fix(admin): 禁用验证码分数测试入口

src/api/admin.py

@@ -1632,304 +1632,11 @@ async def get_captcha_config(token: str = Depends(verify_admin_token)):
 
 @router.post("/api/captcha/score-test")
 async def test_captcha_score(
-    request: Optional[CaptchaScoreTestRequest] = None,
-    token: str = Depends(verify_admin_token)
+    _request: Optional[CaptchaScoreTestRequest] = None,
+    _token: str = Depends(verify_admin_token)
 ):
-    """使用当前打码方式获取 token，并提交到 antcpt 校验分数。"""
-    req = request or CaptchaScoreTestRequest()
-    website_url = (req.website_url or "https://antcpt.com/score_detector/").strip()
-    website_key = (req.website_key or "6LcR_okUAAAAAPYrPe-HK_0RULO1aZM15ENyM-Mf").strip()
-    action = (req.action or "homepage").strip()
-    verify_url = (req.verify_url or "https://antcpt.com/score_detector/verify.php").strip()
-    enterprise = bool(req.enterprise)
-
-    started_at = time.time()
-    captcha_config = await db.get_captcha_config()
-    captcha_method = (captcha_config.captcha_method or config.captcha_method or "").strip().lower()
-    browser_proxy_enabled = bool(captcha_config.browser_proxy_enabled)
-    browser_proxy_url = captcha_config.browser_proxy_url or ""
-
-    token_value: Optional[str] = None
-    fingerprint: Optional[Dict[str, Any]] = None
-    token_elapsed_ms = 0
-    verify_elapsed_ms = 0
-    verify_http_status = None
-    verify_result: Dict[str, Any] = {}
-    verify_headers: Dict[str, str] = {}
-    verify_proxy_used = False
-    verify_proxy_source = "none"
-    verify_proxy_url = ""
-    verify_impersonate = "chrome120"
-    page_verify_only = captcha_method in {"browser", "personal", "remote_browser"}
-    verify_mode = "browser_page" if page_verify_only else "server_post"
-
-    try:
-        token_start = time.time()
-        if captcha_method == "browser":
-            from ..services.browser_captcha import BrowserCaptchaService
-            service = await BrowserCaptchaService.get_instance(db)
-            score_payload, browser_id = await service.get_custom_score(
-                website_url=website_url,
-                website_key=website_key,
-                verify_url=verify_url,
-                action=action,
-                enterprise=enterprise
-            )
-            if isinstance(score_payload, dict):
-                token_value = score_payload.get("token")
-                verify_elapsed_ms = int(score_payload.get("verify_elapsed_ms") or 0)
-                verify_http_status = score_payload.get("verify_http_status")
-                verify_result = score_payload.get("verify_result") if isinstance(score_payload.get("verify_result"), dict) else {}
-                verify_mode = score_payload.get("verify_mode") or "browser_page"
-                score_token_elapsed = score_payload.get("token_elapsed_ms")
-                if isinstance(score_token_elapsed, (int, float)):
-                    token_elapsed_ms = int(score_token_elapsed)
-            if token_value:
-                fingerprint = await service.get_fingerprint(browser_id)
-                verify_proxy_used = bool(browser_proxy_enabled and browser_proxy_url)
-                verify_proxy_source = "captcha_browser_proxy" if verify_proxy_used else "browser_direct"
-                verify_proxy_url = browser_proxy_url if verify_proxy_used else ""
-        elif captcha_method == "personal":
-            from ..services.browser_captcha_personal import BrowserCaptchaService
-            service = await BrowserCaptchaService.get_instance(db)
-            score_payload = await service.get_custom_score(
-                website_url=website_url,
-                website_key=website_key,
-                verify_url=verify_url,
-                action=action,
-                enterprise=enterprise
-            )
-            if isinstance(score_payload, dict):
-                token_value = score_payload.get("token")
-                verify_elapsed_ms = int(score_payload.get("verify_elapsed_ms") or 0)
