chiyi/image2api
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修复grok

Browse Source
This commit is contained in:
chiyi
2026-07-17 21:45:31 +08:00
parent a65f52b7f4
commit b6e8445d95
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/internal/provider/grok/client.go
+11 -4
View File
@@ -392,7 +392,7 @@ func (c *Client) ensureChallenge(ctx context.Context, client tlsclient.HttpClien
if fresh { if fresh {
return return
} }
ch, err := fetchStatsigChallenge(ctx, client, token) ch, err := fetchStatsigChallenge(ctx, client)
if err != nil { if err != nil {
// Silent fallback to static defaults is the #1 cause of a recurring // Silent fallback to static defaults is the #1 cause of a recurring
// "403 anti-bot": the homepage structure changed and we never notice. // "403 anti-bot": the homepage structure changed and we never notice.
@@ -409,7 +409,15 @@ func (c *Client) ensureChallenge(ctx context.Context, client tlsclient.HttpClien
// fetchStatsigChallenge does a browser-free homepage GET and derives a // fetchStatsigChallenge does a browser-free homepage GET and derives a
// self-consistent (header, salt) pair: header = 0x00 + seed, salt = prefix + F. // self-consistent (header, salt) pair: header = 0x00 + seed, salt = prefix + F.
func fetchStatsigChallenge(ctx context.Context, client tlsclient.HttpClient, token string) (statsigChallenge, error) { //
// The request is ANONYMOUS (no sso cookie): grok redirects a request carrying an
// sso cookie to the sign-in page, whose HTML omits the anti-bot seed <meta> and
// the curves array — so a cookied fetch silently loses the challenge inputs and
// statsigID falls back to the stale static recipe (403 anti-bot). The seed/curves
// are per-build and account-independent (the seed is transmitted inside the
// x-statsig-id header the server re-verifies), so the anonymous landing page is
// the reliable source for every session.
func fetchStatsigChallenge(ctx context.Context, client tlsclient.HttpClient) (statsigChallenge, error) {
req, err := http.NewRequest(http.MethodGet, apiBase+"/", nil) req, err := http.NewRequest(http.MethodGet, apiBase+"/", nil)
if err != nil { if err != nil {
return statsigChallenge{}, err return statsigChallenge{}, err
@@ -419,8 +427,7 @@ func fetchStatsigChallenge(ctx context.Context, client tlsclient.HttpClient, tok
"accept": {"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"}, "accept": {"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"},
"accept-language": {"en-US,en;q=0.9"}, "accept-language": {"en-US,en;q=0.9"},
"user-agent": {userAgent}, "user-agent": {userAgent},
"cookie": {"sso=" + token + "; sso-rw=" + token}, http.HeaderOrderKey: {"accept", "accept-language", "user-agent"},
http.HeaderOrderKey: {"accept", "accept-language", "user-agent", "cookie"},
} }
resp, err := client.Do(req) resp, err := client.Do(req)
if err != nil { if err != nil {