Update app.py

app.py

@@ -1,476 +1,478 @@
-import os
-import json
-import time
-import threading
-from datetime import datetime
-from flask import Flask, request, jsonify, render_template_string, redirect, url_for, session
-import requests
-from apscheduler.schedulers.background import BackgroundScheduler
-from dotenv import load_dotenv
-
-load_dotenv()
-
-app = Flask(__name__)
-app.secret_key = os.urandom(24)
-
-LOGIN_URL = "https://api-card.infini.money/user/login"
-PROFILE_URL = "https://api-card.infini.money/user/profile"
-CARD_INFO_URL = "https://api-card.infini.money/card/info"
-FRONTEND_PASSWORD = os.getenv("PASSWORD")
-ACCOUNTS_JSON = os.getenv("ACCOUNTS")
-
-accounts_data = {}
-scheduler = BackgroundScheduler(daemon=True)
-data_lock = threading.Lock()
-
-def parse_accounts():
-    global accounts_data
-    if not ACCOUNTS_JSON:
-        print("错误: ACCOUNTS 环境变量未设置。")
-        return False
-    try:
-        accounts_list = json.loads(ACCOUNTS_JSON)
-        if not isinstance(accounts_list, list):
-            print("错误: ACCOUNTS 环境变量必须是一个 JSON 数组。")
-            return False
-        
-        temp_accounts_data = {}
-        for acc in accounts_list:
-            if isinstance(acc, dict) and "email" in acc and "password" in acc:
-                temp_accounts_data[acc["email"]] = {
-                    "password": acc["password"],
-                    "token": None,
-                    "profile": None,
-                    "last_login_success": None,
-                    "last_profile_success": None,
-                    "last_login_attempt": None,
-                    "last_profile_attempt": None,
-                    "login_error": None,
-                    "profile_error": None,
-                    "cards_info": None,
-                    "last_card_info_success": None,
-                    "last_card_info_attempt": None,
-                    "card_info_error": None,
-                }
-            else:
-                print(f"警告: ACCOUNTS 中的条目格式不正确: {acc}")
-        
-        with data_lock:
-            accounts_data = temp_accounts_data
-        print(f"成功加载 {len(accounts_data)} 个账户。")
-        return True
-    except json.JSONDecodeError:
-        print("错误: ACCOUNTS 环境变量不是有效的 JSON 格式。")
-        return False
-
-def api_login(email, password):
-    payload = {"email": email, "password": password}
-    try:
-        response = requests.post(LOGIN_URL, json=payload, timeout=10)
-        response.raise_for_status()
-        data = response.json()
-        cookies = response.cookies
-        jwt_token = cookies.get("jwt_token")
-
-        if data.get("code") == 0 and jwt_token:
-            return jwt_token, None
-        else:
-            error_message = data.get('message', "未知登录错误")
-            if data.get("code") == 0 and not jwt_token:
-                error_message = "响应成功但未返回 jwt_token。"
-            return None, f"{error_message} (Code: {data.get('code')})"
-    except requests.exceptions.Timeout:
-        return None, "登录请求超时。"
-    except requests.exceptions.RequestException as e:
-        return None, f"登录请求错误: {str(e)}"
-    except json.JSONDecodeError:
-        return None, "登录响应不是有效的 JSON。"
-
-def get_api_profile(email, token):
-    if not token:
-        return None, "Token 为空，无法获取 Profile。"
-    
-    cookies = {"jwt_token": token}
-    try:
-        response = requests.get(PROFILE_URL, cookies=cookies, timeout=10)
-        response.raise_for_status()
-        profile_data = response.json()
-        if profile_data.get("code") == 0 and profile_data.get("data"):
-            return profile_data.get("data"), None
-        else:
-            error_message = profile_data.get('message', "未知 Profile 错误")
-            if profile_data.get("code") == 0 and not profile_data.get("data"):
-                error_message = "响应成功但未返回 Profile 数据。"
-            return None, f"{error_message} (Code: {profile_data.get('code')})"
-    except requests.exceptions.Timeout:
-        return None, "获取 Profile 请求超时。"
-    except requests.exceptions.RequestException as e:
-        return None, f"获取 Profile 请求错误: {str(e)}"
-    except json.JSONDecodeError:
-        return None, "Profile 响应不是有效的 JSON。"
-
-def get_api_card_info(email, token):
-    if not token:
-        return None, "Token 为空，无法获取卡片信息。"
-    
-    cookies = {"jwt_token": token}
-    print(f"[{datetime.now()}] 尝试为账户 {email} 获取卡片信息...")