-                verify_http_status = score_payload.get("verify_http_status")
-                verify_result = score_payload.get("verify_result") if isinstance(score_payload.get("verify_result"), dict) else {}
-                verify_mode = score_payload.get("verify_mode") or "browser_page"
-                score_token_elapsed = score_payload.get("token_elapsed_ms")
-                if isinstance(score_token_elapsed, (int, float)):
-                    token_elapsed_ms = int(score_token_elapsed)
-            if token_value:
-                fingerprint = service.get_last_fingerprint()
-                verify_proxy_used = bool(browser_proxy_enabled and browser_proxy_url)
-                verify_proxy_source = "captcha_browser_proxy" if verify_proxy_used else "browser_direct"
-                verify_proxy_url = browser_proxy_url if verify_proxy_used else ""
-        elif captcha_method == "remote_browser":
-            score_payload = await _score_test_with_remote_browser_service(
-                website_url=website_url,
-                website_key=website_key,
-                verify_url=verify_url,
-                action=action,
-                enterprise=enterprise,
-            )
-            if isinstance(score_payload, dict):
-                if score_payload.get("success") is False:
-                    raise RuntimeError(score_payload.get("message") or "远程打码分数测试失败")
-                token_value = score_payload.get("token")
-                verify_elapsed_ms = int(score_payload.get("verify_elapsed_ms") or 0)
-                verify_http_status = score_payload.get("verify_http_status")
-                verify_result = score_payload.get("verify_result") if isinstance(score_payload.get("verify_result"), dict) else {}
-                verify_mode = score_payload.get("verify_mode") or "remote_browser_page"
-                score_token_elapsed = score_payload.get("token_elapsed_ms")
-                if isinstance(score_token_elapsed, (int, float)):
-                    token_elapsed_ms = int(score_token_elapsed)
-                fingerprint = score_payload.get("fingerprint") if isinstance(score_payload.get("fingerprint"), dict) else None
-        elif captcha_method in SUPPORTED_API_CAPTCHA_METHODS:
-            token_value = await _solve_recaptcha_with_api_service(
-                method=captcha_method,
-                website_url=website_url,
-                website_key=website_key,
-                action=action,
-                enterprise=enterprise
-            )
-        else:
-            return {
-                "success": False,
-                "message": f"当前打码方式不支持分数测试: {captcha_method}",
-                "captcha_method": captcha_method,
-                "website_url": website_url,
-                "website_key": website_key,
-                "action": action,
-                "verify_url": verify_url,
-                "enterprise": enterprise,
-                "token_acquired": False,
-                "elapsed_ms": int((time.time() - started_at) * 1000)
-            }
-        if token_elapsed_ms <= 0:
-            token_elapsed_ms = int((time.time() - token_start) * 1000)
-
-        # 远程有头打码的 custom-score 可能由页面内直接完成校验，
-        # 在部分实现里不会显式回传 token，本地按 verify_result 兜底判定。
-        if captcha_method == "remote_browser" and not token_value and isinstance(verify_result, dict):
-            if verify_result.get("success") is True:
-                token_value = verify_result.get("token") or verify_result.get("gRecaptchaResponse") or "__verified_by_remote__"
-
-        if not token_value:
-            return {
-                "success": False,
-                "message": "未获取到 reCAPTCHA token",
-                "captcha_method": captcha_method,
-                "website_url": website_url,
-                "website_key": website_key,
-                "action": action,
-                "verify_url": verify_url,
-                "enterprise": enterprise,
-                "token_acquired": False,
