299 lines
9.7 KiB
Python
299 lines
9.7 KiB
Python
import smtplib
|
||
from email.mime.multipart import MIMEMultipart
|
||
from email.mime.text import MIMEText
|
||
from email.mime.base import MIMEBase
|
||
from email import encoders
|
||
import secrets
|
||
import os
|
||
import shutil
|
||
import string
|
||
import hashlib
|
||
from datetime import datetime
|
||
from flask import Flask, request, jsonify
|
||
|
||
app = Flask(__name__)
|
||
|
||
# ==================== 配置 ====================
|
||
SMTP_SERVER = "smtp.zoho.com.cn"
|
||
SMTP_PORT = 465
|
||
SENDER_EMAIL = "yourname@yourname"
|
||
|
||
# ==================== 邮件密码（用户自己填写） ====================
|
||
EMAIL_PASSWORD = "不能看."
|
||
|
||
# ==================== 硬编码账户 ====================
|
||
AUTH_ACCOUNTS = "不能看"
|
||
# ==================== 存储 Cookie（永久有效） ====================
|
||
COOKIE_STORE = {}
|
||
|
||
# ==================== 工具函数 ====================
|
||
|
||
def generate_high_entropy_cookie():
|
||
"""生成 4096 位高熵 Cookie"""
|
||
entropy = secrets.token_bytes(512)
|
||
cookie = hashlib.sha3_512(entropy).hexdigest() + secrets.token_hex(256)
|
||
return cookie[:4096]
|
||
|
||
|
||
def generate_token():
|
||
"""生成 32 位令牌（随机数+字母+特殊字符）"""
|
||
chars = string.ascii_letters + string.digits + "!@#$%^&*"
|
||
token = ''.join(secrets.choice(chars) for _ in range(32))
|
||
return token
|
||
|
||
|
||
def validate_cookie(cookie):
|
||
"""验证 Cookie 是否有效（永久有效）"""
|
||
if cookie not in COOKIE_STORE:
|
||
return None
|
||
return COOKIE_STORE[cookie]
|
||
|
||
|
||
def get_upload_dir(token):
|
||
"""获取令牌对应的上传目录"""
|
||
return os.path.join(os.path.dirname(__file__), 'uploads', token)
|
||
|
||
|
||
def delete_upload_dir(token):
|
||
"""删除令牌对应的上传目录"""
|
||
upload_dir = get_upload_dir(token)
|
||
if os.path.exists(upload_dir):
|
||
shutil.rmtree(upload_dir)
|
||
return True
|
||
return False
|
||
|
||
|
||
# ==================== API 接口 ====================
|
||
|
||
@app.route('/login', methods=['POST'])
|
||
def login():
|
||
"""
|
||
登录接口
|
||
请求体: {
|
||
"aid": "w9M3nR8...",
|
||
"username": "dvsadmin",
|
||
"password": "G7#kLp$..."
