Spaces:

recycleactor
/

deezer

Paused

App Files Files Community

recycleactor commited on Jul 1

Commit

45f75e2

verified ·

1 Parent(s): cab277a

Upload main.rs

Browse files

Files changed (1) hide show

src/main.rs +118 -15

src/main.rs CHANGED Viewed

@@ -3,7 +3,7 @@ use axum::{
     http::StatusCode,
     http::{HeaderMap, Method, header::{RANGE, CONTENT_RANGE, ACCEPT_RANGES, CONTENT_LENGTH, CONTENT_TYPE}},
     response::{IntoResponse, Html},
-    extract::{Json, State, Query, Form},
     Router,
 };
 use tower_http::{cors::{CorsLayer, Any}, compression::CompressionLayer, trace::TraceLayer};
@@ -1195,6 +1195,23 @@ fn gen_pair_code() -> String {
     hex.chars().take(10).collect::<String>()
 }
 #[derive(Deserialize)]
 struct PairStatusQuery {
     code: String,
@@ -1277,27 +1294,111 @@ struct PairPageQuery {
     code: Option<String>,
 }
-async fn pair_page(Query(q): Query<PairPageQuery>) -> impl IntoResponse {
-    let code = q.code.unwrap_or_default();
     let safe_code = htmlesc(&code);
     let html = format!(
         "<!doctype html><html><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\
         <title>Deezer Login</title>\
         <style>body{{font-family:system-ui,-apple-system,Segoe UI,Roboto,Arial,sans-serif;background:#0b0b0b;color:#fff;margin:0;padding:20px}}\
         .box{{max-width:420px;margin:0 auto;background:#151515;padding:18px;border-radius:12px}}\
-        input{{width:100%;padding:12px 14px;margin:10px 0;border-radius:10px;border:1px solid #333;background:#0f0f0f;color:#fff;font-size:16px}}\
-        button{{width:100%;padding:12px 14px;border-radius:10px;border:0;background:#1db954;color:#000;font-weight:700;font-size:16px}}\
-        .muted{{color:#aaa;font-size:13px;line-height:1.35}}</style>\
         </head><body><div class=\"box\">\
-        <h2 style=\"margin:0 0 6px\">Вход Deezer</h2>\
-        <div class=\"muted\">Код: <b>{safe_code}</b></div>\
-        <form method=\"POST\" action=\"/pair/complete\">\
-            <input type=\"hidden\" name=\"code\" value=\"{safe_code}\">\
-            <input name=\"email\" type=\"email\" placeholder=\"Email\" autocomplete=\"username\" required>\
-            <input name=\"password\" type=\"password\" placeholder=\"Пароль\" autocomplete=\"current-password\" required>\
-            <button type=\"submit\">Войти</button>\
-        </form>\
-        <p class=\"muted\" style=\"margin:12px 0 0\">Пароль используется только для получения токена доступа и не сохраняется.</p>\
         </div></body></html>"
     );
     Html(html)
@@ -1888,6 +1989,8 @@ async fn main() {
         .route("/pair/start", get(pair_start))
         .route("/pair/status", get(pair_status))
         .route("/pair", get(pair_page))
         .route("/pair/complete", post(pair_complete))
         .route("/oauth/me", post(oauth_me))
         .route("/oauth/playlists", post(oauth_playlists))

