HjvdZddlZddlZddlZddlZddlZddlZddlmZm Z ddl m Z  ddl Z n#e $rejdYnwxYwdZdZdZd Ze ejd d Zdd ededefdZdededeeeffdZdefdZedkrejedSdS)u6 probe_login.py — single login attempt against the Shinemonitor/EyBond API. Uses the REAL action name (`authSource`) that the reverse-engineered SolarPower_1.6.1.0 APK uses, not the placeholder `user` action that fails with ERR_FORBIDDEN. Usage: pip install requests # only third-party dep SOLAR_EMAIL='you@example.com' SOLAR_PASSWORD='yourpass' python3 probe_login.py Output on success: ✔ Login successful. utoken: (N chars) ztoken: (M chars) cached: ./tokens.json expires: Output on failure: prints the FULL raw response body, exit code 1. The cached tokens are written to ./tokens.json (mode 600) and are good for ~5 days. Re-run run_all_endpoints.py to use them. N)datetimetimezone)PathzCERROR: 'requests' is required. Install with: pip install requestsz'http://android.shinemonitor.com/public/bnrl_frRFjEz8Mknzcom.eybond.solarpowerz1.6.1.0SOLAR_TOKEN_PATHz ./tokens.jsonactionextrareturncpdtdt}|rd|dnd}d|||S)z?Build the i18n/lang/source/app meta suffix the gateway expects.z8&i18n=en&lang=en&source=1&_app_client_=android&_app_id_=z&_app_version_=&rz&action=)APP_ID APP_VERSIONlstrip)r r metasuffixs /root/solar/probe_login.py _base_actionr2sf ( ( (& ( ( ). 5 $c"" $ $ $2F ,f ,f ,d , ,,emailpasswordcXtddtj|ddt}t t tj dz}tj | d }tj ||z|z d }td|d |||fS) zAReturn (url, salt). Sign = SHA1(salt + sha1(pwd) + base_action). authSourcezusr=r)safez &company-key=izutf-8z?sign=z&salt=)rurllibparsequote COMPANY_KEYstrintrnow timestamphashlibsha1encode hexdigestlowerBASE_URL)rrbasesaltpwd_sha1signs r _login_urlr->s  &kV\-?-?B-?-O-O&k&k^i&k&k l lD s8<>>++--455 6 6D|HOOG4455??AAGGIIH <4/77@@ A A K K M M S S U UD 6 6d 6 6$ 6 6 6 <d?S|d!d} |d@p@|dAp+|dBp|dCpdD}tj dE| dF|dtj dGdHS)IN SOLAR_EMAILSOLAR_PASSWORDaERROR: SOLAR_EMAIL and SOLAR_PASSWORD env vars are required. Example: SOLAR_EMAIL='you@example.com' SOLAR_PASSWORD='yourpass' python3 probe_login.py Or in a shell: export SOLAR_EMAIL='you@example.com' export SOLAR_PASSWORD='yourpass' python3 probe_login.py zGET z email = z password = *z (z chars)z salt = z User-Agentz SolarPower/z Android)timeoutheadersz NETWORK ERROR:  z HTTP  zContent-Type: z Content-Type?zContent-Length: zContent-Lengthz NON-JSON RESPONSE BODY: z === FULL API RESPONSE ===F)indent ensure_asciiz=== END API RESPONSE === errcodestatusdatdatautokenztoken)r0T)parentsexist_okseconds)timespeci)rCrD issued_at valid_for_srbase_url)r;iu✔ Login successful.z utoken: u…iz (z ztoken: z ztoken: (none returned)z cached: rK)tzz expires: u Next: • Tokens are good for ~5 days. Re-running this script will get a fresh pair (and overwrite the cache). • To exercise the rest of the API, run: python3 run_all_endpoints.py (the runner auto-uses the cached tokens).rdescerrMsgmsgmessagez(no message field)u ✘ LOGIN FAILED: err=z message=aI Common causes: err=16 ERR_PASSWORD_VERIF_FAIL signature rejected (rate-limit or clock skew); back off 15 min err=17 ERR_USER_NOT_EXIST email not registered err=18 ERR_PASSWORD wrong password err=20 ERR_FREQ too many logins; back off )$osenvirongetsysexitr-printlenrequestsrRequestExceptionstderrwrite status_codereasonr4json ValueErrortextdumps isinstancedict TOKEN_PATHparentmkdirrr!rutc isoformatr( write_textchmodresolve fromtimestamptime)rrurlr*resperBr>innerutokztokcacheexpiresr=rQs rmainryGsz~~m,,Ez~~.//H       +   5(++IC -#-- !% ! !""" G#H - G GX G G GHHH $ !!!|ClDgR]DgDgDg5hiii  $ 2Q222333qqqqq 4D$ 4 4t{ 4 4555 DT\--ncBB D DEEE FT\--.>DD F FGGGyy{{  6777 ### qq   '((( $*T!% 8 8 8999 &''' HHUDHHVTXXh-C-CDD E ED HHUDHHVT22 3 3E#-eT#:#: DEIIh   D#-eT#:#: DEIIh   D xDt<<<#< 55???SS( #    djq999::: U### %&&& JD"IJJ$rss)JJD JJJKKK  0 NSbS NNd233iNNCIINNN O O O O . / / / 2J..0022333( IKK% . .8<   )Y) ' '  %G%%&&&  <   q ((5#  C  88H   88E??  88I    JHHHsHHHIIIJ K 1s+"C77D4#D//D4-GA,H21H2__main__)r)__doc__rTrWrarpr# urllib.parserrrpathlibrr[ ImportErrorrXr(rrrrUrVrgrrtupler-r ry__name__rrrs0 ''''''''TOOOOTTT CH RSSSSST :" ' RZ^^$6HHII  - - -S -# - - - -=c=S=U38_====a ca a a a H z CHTTVVs/AA