://passport.biligame.com/crossDomain?ticket={ticket}&gourl={quote(gourl, safe='')}",
    ]
    for url in urls:
        log(f"尝试跨域确认: {urlparse(url).netloc} ...")
        try:
            r = session.get(url, timeout=15, allow_redirects=True)
        except Exception as e:
            log(f"  请求失败: {e}")
            continue
        for src, n, v in collect_set_cookies(r):
            log(f"  Set-Cookie 来自 {src}: {n}={mask(v)}")
            cookies[n] = v
        for m in re.findall(r"https?://[^\"'\s<>]+", r.text):
            m = m.replace("\\u0026", "&").replace("&amp;", "&")
            if "sso" in m.lower() and ("bilibili" in m or "biligame" in m):
                try:
                    for _, n, v in collect_set_cookies(session.get(m, timeout=15)):
                        cookies[n] = v
                except Exception:
                    pass
        if "SESSDATA" in cookies:
            log("已获取 SESSDATA")
            break
    return cookies

def open_image(path):
    try:
        if sys.platform == "win32":
            os.startfile(path)
        elif sys.platform == "darwin":
            subprocess.Popen(["open", path])
        else:
            subprocess.Popen(["xdg-open", path])
    except Exception:
        pass

def do_login(data_dir):
    import requests, qrcode
    s = requests.Session()
    s.headers.update({"User-Agent": UA, "Referer": "https://passport.bilibili.com/"})

    qr_url = s.get(GEN_URL, timeout=15).json()["data"]["url"]
    key = parse_qs(urlparse(qr_url).query)["qrcode_key"][0]

    png = os.path.join(data_dir, "login_qrcode.png")
    qrcode.make(qr_url).save(png)
    open_image(png)
    log(f"二维码已生成并尝试打开: {png}，请用哔哩哔哩 APP 扫码并确认")

    deadline = time.time() + 180
    success_url = None
    while time.time() < deadline:
        time.sleep(2)
        code = s.get(POLL_URL.format(key=key), timeout=15).json()["data"]["code"]
        if code == 86101:
            continue
        if code == 86090:
            log("已扫码，请在手机上确认登录...")
            continue
        if code == 86038:
            log("二维码已过期，请重新运行")
            return 2
        if code == 0:
            success_url = s.get(POLL_URL.format(key=key), timeout=15).json()["data"]["url"]
            log("登录确认成功")
            break
        log(f"未知状态 code={code}")
        return 2
    if not success_url:
        log("等待扫码超时，请重新运行")
        return 2

    q = parse_qs(urlparse(success_url).query)
    if "SESSDATA" in q:
        cookie_str = success_url.split("?", 1)[1].replace("&", ";").replace(",", "%2C")
        log("返回 URL 直接包含 Cookie（旧流程）")
    elif "ticket" in q:
        log("返回的是跨域 ticket（新流程），正在换取真实 Cookie ...")
        cookies = exchange_ticket(s, q["ticket"][0], q.get("gourl", ["https://www.bilibili.com"])[0])
        if "SESSDATA" not in cookies:
            log(f"换取 Cookie 失败！获取到的键: {', '.join(cookies.keys()) or '无'}")
            return 3
        cookie_str = ";".join(f"{k}={v}" for k, v in cookies.items()).replace(",", "%2C")
    else:
        log("无法识别的返回 URL")
        return 4

    data_file = os.path.join(data_dir, "BBDown.data")
    if os.path.exists(data_file):
        bak = data_file + ".bak-" + time.strftime("%Y%m%d-%H%M%S")
        os.replace(data_file, bak)
        log(f"已备份原凭据文件: {os.path.basename(bak)}")
    with open(data_file, "w", encoding="utf-8") as f:
        f.write(cookie_str)
    log("全部完成，请用 BBDown 正常下载验证")
    return 0