     http::StatusCode,
     http::{HeaderMap, Method, header::{RANGE, CONTENT_RANGE, ACCEPT_RANGES, CONTENT_LENGTH, CONTENT_TYPE}},
     response::{IntoResponse, Html},
+    extract::{Json, State, Query, Form, Host},
     Router,
 };
 use tower_http::{cors::{CorsLayer, Any}, compression::CompressionLayer, trace::TraceLayer};
     hex.chars().take(10).collect::<String>()
 }
+fn deezer_app_id() -> String {
+    std::env::var("DEEZER_APP_ID")
+        .ok()
+        .unwrap_or_else(|| "447462".to_string())
+        .trim()
+        .to_string()
+}
+fn forwarded_proto(headers: &HeaderMap) -> String {
+    headers
+        .get("x-forwarded-proto")
+        .and_then(|v| v.to_str().ok())
+        .unwrap_or("https")
+        .trim()
+        .to_string()
+}
 #[derive(Deserialize)]
 struct PairStatusQuery {
     code: String,
     code: Option<String>,
 }
+#[derive(Debug, Deserialize)]
+struct PairOauthReq {
+    code: String,
+    access_token: String,
+    user_id: Option<String>,
+}
+async fn pair_oauth(State(state): State<AppState>, Json(req): Json<PairOauthReq>) -> impl IntoResponse {
+    let code = req.code.trim().to_string();
+    let access_token = req.access_token.trim().to_string();
+    let user_id = req
+        .user_id
+        .unwrap_or_default()
+        .trim()
+        .to_string()
+        .chars()
+        .filter(|c| c.is_ascii_digit())
+        .collect::<String>();
+    if code.is_empty() || access_token.is_empty() {
+        return json_error(StatusCode::BAD_REQUEST, "code/access_token required");
+    }
+    let mut map = state.pair.write().await;
+    let Some(sess) = map.get_mut(&code) else {
+        return json_error(StatusCode::NOT_FOUND, "no such code");
+    };
+    sess.access_token = Some(access_token);
+    if !user_id.is_empty() {
+        sess.user_id = Some(user_id);
+    }
+    sess.error = None;
+    (StatusCode::OK, Json(json!({ "ok": true }))).into_response()
+}
+async fn pair_channel() -> impl IntoResponse {
+    let html = "<!doctype html><html><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"></head><body></body></html>";
+    (StatusCode::OK, Html(html.to_string())).into_response()
+}
+async fn pair_page(Host(host): Host, headers: HeaderMap, Query(q): Query<PairPageQuery>) -> impl IntoResponse {
+    let code = q.code.unwrap_or_default().trim().to_string();
     let safe_code = htmlesc(&code);
+    let scheme = forwarded_proto(&headers);
+    let channel_url = htmlesc(&format!("{scheme}://{host}/pair/channel"));
+    let app_id = htmlesc(&deezer_app_id());
     let html = format!(
         "<!doctype html><html><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\
         <title>Deezer Login</title>\
         <style>body{{font-family:system-ui,-apple-system,Segoe UI,Roboto,Arial,sans-serif;background:#0b0b0b;color:#fff;margin:0;padding:20px}}\
         .box{{max-width:420px;margin:0 auto;background:#151515;padding:18px;border-radius:12px}}\
+        button{{width:100%;padding:12px 14px;border-radius:10px;border:0;background:#a238ff;color:#fff;font-weight:800;font-size:16px}}\
+        .muted{{color:#aaa;font-size:13px;line-height:1.35}}\
+        .ok{{color:#1db954}}\
+        .err{{color:#ff5a5a}}\
+        a{{color:#a238ff}}</style>\
         </head><body><div class=\"box\">\
+        <h2 style=\"margin:0 0 6px\">Deezer: вход для ТВ</h2>\
+        <div class=\"muted\">Код пары: <b>{safe_code}</b></div>\
+        <div class=\"muted\" style=\"margin:10px 0 14px\">Нажми кнопку, войди в Deezer и подтверди доступ. После успеха вернись на телевизор.</div>\
+        <button id=\"dz-login\" type=\"button\">Войти через Deezer</button>\
+        <div id=\"msg\" class=\"muted\" style=\"margin:12px 0 0\"></div>\
+        <div id=\"dz-root\"></div>\
+        <script src=\"https://cdns-files.deezer.com/js/min/dz.js\"></script>\
+        <script>\
+        (function(){\
+          var code = \"{safe_code}\";\
+          var msg = document.getElementById('msg');\
+          function setMsg(cls, text){ msg.className = cls ? (cls + ' muted') : 'muted'; msg.textContent = text; }\
+          if(!code){ setMsg('err','Нет кода пары. Открой ссылку заново с QR.'); return; }\
+          function postToken(at, uid){\
+            return fetch('/pair/oauth',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({code:code,access_token:at,user_id:String(uid||'')})})\
+              .then(function(r){return r.json().catch(function(){return {};}).then(function(j){return {ok:r.ok, json:j};});});\
+          }\
+          function initDZ(){\
+            try{\
+              DZ.init({appId:'{app_id}',channelUrl:'{channel_url}'});\
+              return true;\
+            }catch(e){\
+              return false;\
+            }\
+          }\
+          if(!initDZ()){\
+            setMsg('err','Не удалось инициализировать Deezer SDK.');\
+            return;\
+          }\
+          document.getElementById('dz-login').addEventListener('click', function(){\
+            setMsg('', 'Ожидаю Deezer…');\
+            DZ.login(function(resp){\
+              if(resp && resp.authResponse && resp.authResponse.accessToken){\
+                setMsg('', 'Сохраняю токен…');\
+                postToken(resp.authResponse.accessToken, resp.authResponse.userID).then(function(r){\
+                  if(r.ok && !r.json.error){\
+                    setMsg('ok','Готово ✓ Вернись на телевизор.');\
+                  }else{\
+                    setMsg('err','Ошибка сохранения: ' + (r.json.error || 'error'));\
+                  }\
+                }).catch(function(){ setMsg('err','Ошибка сети при сохранении'); });\
+              }else{\
+                setMsg('err','Вход отменён или не удалось получить токен');\
+              }\
+            }, {perms:'basic_access,email,manage_library,listening_history'});\
+          });\
+        })();\
+        </script>\
+        <p class=\"muted\" style=\"margin:14px 0 0\">Если Deezer пишет про неверный redirect/domain — нужно указать свой <b>DEEZER_APP_ID</b> для домена этого сервера.</p>\
         </div></body></html>"
     );
     Html(html)
         .route("/pair/start", get(pair_start))
         .route("/pair/status", get(pair_status))
         .route("/pair", get(pair_page))
+        .route("/pair/channel", get(pair_channel))
+        .route("/pair/oauth", post(pair_oauth))
         .route("/pair/complete", post(pair_complete))
         .route("/oauth/me", post(oauth_me))
         .route("/oauth/playlists", post(oauth_playlists))