-    try:
-        response = requests.get(CARD_INFO_URL, cookies=cookies, timeout=10)
-        response.raise_for_status()
-        card_data = response.json()
-        if card_data.get("code") == 0 and "items" in card_data.get("data", {}):
-            items = card_data["data"]["items"]
-            if items:
-                item = items[0]
-                provider_bin = None
-                if item.get("provider"):
-                    parts = item["provider"].split('_')
-                    if len(parts) > 1 and parts[-1].isdigit():
-                        provider_bin = parts[-1]
-                
-                processed_card_info = {
-                    "provider_bin": provider_bin,
-                    "card_last_four_digits": item.get("card_last_four_digits"),
-                    "consumption_limit": item.get("consumption_limit"),
-                    "status": item.get("status"),
-                    "name": item.get("name")
-                }
-                return processed_card_info, None
-            else:
-                return None, None
-        elif card_data.get("code") == 0 and not card_data.get("data", {}).get("items"):
-             return None, None
-        else:
-            error_message = card_data.get('message', "未知卡片信息错误")
-            if card_data.get("code") == 0 and not card_data.get("data"):
-                error_message = "响应成功但未返回卡片数据。"
-            return None, f"{error_message} (Code: {card_data.get('code')})"
-    except requests.exceptions.Timeout:
-        return None, "获取卡片信息请求超时。"
-    except requests.exceptions.RequestException as e:
-        return None, f"获取卡片信息请求错误: {str(e)}"
-    except json.JSONDecodeError:
-        return None, "卡片信息响应不是有效的 JSON。"
-
-def login_and_store_token(email):
-    global accounts_data
-    with data_lock:
-        account_info = accounts_data.get(email)
-        if not account_info:
-            print(f"错误: 账户 {email} 未找到。")
-            return
-
-    password = account_info["password"]
-    print(f"[{datetime.now()}] 尝试为账户 {email} 登录...")
-    
-    token, error = api_login(email, password)
-    
-    with data_lock:
-        accounts_data[email]["last_login_attempt"] = datetime.now()
-        if token:
-            accounts_data[email]["token"] = token
-            accounts_data[email]["last_login_success"] = True
-            accounts_data[email]["login_error"] = None
-            print(f"[{datetime.now()}] 账户 {email} 登录成功。")
-        else:
-            accounts_data[email]["token"] = None
-            accounts_data[email]["last_login_success"] = False
-            accounts_data[email]["login_error"] = error
-            print(f"[{datetime.now()}] 账户 {email} 登录失败: {error}")
-
-def fetch_and_store_profile(email):
-    global accounts_data
-    with data_lock:
-        account_info = accounts_data.get(email)
-        if not account_info:
-            print(f"错误: 账户 {email} 未找到 (fetch_and_store_profile)。")
-            return
-        token = account_info.get("token")
-
-    if not token:
-        print(f"[{datetime.now()}] 账户 {email} 没有有效的 token，跳过获取 Profile。")
-        with data_lock:
-            accounts_data[email]["last_profile_attempt"] = datetime.now()
-            accounts_data[email]["last_profile_success"] = False
-            accounts_data[email]["profile_error"] = "无有效 Token"
-            accounts_data[email]["profile"] = None
-        return
-
-    print(f"[{datetime.now()}] 尝试为账户 {email} 获取 Profile...")
-    profile, error = get_api_profile(email, token)
-
-    with data_lock:
-        accounts_data[email]["last_profile_attempt"] = datetime.now()
-        if profile:
-            accounts_data[email]["profile"] = profile
-            accounts_data[email]["last_profile_success"] = True
-            accounts_data[email]["profile_error"] = None
-            print(f"[{datetime.now()}] 账户 {email} 获取 Profile 成功。")
-        else:
-            accounts_data[email]["profile"] = None
-            accounts_data[email]["last_profile_success"] = False
-            accounts_data[email]["profile_error"] = error
-            print(f"[{datetime.now()}] 账户 {email} 获取 Profile 失败: {error}")
-            if error and ("token" in error.lower() or "auth" in error.lower() or "登录" in error.lower()):
-                print(f"[{datetime.now()}] 账户 {email} 获取 Profile 失败，疑似 Token 失效，将尝试重新登录。")
-                accounts_data[email]["token"] = None
-            return
-    
-    print(f"[{datetime.now()}] Profile 获取成功，继续为账户 {email} 获取卡片信息...")