|
||
}
|
||
返回: {"code": 200, "cookie": "xxx"}
|
||
"""
|
||
try:
|
||
data = request.get_json()
|
||
if not data:
|
||
return jsonify({"code": 400, "message": "请求体不能为空"}), 400
|
||
|
||
aid = data.get('aid')
|
||
username = data.get('username')
|
||
password = data.get('password')
|
||
|
||
if not aid:
|
||
return jsonify({"code": 400, "message": "缺少 aid"}), 400
|
||
if not username:
|
||
return jsonify({"code": 400, "message": "缺少 username"}), 400
|
||
if not password:
|
||
return jsonify({"code": 400, "message": "缺少 password"}), 400
|
||
|
||
if aid not in AUTH_ACCOUNTS:
|
||
return jsonify({"code": 401, "message": "aid 不存在"}), 401
|
||
|
||
account = AUTH_ACCOUNTS[aid]
|
||
if account['username'] != username:
|
||
return jsonify({"code": 401, "message": "用户名错误"}), 401
|
||
if account['password'] != password:
|
||
return jsonify({"code": 401, "message": "密码错误"}), 401
|
||
|
||
if not EMAIL_PASSWORD:
|
||
return jsonify({"code": 500, "message": "系统未配置邮件密码，请联系管理员"}), 500
|
||
|
||
cookie = generate_high_entropy_cookie()
|
||
|
||
COOKIE_STORE[cookie] = {
|
||
'aid': aid,
|
||
'username': username
|
||
}
|
||
|
||
return jsonify({
|
||
"code": 200,
|
||
"message": "登录成功",
|
||
"cookie": cookie
|
||
})
|
||
|
||
except Exception as e:
|
||
return jsonify({"code": 500, "message": f"服务器错误: {str(e)}"}), 500
|
||
|
||
|
||
@app.route('/upload', methods=['POST'])
|
||
def upload_file():
|
||
"""
|
||
上传附件接口
|
||
请求: multipart/form-data
|
||
- file: 要上传的文件
|
||
返回: {"code": 200, "token": "xxx", "filename": "xxx"}
|
||
"""
|
||
try:
|
||
if 'file' not in request.files:
|
||
return jsonify({"code": 400, "message": "缺少 file 字段"}), 400
|
||
|
||
file = request.files['file']
|
||
if file.filename == '':
|
||
return jsonify({"code": 400, "message": "未选择文件"}), 400
|
||
|
||
token = generate_token()
|
||
|
||
upload_dir = get_upload_dir(token)
|
||
os.makedirs(upload_dir, exist_ok=True)
|
||
|
||
filename = file.filename
|
||
file_path = os.path.join(upload_dir, filename)
|
||
file.save(file_path)
|
||
|
||
return jsonify({
|
||
"code": 200,
|
||
"message": "上传成功",
|
||
"token": token,
|
||
"filename": filename
|
||
})
|
||
|
||
except Exception as e:
|
||
return jsonify({"code": 500, "message": f"上传失败: {str(e)}"}), 500
|
||
|
||
|
||
@app.route('/send', methods=['POST'])
|
||
def send_email():
|
||
"""
|
||
发件接口
|
||
请求体: {
|
||
"cookie": "xxx",
|
||
"to": "dvs6666@163.com",
|
||
"subject": "邮件主题",
|
||
"content": "邮件内容（支持HTML）",
|
||
"token": "xxx" # 可选
|
||
}
|
||
"""
|
||
try:
|
||
data = request.get_json()
|
||
if not data:
|
||
return jsonify({"code": 400, "message": "请求体不能为空"}), 400
|
||
|
||
cookie = data.get('cookie')
|
||
to_email = data.get('to')
|
||
subject = data.get('subject')
|
||
content = data.get('content')
|
||
token = data.get('token')
|
||
|
||
if not cookie:
|
||
return jsonify({"code": 400, "message": "缺少 cookie"}), 400
|
||
if not to_email:
|
||
return jsonify({"code": 400, "message": "缺少收件人"}), 400
|
||
if not subject:
|
||
return jsonify({"code": 400, "message": "缺少主题"}), 400
|
||
if not content:
|
||
return jsonify({"code": 400, "message": "缺少内容"}), 400
|
||
|
||
# 验证 Cookie（永久有效）
|
||
session_data = validate_cookie(cookie)
|
||
if not session_data:
|
||
return jsonify({"code": 401, "message": "Cookie 无效，请重新登录"}), 401