-                "token_elapsed_ms": token_elapsed_ms,
-                "browser_proxy_enabled": browser_proxy_enabled,
-                "browser_proxy_url": browser_proxy_url if browser_proxy_enabled else "",
-                "fingerprint": fingerprint,
-                "elapsed_ms": int((time.time() - started_at) * 1000)
-            }
-
-        if verify_mode == "server_post" and not page_verify_only:
-            verify_start = time.time()
-            verify_headers = {
-                "accept": "application/json, text/javascript, */*; q=0.01",
-                "content-type": "application/json",
-                "origin": "https://antcpt.com",
-                "referer": website_url,
-                "x-requested-with": "XMLHttpRequest",
-            }
-            if isinstance(fingerprint, dict):
-                ua = (fingerprint.get("user_agent") or "").strip()
-                lang = (fingerprint.get("accept_language") or "").strip()
-                sec_ch_ua = (fingerprint.get("sec_ch_ua") or "").strip()
-                sec_ch_ua_mobile = (fingerprint.get("sec_ch_ua_mobile") or "").strip()
-                sec_ch_ua_platform = (fingerprint.get("sec_ch_ua_platform") or "").strip()
-
-                if ua:
-                    verify_headers["user-agent"] = ua
-                if lang:
-                    verify_headers["accept-language"] = lang if "," in lang else f"{lang},zh;q=0.9"
-                if sec_ch_ua:
-                    verify_headers["sec-ch-ua"] = sec_ch_ua
-                if sec_ch_ua_mobile:
-                    verify_headers["sec-ch-ua-mobile"] = sec_ch_ua_mobile
-                if sec_ch_ua_platform:
-                    verify_headers["sec-ch-ua-platform"] = sec_ch_ua_platform
-
-            if verify_headers.get("user-agent"):
-                for header_name, header_value in _guess_client_hints_from_user_agent(
-                    verify_headers.get("user-agent", "")
-                ).items():
-                    if header_value and not verify_headers.get(header_name):
-                        verify_headers[header_name] = header_value
-                verify_impersonate = _guess_impersonate_from_user_agent(verify_headers.get("user-agent", ""))
-
-            verify_proxies, verify_proxy_used, verify_proxy_source, verify_proxy_url = (
-                await _resolve_score_test_verify_proxy(
-                    captcha_method=captcha_method,
-                    browser_proxy_enabled=browser_proxy_enabled,
-                    browser_proxy_url=browser_proxy_url
-                )
-            )
-
-            async with AsyncSession() as session:
-                verify_resp = await session.post(
-                    verify_url,
-                    json={"g-recaptcha-response": token_value},
-                    headers=verify_headers,
-                    proxies=verify_proxies,
-                    impersonate=verify_impersonate,
-                    timeout=30
-                )
-            verify_elapsed_ms = int((time.time() - verify_start) * 1000)
-            verify_http_status = verify_resp.status_code
-
-            try:
-                verify_result = verify_resp.json()
-            except Exception:
-                verify_result = {"raw": verify_resp.text}
-        else:
-            verify_headers = {
-                "origin": "https://antcpt.com",
-                "referer": website_url,
-                "x-requested-with": "XMLHttpRequest",
-            }
-            if isinstance(fingerprint, dict):
-                verify_headers.update({
-                    "user-agent": fingerprint.get("user_agent", ""),
-                    "accept-language": fingerprint.get("accept_language", ""),
-                    "sec-ch-ua": fingerprint.get("sec_ch_ua", ""),
-                    "sec-ch-ua-mobile": fingerprint.get("sec_ch_ua_mobile", ""),
-                    "sec-ch-ua-platform": fingerprint.get("sec_ch_ua_platform", ""),
-                })
-