-    cards_info, card_error = get_api_card_info(email, token)
-
-    with data_lock:
-        accounts_data[email]["last_card_info_attempt"] = datetime.now()
-        if cards_info:
-            accounts_data[email]["cards_info"] = cards_info
-            accounts_data[email]["last_card_info_success"] = True
-            accounts_data[email]["card_info_error"] = None
-            print(f"[{datetime.now()}] 账户 {email} 获取卡片信息成功。")
-        elif card_error:
-            accounts_data[email]["cards_info"] = None
-            accounts_data[email]["last_card_info_success"] = False
-            accounts_data[email]["card_info_error"] = card_error
-            print(f"[{datetime.now()}] 账户 {email} 获取卡片信息失败: {card_error}")
-        else:
-            accounts_data[email]["cards_info"] = None
-            accounts_data[email]["last_card_info_success"] = True
-            accounts_data[email]["card_info_error"] = None
-            print(f"[{datetime.now()}] 账户 {email} 获取卡片信息成功，但无卡片数据。")
-
-def initial_login_all_accounts():
-    print("程序启动，开始为所有账户执行初始登录...")
-    threads = []
-    with data_lock:
-        emails_to_login = list(accounts_data.keys())
-
-    for email in emails_to_login:
-        thread = threading.Thread(target=login_and_store_token, args=(email,))
-        threads.append(thread)
-        thread.start()
-    for thread in threads:
-        thread.join()
-    print("所有账户初始登录尝试完成。")
-
-def scheduled_login_all_accounts():
-    print(f"[{datetime.now()}] 定时任务：开始为所有账户重新登录...")
-    threads = []
-    with data_lock:
-        emails_to_login = list(accounts_data.keys())
-    
-    for email in emails_to_login:
-        thread = threading.Thread(target=login_and_store_token, args=(email,))
-        threads.append(thread)
-        thread.start()
-    for thread in threads:
-        thread.join()
-    print(f"[{datetime.now()}] 定时任务：所有账户重新登录尝试完成。")
-    scheduled_fetch_all_profiles()
-
-def scheduled_fetch_all_profiles():
-    print(f"[{datetime.now()}] 定时任务：开始为所有账户获取 Profile...")
-    threads = []
-    with data_lock:
-        emails_to_fetch = list(accounts_data.keys())
-
-    for email in emails_to_fetch:
-        thread = threading.Thread(target=fetch_and_store_profile, args=(email,))
-        threads.append(thread)
-        thread.start()
-    for thread in threads:
-        thread.join()
-    print(f"[{datetime.now()}] 定时任务：所有账户获取 Profile 尝试完成。")
-
-LOGIN_FORM_HTML = """
-<!DOCTYPE html>
-<html lang="zh-CN">
-<head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>访问授权</title>
-    <style>
-        body {
-            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
-            display: flex;
-            justify-content: center;
-            align-items: center;
-            height: 100vh;
-            margin: 0;
-            background-color: #fff;
-            color: #000;
-        }
-        .login-container {
-            background-color: #fff;
-            padding: 40px;
-            border-radius: 8px;
-            box-shadow: 0 8px 30px rgba(0,0,0,0.1);
-            width: 100%;
-            max-width: 360px;
-            border: 1px solid #eaeaea;
-        }
-        h2 {
-            text-align: center;
-            color: #000;
-            font-weight: 600;
-            margin-bottom: 30px;
-        }
-        label {
-            display: block;
-            margin-bottom: 8px;
-            color: #444;
-            font-size: 14px;
-        }
-        input[type="password"] {
-            width: 100%;
-            padding: 12px;
-            margin-bottom: 20px;
-            border: 1px solid #ccc;
-            border-radius: 6px;
-            box-sizing: border-box;
-            background-color: #fff;
-            color: #000;
-            font-size: 16px;
-        }
-        input[type="password"]:focus {
-            border-color: #999;
-            outline: none;
-            box-shadow: 0 0 0 2px rgba(0,0,0,0.05);
-        }
-        input[type="submit"] {
-            width: 100%;
-            padding: 12px;
-            background-color: #000;
-            color: #fff;
-            border: none;
-            border-radius: 6px;
-            cursor: pointer;
-            font-size: 16px;
-            font-weight: 500;
-            transition: background-color 0.2s ease;
-        }
-        input[type="submit"]:hover {
-            background-color: #333;
-        }
-        .error {
-            color: #e53e3e;
-            text-align: center;
-            margin-bottom: 15px;
-            font-size: 14px;
-        }
