python介面自動化23-token參數關聯登入（登入拉勾網）

標籤：類比登陸   isa   百度   header   func   image   erer   fun   自動化   

前言

登入網站的時候，經常會遇到傳token參數，token關聯並不難，難的是找出伺服器第一次返回token的值所在的位置，取出來後就可以動態關聯了

登入拉勾網

1.先找到登入首頁https://passport.lagou.com/login/login.html，輸入帳號和密碼登入，抓包看詳情

2.再重新登入一次抓包看的時候，頭部有兩個參數是動態，token和code值每次都會不一樣，只能用一次

X-Anit-Forge-Token: 45aa69d8-4afa-4235-8957-9dde7af1903eX-Anit-Forge-Code: 20765316

找到token產生的位置

1.開啟登入首頁https://passport.lagou.com/login/login.html，直接按F5重新整理（只做重新整理動作，不輸入帳號和密碼），然後從返回的頁面找到token產生的位置

看注釋內容：

</script>    <!-- 頁面樣式 -->    <!-- 動態token，防禦偽造請求，重複提交 -->    <script>    window.X_Anti_Forge_Token = '286fd3ae-ef82-4019-89c4-9408947a0e26';    window.X_Anti_Forge_Code = '74603111';</script>

前端的代碼，注釋內容暴露了token位置，嘿嘿！

2.接下來從返回的html裡面解析出token和code兩個參數的值

# coding:utf-8import requestsimport refrom bs4 import BeautifulSoup# 上海-悠悠 QQ交流群：512200893def getTokenCode(s):    '''        要從登入頁面提取token，code， 然後在頭資訊裡面添加        <!-- 頁面樣式 --><!-- 動態token，防禦偽造請求，重複提交 -->        <script type="text/javascript">            window.X_Anti_Forge_Token = 'dde4db4a-888e-47ca-8277-0c6da6a8fc19';            window.X_Anti_Forge_Code = '61142241';        </script>    '''    url = 'https://passport.lagou.com/login/login.html'    h = {         "User-Agent": "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0",        }    # 更新session的headers    s.headers.update(h)    data = s.get(url, verify=False)    soup = BeautifulSoup(data.content, "html.parser", from_encoding='utf-8')    tokenCode = {}    try:        t = soup.find_all('script')[1].get_text()        print(t)        tokenCode['X_Anti_Forge_Token'] = re.findall(r"Token = '(.+?)'", t)[0]        tokenCode['X_Anti_Forge_Code'] = re.findall(r"Code = '(.+?)'", t)[0]    except:        print("擷取token和code失敗")        tokenCode['X_Anti_Forge_Token'] = ""        tokenCode['X_Anti_Forge_Code'] = ""    return tokenCode

類比登陸

1.登陸的時候這裡密碼參數雖然加密了，但是是固定的加密方式，所以直接複製抓包的加密後字串就行了

# coding:utf-8import requestsimport refrom bs4 import BeautifulSoup# 上海-悠悠 QQ交流群：512200893def login(s, gtoken, user, psw):    '''    function:登入拉勾網網站    :param s:  傳s = requests.session()    :param gtoken: 上一函數getTokenCode返回的tokenCode    :param user: 帳號    :param psw: 密碼    :return: 返回json    '''    url2 = 'https://passport.lagou.com/login/login.json'    h2 = {    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0",    "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8",    "X-Requested-With": "XMLHttpRequest",    "X-Anit-Forge-Token": gtoken['X_Anti_Forge_Token'],    "X-Anit-Forge-Code": gtoken['X_Anti_Forge_Code'],    "Referer": "https://passport.lagou.com/login/login.html",    }    # 更新s的頭部    s.headers.update(h2)    body = {            "isValidate":'true',            "username": user,            "password": psw,            "request_form_verifyCode": "",            "submit": ""            }    r2 = s.post(url2 , data=body, verify=False)    print(r2.text)    return r2.json()