-        verify_success = bool(verify_result.get("success")) if isinstance(verify_result, dict) else False
-        score_value = verify_result.get("score") if isinstance(verify_result, dict) else None
-
-        return {
-            "success": verify_success,
-            "message": "分数校验成功" if verify_success else "分数校验未通过",
-            "captcha_method": captcha_method,
-            "website_url": website_url,
-            "website_key": website_key,
-            "action": action,
-            "verify_url": verify_url,
-            "enterprise": enterprise,
-            "token_acquired": True,
-            "token_preview": _mask_token(token_value),
-            "token_elapsed_ms": token_elapsed_ms,
-            "verify_elapsed_ms": verify_elapsed_ms,
-            "verify_http_status": verify_http_status,
-            "score": score_value,
-            "verify_result": verify_result,
-            "verify_request_meta": {
-                "mode": verify_mode,
-                "proxy_used": verify_proxy_used,
-                "user_agent": verify_headers.get("user-agent", ""),
-                "accept_language": verify_headers.get("accept-language", ""),
-                "sec_ch_ua": verify_headers.get("sec-ch-ua", ""),
-                "sec_ch_ua_mobile": verify_headers.get("sec-ch-ua-mobile", ""),
-                "sec_ch_ua_platform": verify_headers.get("sec-ch-ua-platform", ""),
-                "origin": verify_headers.get("origin", ""),
-                "referer": verify_headers.get("referer", ""),
-                "x_requested_with": verify_headers.get("x-requested-with", ""),
-                "proxy_source": verify_proxy_source,
-                "proxy_url": verify_proxy_url,
-                "impersonate": verify_impersonate,
-            },
-            "browser_proxy_enabled": browser_proxy_enabled,
-            "browser_proxy_url": browser_proxy_url if browser_proxy_enabled else "",
-            "fingerprint": fingerprint,
-            "elapsed_ms": int((time.time() - started_at) * 1000)
-        }
-    except Exception as e:
-        return {
-            "success": False,
-            "message": f"分数测试失败: {str(e)}",
-            "captcha_method": captcha_method,
-            "website_url": website_url,
-            "website_key": website_key,
-            "action": action,
-            "verify_url": verify_url,
-            "enterprise": enterprise,
-            "token_acquired": bool(token_value),
-            "token_preview": _mask_token(token_value),
-            "token_elapsed_ms": token_elapsed_ms,
-            "verify_elapsed_ms": verify_elapsed_ms,
-            "verify_http_status": verify_http_status,
-            "verify_result": verify_result,
-            "verify_request_meta": {
-                "mode": verify_mode,
-                "proxy_used": verify_proxy_used,
-                "user_agent": verify_headers.get("user-agent", ""),
-                "accept_language": verify_headers.get("accept-language", ""),
-                "sec_ch_ua": verify_headers.get("sec-ch-ua", ""),
-                "sec_ch_ua_mobile": verify_headers.get("sec-ch-ua-mobile", ""),
-                "sec_ch_ua_platform": verify_headers.get("sec-ch-ua-platform", ""),
-                "origin": verify_headers.get("origin", ""),
-                "referer": verify_headers.get("referer", ""),
-                "x_requested_with": verify_headers.get("x-requested-with", ""),
-                "proxy_source": verify_proxy_source,
-                "proxy_url": verify_proxy_url,
-                "impersonate": verify_impersonate,
-            },
-            "browser_proxy_enabled": browser_proxy_enabled,
-            "browser_proxy_url": browser_proxy_url if browser_proxy_enabled else "",
-            "fingerprint": fingerprint,
-            "elapsed_ms": int((time.time() - started_at) * 1000)
-        }
+    """分数测试已禁用。"""
+    raise HTTPException(status_code=403, detail="已禁用分数测试")
 
 
 # ========== Plugin Configuration Endpoints ==========

static/manage.html