-    </style>
-</head>
-<body>
-    <div class="login-container">
-        <h2>授权访问</h2>
-        {% if error %}
-            <p class="error">{{ error }}</p>
-        {% endif %}
-        <form method="post">
-            <label for="password">访问密码:</label>
-            <input type="password" id="password" name="password" required autofocus>
-            <input type="submit" value="继续">
-        </form>
-    </div>
-</body>
-</html>
-"""
-
-@app.route('/', methods=['GET', 'POST'])
-def login_frontend():
-    if not FRONTEND_PASSWORD:
-        return "错误: 前端密码 (PASSWORD 环境变量) 未设置。", 500
-    
-    if 'logged_in' in session and session['logged_in']:
-        return redirect(url_for('dashboard'))
-
-    error = None
-    if request.method == 'POST':
-        entered_password = request.form.get('password')
-        if entered_password == FRONTEND_PASSWORD:
-            session['logged_in'] = True
-            return redirect(url_for('dashboard'))
-        else:
-            error = "密码错误！"
-    return render_template_string(LOGIN_FORM_HTML, error=error)
-
-@app.route('/dashboard')
-def dashboard():
-    if not ('logged_in' in session and session['logged_in']):
-        return redirect(url_for('login_frontend'))
-    return render_template_string(open('templates/dashboard.html', encoding='utf-8').read())
-
-@app.route('/logout')
-def logout():
-    session.pop('logged_in', None)
-    return redirect(url_for('login_frontend'))
-
-@app.route('/api/data', methods=['GET'])
-def get_all_data():
-    if not ('logged_in' in session and session['logged_in']):
-        return jsonify({"error": "未授权访问"}), 401
-    
-    with data_lock:
-        display_data = {}
-        for email, data in accounts_data.items():
-            display_data[email] = {
-                "profile": data.get("profile"),
-                "last_login_success": data.get("last_login_success"),
-                "last_profile_success": data.get("last_profile_success"),
-                "last_login_attempt": data.get("last_login_attempt").isoformat() if data.get("last_login_attempt") else None,
-                "last_profile_attempt": data.get("last_profile_attempt").isoformat() if data.get("last_profile_attempt") else None,
-                "login_error": data.get("login_error"),
-                "profile_error": data.get("profile_error"),
-                "token_present": bool(data.get("token")),
-                "cards_info": data.get("cards_info"),
-                "last_card_info_success": data.get("last_card_info_success"),
-                "last_card_info_attempt": data.get("last_card_info_attempt").isoformat() if data.get("last_card_info_attempt") else None,
-                "card_info_error": data.get("card_info_error")
-            }
-    return jsonify(display_data)
-
-@app.route('/api/refresh', methods=['POST'])
-def manual_refresh_all_data():
-    if not ('logged_in' in session and session['logged_in']):
-        return jsonify({"error": "未授权访问"}), 401
-
-    print(f"[{datetime.now()}] 手动触发数据刷新...")
-    threading.Thread(target=scheduled_login_all_accounts).start()
-    return jsonify({"message": "刷新任务已启动，请稍后查看数据。"}), 202
-
-if __name__ == '__main__':
-    if not FRONTEND_PASSWORD:
-        print("警告: PASSWORD 环境变量未设置，前端将无法登录。")
-    if not parse_accounts():
-        print("由于账户加载失败，程序将退出。请检查 ACCOUNTS 环境变量。")
-    else:
-        initial_login_all_accounts()
-        scheduled_fetch_all_profiles()
-
-        scheduler.add_job(scheduled_login_all_accounts, 'interval', days=3, id='job_login_all')
-        scheduler.add_job(scheduled_fetch_all_profiles, 'interval', minutes=30, id='job_fetch_profiles')
-        
-        try:
-            scheduler.start()
-            print("定时任务已启动。")
-            print(f"APScheduler jobs: {scheduler.get_jobs()}")
-        except Exception as e:
-            print(f"启动 APScheduler 失败: {e}")
-
-        is_hf_space = os.getenv("SPACE_ID") is not None
-        if not is_hf_space:
-             app.run(host='0.0.0.0', port=7860, debug=True)
-
-else:
-    if FRONTEND_PASSWORD and parse_accounts():
-        initial_login_all_accounts()
-        scheduled_fetch_all_profiles()
-        if not scheduler.running:
-            scheduler.add_job(scheduled_login_all_accounts, 'interval', days=3, id='job_login_all_gunicorn')
-            scheduler.add_job(scheduled_fetch_all_profiles, 'interval', minutes=30, id='job_fetch_profiles_gunicorn')
-            try:
-                scheduler.start()
-                print("APScheduler (Gunicorn) jobs started.")