|
||
|
||
if not EMAIL_PASSWORD:
|
||
return jsonify({"code": 500, "message": "系统未配置邮件密码，请联系管理员"}), 500
|
||
|
||
# 获取附件列表（如果有令牌）
|
||
attachments = []
|
||
if token:
|
||
upload_dir = get_upload_dir(token)
|
||
if os.path.exists(upload_dir):
|
||
for filename in os.listdir(upload_dir):
|
||
file_path = os.path.join(upload_dir, filename)
|
||
if os.path.isfile(file_path):
|
||
attachments.append(file_path)
|
||
|
||
# 发送邮件
|
||
success, result = send_mail(to_email, subject, content, attachments, EMAIL_PASSWORD)
|
||
|
||
if success:
|
||
# 发送成功后删除令牌目录（一次性使用）
|
||
if token:
|
||
delete_upload_dir(token)
|
||
trigger_callback(to_email, subject, "成功")
|
||
return jsonify({"code": 200, "message": result})
|
||
else:
|
||
trigger_callback(to_email, subject, f"失败: {result}")
|
||
return jsonify({"code": 500, "message": result}), 500
|
||
|
||
except Exception as e:
|
||
return jsonify({"code": 500, "message": f"服务器错误: {str(e)}"}), 500
|
||
|
||
|
||
def send_mail(to_email, subject, content, attachments, email_password):
|
||
"""发送邮件核心函数"""
|
||
try:
|
||
msg = MIMEMultipart()
|
||
msg['From'] = SENDER_EMAIL
|
||
msg['To'] = to_email
|
||
msg['Subject'] = subject
|
||
|
||
if content.strip().startswith('<') or '</html>' in content.lower():
|
||
msg.attach(MIMEText(content, 'html', 'utf-8'))
|
||
else:
|
||
msg.attach(MIMEText(content, 'plain', 'utf-8'))
|
||
|
||
if attachments:
|
||
for file_path in attachments:
|
||
if not os.path.exists(file_path):
|
||
continue
|
||
with open(file_path, 'rb') as f:
|
||
part = MIMEBase('application', 'octet-stream')
|
||
part.set_payload(f.read())
|
||
encoders.encode_base64(part)
|
||
filename = os.path.basename(file_path)
|
||
part.add_header('Content-Disposition', f'attachment; filename="{filename}"')
|
||
msg.attach(part)
|
||
|
||
with smtplib.SMTP_SSL(SMTP_SERVER, SMTP_PORT) as server:
|
||
server.login(SENDER_EMAIL, email_password)
|
||
server.send_message(msg)
|
||
|
||
return True, "邮件发送成功"
|
||
|
||
except Exception as e:
|
||
return False, f"发送失败: {str(e)}"
|
||
|
||
|
||
def trigger_callback(to_email, subject, status):
|
||
"""回调函数"""
|
||
print("=" * 60)
|
||
print(f"[回调] 时间: {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}")
|
||
print(f"[回调] 收件人: {to_email}")
|
||
print(f"[回调] 主题: {subject}")
|
||
print(f"[回调] 状态: {status}")
|
||
print("=" * 60)
|
||
|
||
|
||
# ==================== 启动服务 ====================
|
||
|
||
if __name__ == '__main__':
|
||
os.makedirs(os.path.join(os.path.dirname(__file__), 'uploads'), exist_ok=True)
|
||
|
||
print("=" * 60)
|
||
print("Zoho 邮件发送 API 服务")
|
||
print("=" * 60)
|
||
print(f"SMTP 服务器: {SMTP_SERVER}:{SMTP_PORT}")
|
||
print(f"发件邮箱: {SENDER_EMAIL}")
|
||
print(f"邮件密码已配置: {'✅ 是' if EMAIL_PASSWORD else '❌ 否（请先配置）'}")
|
||
print(f"有效账户数: {len(AUTH_ACCOUNTS)}")
|
||
print(f"Cookie 有效期: 永久")
|
||
print("=" * 60)
|
||
|
||
if not EMAIL_PASSWORD:
|
||
print("\n⚠️ 警告: 请先在代码中设置 EMAIL_PASSWORD 变量!")
|
||
print(" 位置: 第 18 行 EMAIL_PASSWORD = '你的邮箱密码'")
|
||
print("=" * 60)
|
||
|
||
print("\n🚀 服务启动中...")
|
||
print(f"📍 登录接口: POST http://localhost:5000/login")
|
||
print(f"📍 上传接口: POST http://localhost:5000/upload")
|
||
print(f"📍 发件接口: POST http://localhost:5000/send")
|
||
print("=" * 60)
|
||
|
||
app.run(host='0.0.0.0', port=5000, debug=True)
|