@@ -526,11 +526,9 @@
                             </div>
                         </div>
                     </div>
-                    <div class="grid grid-cols-2 gap-2 mt-4">
-                        <button id="btnTestCaptchaScore" onclick="testCaptchaScore()" class="inline-flex items-center justify-center rounded-md border border-input bg-background hover:bg-accent h-9 px-4">测试当前打码分数</button>
+                    <div class="mt-4">
                         <button onclick="saveCaptchaConfig()" class="inline-flex items-center justify-center rounded-md bg-primary text-primary-foreground hover:bg-primary/90 h-9 px-4">保存配置</button>
                     </div>
-                    <p id="captchaScoreTestResult" class="text-xs text-muted-foreground mt-2">测试目标：<code class="bg-muted px-1 py-0.5 rounded">https://antcpt.com/score_detector/</code></p>
                 </div>
 
                 <!-- 调试配置 -->
@@ -889,8 +887,6 @@
         togglePersonalProxyInput=()=>{const enabled=$('cfgPersonalProxyEnabled').checked;$('personalProxyUrlInput').classList.toggle('hidden',!enabled)},
         loadCaptchaConfig=async()=>{try{console.log('开始加载验证码配置...');const r=await apiRequest('/api/captcha/config');if(!r){console.error('API请求失败');return}const d=await r.json();console.log('验证码配置数据:',d);$('cfgCaptchaMethod').value=d.captcha_method||'yescaptcha';$('cfgYescaptchaApiKey').value=d.yescaptcha_api_key||'';$('cfgYescaptchaBaseUrl').value=d.yescaptcha_base_url||'https://api.yescaptcha.com';$('cfgCapmonsterApiKey').value=d.capmonster_api_key||'';$('cfgCapmonsterBaseUrl').value=d.capmonster_base_url||'https://api.capmonster.cloud';$('cfgEzcaptchaApiKey').value=d.ezcaptcha_api_key||'';$('cfgEzcaptchaBaseUrl').value=d.ezcaptcha_base_url||'https://api.ez-captcha.com';$('cfgCapsolverApiKey').value=d.capsolver_api_key||'';$('cfgCapsolverBaseUrl').value=d.capsolver_base_url||'https://api.capsolver.com';$('cfgRemoteBrowserBaseUrl').value=d.remote_browser_base_url||'';$('cfgRemoteBrowserApiKey').value=d.remote_browser_api_key||'';$('cfgRemoteBrowserTimeout').value=d.remote_browser_timeout||60;$('cfgBrowserProxyEnabled').checked=d.browser_proxy_enabled||false;$('cfgBrowserProxyUrl').value=d.browser_proxy_url||'';$('cfgPersonalProxyEnabled').checked=d.browser_proxy_enabled||false;$('cfgPersonalProxyUrl').value=d.browser_proxy_url||'';$('cfgBrowserCount').value=d.browser_count||1;$('cfgPersonalProjectPoolSize').value=d.personal_project_pool_size||4;$('cfgPersonalMaxTabs').value=d.personal_max_resident_tabs||5;$('cfgPersonalIdleTTL').value=d.personal_idle_tab_ttl_seconds||600;toggleCaptchaOptions();toggleBrowserProxyInput();togglePersonalProxyInput();console.log('验证码配置加载成功')}catch(e){console.error('加载验证码配置失败:',e);showToast('加载验证码配置失败: '+e.message,'error')}},
         saveCaptchaConfig=async()=>{const method=$('cfgCaptchaMethod').value,yesApiKey=$('cfgYescaptchaApiKey').value.trim(),yesBaseUrl=$('cfgYescaptchaBaseUrl').value.trim(),capApiKey=$('cfgCapmonsterApiKey').value.trim(),capBaseUrl=$('cfgCapmonsterBaseUrl').value.trim(),ezApiKey=$('cfgEzcaptchaApiKey').value.trim(),ezBaseUrl=$('cfgEzcaptchaBaseUrl').value.trim(),solverApiKey=$('cfgCapsolverApiKey').value.trim(),solverBaseUrl=$('cfgCapsolverBaseUrl').value.trim(),remoteBaseUrl=$('cfgRemoteBrowserBaseUrl').value.trim(),remoteApiKey=$('cfgRemoteBrowserApiKey').value.trim(),remoteTimeout=parseInt($('cfgRemoteBrowserTimeout').value)||60,browserProxyEnabled=$('cfgBrowserProxyEnabled').checked,browserProxyUrl=$('cfgBrowserProxyUrl').value.trim(),personalProxyEnabled=$('cfgPersonalProxyEnabled').checked,personalProxyUrl=$('cfgPersonalProxyUrl').value.trim(),browserCount=parseInt($('cfgBrowserCount').value)||1,personalProjectPoolSize=parseInt($('cfgPersonalProjectPoolSize').value)||4,personalMaxTabs=parseInt($('cfgPersonalMaxTabs').value)||5,personalIdleTTL=parseInt($('cfgPersonalIdleTTL').value)||600;const finalProxyEnabled=method==='personal'?personalProxyEnabled:browserProxyEnabled;const