-            except Exception as e:
-                 print(f"Failed to start APScheduler (Gunicorn): {e}")
-    else:
-        print("Gunicorn: 未能正确初始化账户或密码未设置。")
+import os
+import json
+import threading
+from datetime import datetime
+from flask import Flask, request, jsonify, render_template_string, redirect, url_for, session
+import requests
+from apscheduler.schedulers.background import BackgroundScheduler
+from dotenv import load_dotenv
+
+load_dotenv()
+
+app = Flask(__name__)
+app.secret_key = os.getenv("SECRET_KEY")
+if not app.secret_key:
+    print("警告: SECRET_KEY 环境变量未设置。将使用默认的、不安全的密钥。请在生产环境中设置一个安全的 SECRET_KEY。")
+    app.secret_key = "dev_secret_key_for_testing_only_change_me"
+
+LOGIN_URL = "https://api-card.infini.money/user/login"
+PROFILE_URL = "https://api-card.infini.money/user/profile"
+CARD_INFO_URL = "https://api-card.infini.money/card/info"
+FRONTEND_PASSWORD = os.getenv("PASSWORD")
+ACCOUNTS_JSON = os.getenv("ACCOUNTS")
+
+accounts_data = {}
+scheduler = BackgroundScheduler(daemon=True)
+data_lock = threading.Lock()
+
+def parse_accounts():
+    global accounts_data
+    if not ACCOUNTS_JSON:
+        print("错误: ACCOUNTS 环境变量未设置。")
+        return False
+    try:
+        accounts_list = json.loads(ACCOUNTS_JSON)
+        if not isinstance(accounts_list, list):
+            print("错误: ACCOUNTS 环境变量必须是一个 JSON 数组。")
+            return False
+        
+        temp_accounts_data = {}
+        for acc in accounts_list:
+            if isinstance(acc, dict) and "email" in acc and "password" in acc:
+                temp_accounts_data[acc["email"]] = {
+                    "password": acc["password"],
+                    "token": None,
+                    "profile": None,
+                    "last_login_success": None,
+                    "last_profile_success": None,
+                    "last_login_attempt": None,
+                    "last_profile_attempt": None,
+                    "login_error": None,
+                    "profile_error": None,
+                    "cards_info": None,
+                    "last_card_info_success": None,
+                    "last_card_info_attempt": None,
+                    "card_info_error": None,
+                }
+            else:
+                print(f"警告: ACCOUNTS 中的条目格式不正确: {acc}")
+        
+        with data_lock:
+            accounts_data = temp_accounts_data
+        print(f"成功加载 {len(accounts_data)} 个账户。")
+        return True
+    except json.JSONDecodeError:
+        print("错误: ACCOUNTS 环境变量不是有效的 JSON 格式。")
+        return False
+
+def api_login(email, password):
+    payload = {"email": email, "password": password}
+    try:
+        response = requests.post(LOGIN_URL, json=payload, timeout=10)
+        response.raise_for_status()
+        data = response.json()
+        cookies = response.cookies
+        jwt_token = cookies.get("jwt_token")
+
+        if data.get("code") == 0 and jwt_token:
+            return jwt_token, None
+        else:
+            error_message = data.get('message', "未知登录错误")
+            if data.get("code") == 0 and not jwt_token:
+                error_message = "响应成功但未返回 jwt_token。"
+            return None, f"{error_message} (Code: {data.get('code')})"
+    except requests.exceptions.Timeout:
+        return None, "登录请求超时。"
+    except requests.exceptions.RequestException as e:
+        return None, f"登录请求错误: {str(e)}"
+    except json.JSONDecodeError:
+        return None, "登录响应不是有效的 JSON。"
+
+def get_api_profile(email, token):
+    if not token:
+        return None, "Token 为空，无法获取 Profile。"
+    
+    cookies = {"jwt_token": token}
+    try:
+        response = requests.get(PROFILE_URL, cookies=cookies, timeout=10)
+        response.raise_for_status()
+        profile_data = response.json()
+        if profile_data.get("code") == 0 and profile_data.get("data"):
+            return profile_data.get("data"), None
+        else:
+            error_message = profile_data.get('message', "未知 Profile 错误")
+            if profile_data.get("code") == 0 and not profile_data.get("data"):
+                error_message = "响应成功但未返回 Profile 数据。"
+            return None, f"{error_message} (Code: {profile_data.get('code')})"
+    except requests.exceptions.Timeout:
+        return None, "获取 Profile 请求超时。"
+    except requests.exceptions.RequestException as e:
+        return None, f"获取 Profile 请求错误: {str(e)}"
+    except json.JSONDecodeError:
+        return None, "Profile 响应不是有效的 JSON。"
+
+def get_api_card_info(email, token):
+    if not token:
+        return None, "Token 为空，无法获取卡片信息。"
+    
+    cookies = {"jwt_token": token}
+    print(f"[{datetime.now()}] 尝试为账户 {email} 获取卡片信息...")
