File size: 1,869 Bytes
ac613eb | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 | package internal
import (
"fmt"
"sync"
"time"
fhttp "github.com/bogdanfinn/fhttp"
tls_client "github.com/bogdanfinn/tls-client"
"github.com/bogdanfinn/tls-client/profiles"
)
// DefaultBrowserProfile 与 tls-client 内置 Chrome_133 一致（ClientHello、HTTP/2 SETTINGS/优先级/伪头序等），便于 JA3/JA4 与 HTTP/2 指纹对齐。
var DefaultBrowserProfile = profiles.Chrome_133
// BrowserUserAgent 必须与 DefaultBrowserProfile 同源，勿随机替换，否则与 TLS 指纹不一致。
const BrowserUserAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
var (
tlsClientMu sync.Mutex
tlsBySec = map[int]tls_client.HttpClient{}
)
// TLSHTTPClient 返回按超时（秒）复用的 tls-client 实例；所有出站 HTTPS 应通过此处以统一指纹。
func TLSHTTPClient(timeout time.Duration) (tls_client.HttpClient, error) {
sec := int(timeout.Round(time.Second) / time.Second)
if sec < 1 {
sec = 1
}
tlsClientMu.Lock()
defer tlsClientMu.Unlock()
if c, ok := tlsBySec[sec]; ok {
return c, nil
}
c, err := tls_client.NewHttpClient(tls_client.NewNoopLogger(),
tls_client.WithTimeoutSeconds(sec),
tls_client.WithClientProfile(DefaultBrowserProfile),
tls_client.WithRandomTLSExtensionOrder(),
)
if err != nil {
return nil, fmt.Errorf("tls-client: %w", err)
}
tlsBySec[sec] = c
return c, nil
}
// ApplyBrowserFingerprintHeaders 设置与 Chrome 133 一致的 User-Agent 与 Sec-CH-UA（配合 TLSHTTPClient 的 TLS/H2 指纹）。
func ApplyBrowserFingerprintHeaders(h fhttp.Header) {
h.Set("User-Agent", BrowserUserAgent)
h.Set("sec-ch-ua", `"Google Chrome";v="133", "Chromium";v="133", "Not A(Brand";v="24"`)
h.Set("sec-ch-ua-mobile", "?0")
h.Set("sec-ch-ua-platform", `"Windows"`)
}
|