Merge pull request #15 from dhfhfk/main

Fix KTX login issue

ktrains/korail/korail.py

@@ -9,11 +9,14 @@
 import itertools
 import re
 import sys
+import base64
 from datetime import datetime, timedelta, timezone
 from pprint import pprint
 
 import requests
 from six import with_metaclass
+from Crypto.Util.Padding import pad
+from Crypto.Cipher import AES
 
 try:
  # noinspection PyPackageRequirements
@@ -56,6 +59,8 @@ def _python3():
 KORAIL_PAYMENT = "%s/ebizmw/PrdPkgMainList.do" % KORAIL_DOMAIN
 KORAIL_PAYMENT_VOUCHER = "%s/ebizmw/PrdPkgBoucherView.do" % KORAIL_DOMAIN
 
+KORAIL_CODE = "%s.common.code.do" % KORAIL_MOBILE
+
 DEFAULT_USER_AGENT = "Dalvik/2.1.0 (Linux; U; Android 5.1.1; Nexus 4 Build/LMY48T)"
 
 
@@ -551,6 +556,8 @@ class Korail(object):
  _version = "190617001"
  _key = "korail1234567890"
 
+ _idx = None
+
  membership_number = None
  name = None
  email = None
@@ -564,6 +571,30 @@ def __init__(self, korail_id, korail_pw, auto_login=True, want_feedback=False):
  if auto_login:
  self.login(korail_id, korail_pw)
 
+ def __enc_password(self, password):
+ url = KORAIL_CODE
+ data = {
+ 'code': "app.login.cphd"
+ }
+
+ r = self._session.post(url, data=data)
+ j = json.loads(r.text)
+
+ if j['strResult'] == 'SUCC' and j.get('app.login.cphd') is not None:
+ self._idx = j['app.login.cphd']['idx']
+ key = j['app.login.cphd']['key']
+
+ encrypt_key = key.encode(encoding='utf-8', errors='strict')
+ iv = key[:16].encode(encoding='utf-8', errors='strict')
+ cipher = AES.new(encrypt_key, AES.MODE_CBC, iv)
+
+ padded_data = pad(password.encode("utf-8"), AES.block_size)
+
+ return base64.b64encode(base64.b64encode(cipher.encrypt(padded_data))).decode("utf-8")
+ else:
+ return False
+
+
  def login(self, korail_id=None, korail_pw=None):
  """Login to Korail server.
  :param korail_id : `Korail membership number` or `phone number` or `email`
@@ -611,14 +642,15 @@ def login(self, korail_id=None, korail_pw=None):
  url = KORAIL_LOGIN
  data = {
  "Device": self._device,
- "Version": "150718001", # HACK
+ "Version": "231231001", # HACK
  #'Version': self._version,
  # 2 : for membership number,
  # 4 : for phone number,
  # 5 : for email,
  "txtInputFlg": txt_input_flg,
  "txtMemberNo": korail_id,
- "txtPwd": korail_pw,
+ 'txtPwd': self.__enc_password(korail_pw),
+ 'idx': self._idx
  }
 
  r = self._session.post(url, data=data)

requirements.txt

@@ -3,4 +3,5 @@ streamlit-aggrid
 pandas
 chime
 datetime
-pytz
+pytz
+PyCryptodome