+    try:
+        response = requests.get(CARD_INFO_URL, cookies=cookies, timeout=10)
+        response.raise_for_status()
+        card_data = response.json()
+        if card_data.get("code") == 0 and "items" in card_data.get("data", {}):
+            items = card_data["data"]["items"]
+            if items:
+                item = items[0]
+                provider_bin = None
+                if item.get("provider"):
+                    parts = item["provider"].split('_')
+                    if len(parts) > 1 and parts[-1].isdigit():
+                        provider_bin = parts[-1]
+                
+                processed_card_info = {
+                    "provider_bin": provider_bin,
+                    "card_last_four_digits": item.get("card_last_four_digits"),
+                    "consumption_limit": item.get("consumption_limit"),
+                    "status": item.get("status"),
+                    "name": item.get("name")
+                }
+                return processed_card_info, None
+            else:
+                return None, None
+        elif card_data.get("code") == 0 and not card_data.get("data", {}).get("items"):
+             return None, None
+        else:
+            error_message = card_data.get('message', "未知卡片信息错误")
+            if card_data.get("code") == 0 and not card_data.get("data"):
+                error_message = "响应成功但未返回卡片数据。"
+            return None, f"{error_message} (Code: {card_data.get('code')})"
+    except requests.exceptions.Timeout:
+        return None, "获取卡片信息请求超时。"
+    except requests.exceptions.RequestException as e:
+        return None, f"获取卡片信息请求错误: {str(e)}"
+    except json.JSONDecodeError:
+        return None, "卡片信息响应不是有效的 JSON。"
+
+def login_and_store_token(email):
+    global accounts_data
+    with data_lock:
+        account_info = accounts_data.get(email)
+        if not account_info:
+            print(f"错误: 账户 {email} 未找到。")
+            return
+
+    password = account_info["password"]
+    print(f"[{datetime.now()}] 尝试为账户 {email} 登录...")
+    
+    token, error = api_login(email, password)
+    
+    with data_lock:
+        accounts_data[email]["last_login_attempt"] = datetime.now()
+        if token:
+            accounts_data[email]["token"] = token
+            accounts_data[email]["last_login_success"] = True
+            accounts_data[email]["login_error"] = None
+            print(f"[{datetime.now()}] 账户 {email} 登录成功。")
+        else:
+            accounts_data[email]["token"] = None
+            accounts_data[email]["last_login_success"] = False
+            accounts_data[email]["login_error"] = error
+            print(f"[{datetime.now()}] 账户 {email} 登录失败: {error}")
+
+def fetch_and_store_profile(email):
+    global accounts_data
+    with data_lock:
+        account_info = accounts_data.get(email)
+        if not account_info:
+            print(f"错误: 账户 {email} 未找到 (fetch_and_store_profile)。")
+            return
+        token = account_info.get("token")
+
+    if not token:
+        print(f"[{datetime.now()}] 账户 {email} 没有有效的 token，跳过获取 Profile。")
+        with data_lock:
+            accounts_data[email]["last_profile_attempt"] = datetime.now()
+            accounts_data[email]["last_profile_success"] = False
+            accounts_data[email]["profile_error"] = "无有效 Token"
+            accounts_data[email]["profile"] = None
+        return
+
+    print(f"[{datetime.now()}] 尝试为账户 {email} 获取 Profile...")
+    profile, error = get_api_profile(email, token)
+
+    with data_lock:
+        accounts_data[email]["last_profile_attempt"] = datetime.now()
+        if profile:
+            accounts_data[email]["profile"] = profile
+            accounts_data[email]["last_profile_success"] = True
+            accounts_data[email]["profile_error"] = None
+            print(f"[{datetime.now()}] 账户 {email} 获取 Profile 成功。")
+        else:
+            accounts_data[email]["profile"] = None
+            accounts_data[email]["last_profile_success"] = False
+            accounts_data[email]["profile_error"] = error
+            print(f"[{datetime.now()}] 账户 {email} 获取 Profile 失败: {error}")
+            if error and ("token" in error.lower() or "auth" in error.lower() or "登录" in error.lower()):
+                print(f"[{datetime.now()}] 账户 {email} 获取 Profile 失败，疑似 Token 失效，将尝试重新登录。")
+                accounts_data[email]["token"] = None
+            return
+    
+    print(f"[{datetime.now()}] Profile 获取成功，继续为账户 {email} 获取卡片信息...")