密碼加密

1.這裡密碼是md5加密的（百度看了其它大神的部落格，才知道的）

# coding:utf-8import requestsimport refrom bs4 import BeautifulSoupimport hashlibdef encryptPwd(passwd):    # 上海-悠悠 QQ交流群：512200893    # 對密碼進行了md5雙重加密    passwd = hashlib.md5(passwd.encode('utf-8')).hexdigest()    # veennike 這個值是在js檔案找到的一個寫死的值    passwd = 'veenike'+passwd+'veenike'    passwd = hashlib.md5(passwd.encode('utf-8')).hexdigest()    return passwdif __name__ == "__main__":   # 測試密碼123456   print(encryptPwd("123456"))

輸出結果：

2.跟抓包的資料對比，發現是一樣的，說明加密成功

參考代碼：

# coding:utf-8import requestsimport refrom bs4 import BeautifulSoupimport urllib3import hashliburllib3.disable_warnings()# 上海-悠悠 QQ交流群：512200893class LoginLgw():    def __init__(self, s):        self.s = s    def getTokenCode(self):        '''            要從登入頁面提取token，code， 然後在頭資訊裡面添加            <!-- 頁面樣式 --><!-- 動態token，防禦偽造請求，重複提交 -->            <script type="text/javascript">                window.X_Anti_Forge_Token = 'dde4db4a-888e-47ca-8277-0c6da6a8fc19';                window.X_Anti_Forge_Code = '61142241';            </script>        '''        url = 'https://passport.lagou.com/login/login.html'        h = {             "User-Agent": "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0",            }        # 更新session的headers        self.s.headers.update(h)        data = self.s.get(url, verify=False)        soup = BeautifulSoup(data.content, "html.parser", from_encoding='utf-8')        tokenCode = {}        try:            t = soup.find_all('script')[1].get_text()            print(t)            tokenCode['X_Anti_Forge_Token'] = re.findall(r"Token = '(.+?)'", t)[0]            tokenCode['X_Anti_Forge_Code'] = re.findall(r"Code = '(.+?)'", t)[0]            return tokenCode        except:            print("擷取token和code失敗")            tokenCode['X_Anti_Forge_Token'] = ""            tokenCode['X_Anti_Forge_Code'] = ""            return tokenCode    def encryptPwd(self,passwd):        # 對密碼進行了md5雙重加密        passwd = hashlib.md5(passwd.encode('utf-8')).hexdigest()        # veennike 這個值是在js檔案找到的一個寫死的值        passwd = 'veenike'+passwd+'veenike'        passwd = hashlib.md5(passwd.encode('utf-8')).hexdigest()        return passwd    def login(self, user, psw):        '''        function:登入拉勾網網站        :param user: 帳號        :param psw: 密碼        :return: 返回json        '''        gtoken = self.getTokenCode()        print(gtoken)        print(gtoken['X_Anti_Forge_Token'])        print(gtoken['X_Anti_Forge_Code'])        url2 = 'https://passport.lagou.com/login/login.json'        h2 = {        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0",        "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8",        "X-Requested-With": "XMLHttpRequest",        "X-Anit-Forge-Token": gtoken['X_Anti_Forge_Token'],        "X-Anit-Forge-Code": gtoken['X_Anti_Forge_Code'],        "Referer": "https://passport.lagou.com/login/login.html",        }        # 更新s的頭部        self.s.headers.update(h2)        passwd = self.encryptPwd(psw)        body = {                "isValidate":'true',                "username": user,                "password": passwd,                "request_form_verifyCode": "",                "submit": ""                }        r2 = self.s.post(url2 , data=body, verify=False)        try:            print(r2.text)            return r2.json        except:            print("登入異常資訊：%s" % r2.text)            return Noneif __name__ == "__main__":    s = requests.session()    lgw = LoginLgw(s)    lgw.login("15221000000", "123456")

python介面自動化23-token參數關聯登入（登入拉勾網）