def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("--data-dir", default=".")
    ap.add_argument("--check", action="store_true", help="仅检查 BBDown.data 是否包含 SESSDATA")
    args = ap.parse_args()
    if args.check:
        data_file = os.path.join(args.data_dir, "BBDown.data")
        if os.path.exists(data_file):
            has = "SESSDATA=" in open(data_file, encoding="utf-8").read()
            print(f"BBDown.data 存在，包含 SESSDATA: {has}")
            sys.exit(0 if has else 1)
        print("BBDown.data 不存在")
        sys.exit(1)
    sys.exit(do_login(args.data_dir))

if __name__ == "__main__":
    main()

param(
    [string]$BBDownDir = (Get-Location).Path,
    [switch]$CheckOnly
)
$ErrorActionPreference = "Stop"
$core = Join-Path $PSScriptRoot "bbdown_login_core.py"
if (-not (Test-Path $core)) { throw "bbdown_login_core.py not found next to this script" }

# 1. 找 Python 3（先 py 启动器，再 PATH；都没有则用系统自带的 winget 安装）
$py = $null
foreach ($cand in @(@("py", "-3"), @("python"))) {
    try {
        $v = & $cand[0] -c "import sys; print(sys.version_info[0])" 2>$null
        if ($v -eq "3") { $py = $cand; break }
    } catch { }
}
if (-not $py) {
    Write-Host "Python 3 not found. Installing via winget..."
    winget install --id Python.Python.3.12 --silent --accept-package-agreements --accept-source-agreements
    $py = @("py", "-3")
}

# 2. 独立虚拟环境 + 两个纯 Python 依赖（不污染系统环境）
$venv = Join-Path $env:TEMP "bbdown-login-venv"
if (-not (Test-Path (Join-Path $venv "Scripts\python.exe"))) { & $py[0] $py[1] -m venv $venv }
$vpy = Join-Path $venv "Scripts\python.exe"
& $vpy -m pip install --quiet --disable-pip-version-check requests qrcode
if ($LASTEXITCODE -ne 0) { throw "pip install failed" }

# 3. 检查或修复
if ($CheckOnly) { & $vpy $core --data-dir $BBDownDir --check; return }
& $vpy $core --data-dir $BBDownDir
if ($LASTEXITCODE -ne 0) { throw "login fix failed, see messages above" }

# 4. 验收：解析一个视频，确认不再提示未登录
$exe = Join-Path $BBDownDir "BBDown.exe"
if (Test-Path $exe) {
    Write-Host "`n[Verify] BBDown parse test..."
    $out = & $exe --only-show-info BV1Ad4y1g7AZ 2>&1 | Out-String
    if ($out -match "尚未登录") { Write-Host "VERIFY FAILED: still reports not logged in." -ForegroundColor Red }
    elseif ($out -match "任务完成|共计") { Write-Host "VERIFY OK: logged in and parse succeeded." -ForegroundColor Green }
    else { Write-Host "VERIFY UNCLEAR: review the output above manually." }
} else {
    Write-Host "BBDown.exe not found in $BBDownDir; skip verify."
}

#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
CORE="$SCRIPT_DIR/bbdown_login_core.py"
[ -f "$CORE" ] || { echo "bbdown_login_core.py not found next to this script"; exit 1; }

MODE="${1:-}"
if [ "$MODE" = "--check" ]; then DATA_DIR="${2:-.}"; else DATA_DIR="${1:-.}"; fi

# 1. 确保 Python 3 与 venv 组件（缺失时才用 apt 安装）
if ! command -v python3 >/dev/null 2>&1; then
  sudo apt-get update && sudo apt-get install -y python3
fi
if ! python3 -m venv --help >/dev/null 2>&1; then
  sudo apt-get install -y python3-venv
fi

# 2. 独立虚拟环境 + 依赖
VENV="$HOME/.cache/bbdown-login-venv"
if [ ! -x "$VENV/bin/python" ] && [ ! -x "$VENV/Scripts/python.exe" ]; then
  python3 -m venv "$VENV"
fi
VPY="$VENV/bin/python"
[ -x "$VPY" ] || VPY="$VENV/Scripts/python.exe"
"$VPY" -m pip install --quiet --disable-pip-version-check requests qrcode