+    cards_info, card_error = get_api_card_info(email, token)
+
+    with data_lock:
+        accounts_data[email]["last_card_info_attempt"] = datetime.now()
+        if cards_info:
+            accounts_data[email]["cards_info"] = cards_info
+            accounts_data[email]["last_card_info_success"] = True
+            accounts_data[email]["card_info_error"] = None
+            print(f"[{datetime.now()}] 账户 {email} 获取卡片信息成功。")
+        elif card_error:
+            accounts_data[email]["cards_info"] = None
+            accounts_data[email]["last_card_info_success"] = False
+            accounts_data[email]["card_info_error"] = card_error
+            print(f"[{datetime.now()}] 账户 {email} 获取卡片信息失败: {card_error}")
+        else:
+            accounts_data[email]["cards_info"] = None
+            accounts_data[email]["last_card_info_success"] = True
+            accounts_data[email]["card_info_error"] = None
+            print(f"[{datetime.now()}] 账户 {email} 获取卡片信息成功，但无卡片数据。")
+
+def initial_login_all_accounts():
+    print("程序启动，开始为所有账户执行初始登录...")
+    threads = []
+    with data_lock:
+        emails_to_login = list(accounts_data.keys())
+
+    for email in emails_to_login:
+        thread = threading.Thread(target=login_and_store_token, args=(email,))
+        threads.append(thread)
+        thread.start()
+    for thread in threads:
+        thread.join()
+    print("所有账户初始登录尝试完成。")
+
+def scheduled_login_all_accounts():
+    print(f"[{datetime.now()}] 定时任务：开始为所有账户重新登录...")
+    threads = []
+    with data_lock:
+        emails_to_login = list(accounts_data.keys())
+    
+    for email in emails_to_login:
+        thread = threading.Thread(target=login_and_store_token, args=(email,))
+        threads.append(thread)
+        thread.start()
+    for thread in threads:
+        thread.join()
+    print(f"[{datetime.now()}] 定时任务：所有账户重新登录尝试完成。")
+    scheduled_fetch_all_profiles()
+
+def scheduled_fetch_all_profiles():
+    print(f"[{datetime.now()}] 定时任务：开始为所有账户获取 Profile...")
+    threads = []
+    with data_lock:
+        emails_to_fetch = list(accounts_data.keys())
+
+    for email in emails_to_fetch:
+        thread = threading.Thread(target=fetch_and_store_profile, args=(email,))
+        threads.append(thread)
+        thread.start()
+    for thread in threads:
+        thread.join()
+    print(f"[{datetime.now()}] 定时任务：所有账户获取 Profile 尝试完成。")
+
+LOGIN_FORM_HTML = """
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>访问授权</title>
+    <style>
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
+            display: flex;
+            justify-content: center;
+            align-items: center;
+            height: 100vh;
+            margin: 0;
+            background-color: #fff;
+            color: #000;
+        }
+        .login-container {
+            background-color: #fff;
+            padding: 40px;
+            border-radius: 8px;
+            box-shadow: 0 8px 30px rgba(0,0,0,0.1);
+            width: 100%;
+            max-width: 360px;
+            border: 1px solid #eaeaea;
+        }
+        h2 {
+            text-align: center;
+            color: #000;
+            font-weight: 600;
+            margin-bottom: 30px;
+        }
+        label {
+            display: block;
+            margin-bottom: 8px;
+            color: #444;
+            font-size: 14px;
+        }
+        input[type="password"] {
+            width: 100%;
+            padding: 12px;
+            margin-bottom: 20px;
+            border: 1px solid #ccc;
+            border-radius: 6px;
+            box-sizing: border-box;
+            background-color: #fff;
+            color: #000;
+            font-size: 16px;
+        }
+        input[type="password"]:focus {
+            border-color: #999;
+            outline: none;
+            box-shadow: 0 0 0 2px rgba(0,0,0,0.05);
+        }
+        input[type="submit"] {
+            width: 100%;
+            padding: 12px;
+            background-color: #000;
+            color: #fff;
+            border: none;
+            border-radius: 6px;
+            cursor: pointer;
+            font-size: 16px;
+            font-weight: 500;
+            transition: background-color 0.2s ease;
+        }
+        input[type="submit"]:hover {
+            background-color: #333;
+        }
+        .error {
+            color: #e53e3e;
+            text-align: center;
+            margin-bottom: 15px;
+            font-size: 14px;
+        }
+    </style>
+</head>
+<body>
+    <div class="login-container">
+        <h2>授权访问</h2>
+        {% if error %}