finalProxyUrl=method==='personal'?personalProxyUrl:browserProxyUrl;console.log('保存验证码配置:',{method,yesApiKey,yesBaseUrl,capApiKey,capBaseUrl,ezApiKey,ezBaseUrl,solverApiKey,solverBaseUrl,remoteBaseUrl,remoteApiKey,remoteTimeout,browserProxyEnabled,browserProxyUrl,personalProxyEnabled,personalProxyUrl,finalProxyEnabled,finalProxyUrl,browserCount,personalProjectPoolSize,personalMaxTabs,personalIdleTTL});try{const r=await apiRequest('/api/captcha/config',{method:'POST',body:JSON.stringify({captcha_method:method,yescaptcha_api_key:yesApiKey,yescaptcha_base_url:yesBaseUrl,capmonster_api_key:capApiKey,capmonster_base_url:capBaseUrl,ezcaptcha_api_key:ezApiKey,ezcaptcha_base_url:ezBaseUrl,capsolver_api_key:solverApiKey,capsolver_base_url:solverBaseUrl,remote_browser_base_url:remoteBaseUrl,remote_browser_api_key:remoteApiKey,remote_browser_timeout:remoteTimeout,browser_proxy_enabled:finalProxyEnabled,browser_proxy_url:finalProxyUrl,browser_count:browserCount,personal_project_pool_size:personalProjectPoolSize,personal_max_resident_tabs:personalMaxTabs,personal_idle_tab_ttl_seconds:personalIdleTTL})});if(!r){console.error('保存请求失败');return}const d=await r.json();console.log('保存结果:',d);if(d.success){showToast('验证码配置保存成功','success');await new Promise(r=>setTimeout(r,200));await loadCaptchaConfig()}else{console.error('保存失败:',d);showToast(d.message||'保存失败','error')}}catch(e){console.error('保存失败:',e);showToast('保存失败: '+e.message,'error')}},
-        updateCaptchaScoreTestResult=(message,isSuccess)=>{const el=$('captchaScoreTestResult');if(!el)return;el.textContent=message;el.className=`text-xs mt-2 ${isSuccess?'text-green-600':'text-red-600'}`},
-        testCaptchaScore=async()=>{const btn=$('btnTestCaptchaScore');if(btn){btn.disabled=true;btn.textContent='测试中...'}updateCaptchaScoreTestResult('正在按当前打码方式测试分数...',true);try{const r=await apiRequest('/api/captcha/score-test',{method:'POST',body:JSON.stringify({})});if(!r){updateCaptchaScoreTestResult('分数测试请求失败',false);return}const d=await r.json();const verify=d.verify_result||{};const score=verify.score!==undefined?verify.score:(d.score!==undefined?d.score:'-');const action=verify.action||d.action||'-';const hostname=verify.hostname||'-';const parts=[`方式: ${d.captcha_method||'-'}`,`score=${score}`,`action=${action}`,`hostname=${hostname}`,d.token_elapsed_ms!==undefined?`取token ${d.token_elapsed_ms}ms`:null,d.verify_elapsed_ms!==undefined?`校验 ${d.verify_elapsed_ms}ms`:null,d.elapsed_ms!==undefined?`总耗时 ${d.elapsed_ms}ms`:null,d.message||null].filter(Boolean);updateCaptchaScoreTestResult(parts.join(' | '),!!d.success);showToast(d.success?`分数测试成功: ${score}`:`分数测试失败: ${d.message||'未知错误'}`,d.success?'success':'error')}catch(e){updateCaptchaScoreTestResult('分数测试失败: '+e.message,false);showToast('分数测试失败: '+e.message,'error')}finally{if(btn){btn.disabled=false;btn.textContent='测试当前打码分数'}}},
         loadPluginConfig=async()=>{try{const r=await apiRequest('/api/plugin/config');if(!r)return;const d=await r.json();if(d.success&&d.config){$('cfgPluginConnectionUrl').value=d.config.connection_url||'';$('cfgPluginConnectionToken').value=d.config.connection_token||'';$('cfgAutoEnableOnUpdate').checked=d.config.auto_enable_on_update||false}}catch(e){console.error('加载插件配置失败:',e);showToast('加载插件配置失败: '+e.message,'error')}},
         savePluginConfig=async()=>{const token=$('cfgPluginConnectionToken').value.trim();const autoEnable=$('cfgAutoEnableOnUpdate').checked;try{const r=await apiRequest('/api/plugin/config',{method:'POST',body:JSON.stringify({connection_token:token,auto_enable_on_update:autoEnable})});if(!r)return;const d=await r.json();if(d.success){showToast('插件配置保存成功','success');await loadPluginConfig()}else{showToast(d.message||'保存失败','error')}}catch(e){showToast('保存失败: '+e.message,'error')}},
         copyConnectionUrl=()=>{const url=$('cfgPluginConnectionUrl').value;if(!url){showToast('连接接口为空','error');return}navigator.clipboard.writeText(url).then(()=>showToast('连接接口已复制','success')).catch(()=>showToast('复制失败','error'))},