# 3. 检查或修复
if [ "$MODE" = "--check" ]; then exec "$VPY" "$CORE" --data-dir "$DATA_DIR" --check; fi
"$VPY" "$CORE" --data-dir "$DATA_DIR"

# 4. 验收
if [ -x "$DATA_DIR/BBDown" ]; then
  echo "[Verify] BBDown parse test..."
  if "$DATA_DIR/BBDown" --only-show-info BV1Ad4y1g7AZ 2>&1 | grep -q "尚未登录"; then
    echo "VERIFY FAILED: still reports not logged in."
  else
    echo "VERIFY OK: logged in and parse succeeded."
  fi
else
  echo "BBDown binary not found in $DATA_DIR; skip verify."
fi

#!/bin/zsh
set -euo pipefail
SCRIPT_DIR="${0:A:h}"
CORE="$SCRIPT_DIR/bbdown_login_core.py"
[ -f "$CORE" ] || { echo "bbdown_login_core.py not found next to this script"; exit 1; }

MODE="${1:-}"
if [[ "$MODE" == "--check" ]]; then DATA_DIR="${2:-.}"; else DATA_DIR="${1:-.}"; fi

# 1. macOS 26 自带 python3（随命令行工具）；缺失时提示安装，脚本不擅自改装系统
if ! command -v python3 >/dev/null 2>&1; then
  echo "python3 not found. Run 'xcode-select --install' first, then re-run."
  exit 1
fi

# 2. 独立虚拟环境 + 依赖
VENV="$HOME/.cache/bbdown-login-venv"
if [[ ! -x "$VENV/bin/python" && ! -x "$VENV/Scripts/python.exe" ]]; then
  python3 -m venv "$VENV"
fi
VPY="$VENV/bin/python"
[[ -x "$VPY" ]] || VPY="$VENV/Scripts/python.exe"
"$VPY" -m pip install --quiet --disable-pip-version-check requests qrcode

# 3. 检查或修复
if [[ "$MODE" == "--check" ]]; then exec "$VPY" "$CORE" --data-dir "$DATA_DIR" --check; fi
"$VPY" "$CORE" --data-dir "$DATA_DIR"

# 4. 验收
BBDOWN_BIN=""
for c in "$DATA_DIR/BBDown" "$DATA_DIR/BBDown.exe"; do
  [[ -x "$c" ]] && BBDOWN_BIN="$c" && break
done
if [[ -n "$BBDOWN_BIN" ]]; then
  echo "[Verify] BBDown parse test..."
  if "$BBDOWN_BIN" --only-show-info BV1Ad4y1g7AZ 2>&1 | grep -q "尚未登录"; then
    echo "VERIFY FAILED: still reports not logged in."
  else
    echo "VERIFY OK: logged in and parse succeeded."
  fi
else
  echo "BBDown binary not found in $DATA_DIR; skip verify."
fi

请帮我修复本机 BBDown 扫码登录后仍提示未登录的问题。要求：
1. 先定位 BBDown 可执行文件目录和 BBDown.data 的实际位置（注意：1.6.3 版写到 exe 同目录）。
2. 检查 BBDown.data 内容：若包含 ticket= 且不包含 SESSDATA=，即为本文所述问题，按根因修复；否则先向用户汇报实际内容再继续。
3. 按当前系统选择修复方式：Windows 11 用 PowerShell，Ubuntu 26.04 用 bash，macOS 26 用 zsh；用系统 Python 建独立 venv，安装 requests 与 qrcode 两个纯 Python 库后运行核心登录脚本。
4. 生成二维码后提醒用户扫码，不要跳过人工确认步骤；不要尝试用旧的 ticket 直接换 Cookie（有效期极短）。
5. 修复完成后必须验收：运行 BBDown 解析一个公开视频，确认输出不含「尚未登录」。
6. 全程不得输出完整 Cookie、SESSDATA、ticket 原文、内网地址、完整计算机名或任何账号信息；展示时一律打码。
7. 不修改 BBDown 主程序本身，不安装来路不明的二进制，不上传本机任何文件。