+            <p class="error">{{ error }}</p>
+        {% endif %}
+        <form method="post">
+            <label for="password">访问密码:</label>
+            <input type="password" id="password" name="password" required autofocus>
+            <input type="submit" value="继续">
+        </form>
+    </div>
+</body>
+</html>
+"""
+
+@app.route('/', methods=['GET', 'POST'])
+def login_frontend():
+    if not FRONTEND_PASSWORD:
+        return "错误: 前端密码 (PASSWORD 环境变量) 未设置。", 500
+    
+    if 'logged_in' in session and session['logged_in']:
+        return redirect(url_for('dashboard'))
+
+    error = None
+    if request.method == 'POST':
+        entered_password = request.form.get('password')
+        if entered_password == FRONTEND_PASSWORD:
+            session['logged_in'] = True
+            return redirect(url_for('dashboard'))
+        else:
+            error = "密码错误！"
+    return render_template_string(LOGIN_FORM_HTML, error=error)
+
+@app.route('/dashboard')
+def dashboard():
+    if not ('logged_in' in session and session['logged_in']):
+        return redirect(url_for('login_frontend'))
+    return render_template_string(open('templates/dashboard.html', encoding='utf-8').read())
+
+@app.route('/logout')
+def logout():
+    session.pop('logged_in', None)
+    return redirect(url_for('login_frontend'))
+
+@app.route('/api/data', methods=['GET'])
+def get_all_data():
+    if not ('logged_in' in session and session['logged_in']):
+        return jsonify({"error": "未授权访问"}), 401
+    
+    with data_lock:
+        display_data = {}
+        for email, data in accounts_data.items():
+            display_data[email] = {
+                "profile": data.get("profile"),
+                "last_login_success": data.get("last_login_success"),
+                "last_profile_success": data.get("last_profile_success"),
+                "last_login_attempt": data.get("last_login_attempt").isoformat() if data.get("last_login_attempt") else None,
+                "last_profile_attempt": data.get("last_profile_attempt").isoformat() if data.get("last_profile_attempt") else None,
+                "login_error": data.get("login_error"),
+                "profile_error": data.get("profile_error"),
+                "token_present": bool(data.get("token")),
+                "cards_info": data.get("cards_info"),
+                "last_card_info_success": data.get("last_card_info_success"),
+                "last_card_info_attempt": data.get("last_card_info_attempt").isoformat() if data.get("last_card_info_attempt") else None,
+                "card_info_error": data.get("card_info_error")
+            }
+    return jsonify(display_data)
+
+@app.route('/api/refresh', methods=['POST'])
+def manual_refresh_all_data():
+    if not ('logged_in' in session and session['logged_in']):
+        return jsonify({"error": "未授权访问"}), 401
+
+    print(f"[{datetime.now()}] 手动触发数据刷新...")
+    threading.Thread(target=scheduled_login_all_accounts).start()
+    return jsonify({"message": "刷新任务已启动，请稍后查看数据。"}), 202
+
+if __name__ == '__main__':
+    if not FRONTEND_PASSWORD:
+        print("警告: PASSWORD 环境变量未设置，前端将无法登录。")
+    if not parse_accounts():
+        print("由于账户加载失败，程序将退出。请检查 ACCOUNTS 环境变量。")
+    else:
+        initial_login_all_accounts()
+        scheduled_fetch_all_profiles()
+
+        scheduler.add_job(scheduled_login_all_accounts, 'interval', days=3, id='job_login_all')
+        scheduler.add_job(scheduled_fetch_all_profiles, 'interval', minutes=30, id='job_fetch_profiles')
+        
+        try:
+            scheduler.start()
+            print("定时任务已启动。")
+            print(f"APScheduler jobs: {scheduler.get_jobs()}")
+        except Exception as e:
+            print(f"启动 APScheduler 失败: {e}")
+
+        is_hf_space = os.getenv("SPACE_ID") is not None
+        if not is_hf_space:
+             app.run(host='0.0.0.0', port=7860, debug=True)
+
+else:
+    if FRONTEND_PASSWORD and parse_accounts():
+        initial_login_all_accounts()
+        scheduled_fetch_all_profiles()
+        if not scheduler.running:
+            scheduler.add_job(scheduled_login_all_accounts, 'interval', days=3, id='job_login_all_gunicorn')
+            scheduler.add_job(scheduled_fetch_all_profiles, 'interval', minutes=30, id='job_fetch_profiles_gunicorn')
+            try:
+                scheduler.start()
+                print("APScheduler (Gunicorn) jobs started.")
+            except Exception as e:
+                 print(f"Failed to start APScheduler (Gunicorn): {e}")
+    else:
+        print("Gunicorn: 未能正确初始化账户或密码未设置。")