dmig.js 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253
  1. /**
  2. * 域名迁移脚本 /js/dmig.js
  3. * 仅在 index.html 检测到需要迁移时才同步加载
  4. *
  5. * 新迁移统一使用 quickSave 后端 → /{s_k}_{c}/?_dmr=1,避免敏感状态进入 URL。
  6. * 历史 ?_mig= 是无签名客户端状态,接收端只清理、不再反序列化。
  7. * 接收端标记 window.__dmig_pending_reload → restoreQuickSaveEnv 还原后重载 routes
  8. * __dmig_r_{sk_c} 防止二次触发
  9. *
  10. * __dmig = 'sk_c' → quickSave 已跳转
  11. * __dmig_t = 目标域名(供 index.html 内联快速跳转)
  12. */
  13. /* LZString v1.4.4 minified */
  14. /* eslint-disable */
  15. var LZString=function(){var r=String.fromCharCode,o="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",e={};function t(r,o){if(!e[r]){e[r]={};for(var n=0;n<r.length;n++)e[r][r.charAt(n)]=n}return e[r][o]}var i={compressToBase64:function(r){if(null==r)return"";var n=i._compress(r,6,function(r){return o.charAt(r)});switch(n.length%4){default:case 0:return n;case 1:return n+"===";case 2:return n+"==";case 3:return n+"="}},decompressFromBase64:function(r){return null==r?"":""==r?null:i._decompress(r.length,32,function(n){return t(o,r.charAt(n))})},compressToUTF16:function(o){return null==o?"":i._compress(o,15,function(o){return r(o+32)})+" "},decompressFromUTF16:function(r){return null==r?"":""==r?null:i._decompress(r.length,16384,function(o){return r.charCodeAt(o)-32})},compressToUint8Array:function(r){for(var o=i.compress(r),n=new Uint8Array(2*o.length),e=0,t=o.length;e<t;e++){var s=o.charCodeAt(e);n[2*e]=s>>>8,n[2*e+1]=s%256}return n},decompressFromUint8Array:function(o){if(null==o)return i.decompress(o);for(var n=new Array(o.length/2),e=0,t=n.length;e<t;e++)n[e]=256*o[2*e]+o[2*e+1];var s=[];return n.forEach(function(o){s.push(r(o))}),i.decompress(s.join(""))},compressToEncodedURIComponent:function(r){return null==r?"":i._compress(r,6,function(r){return n.charAt(r)})},decompressFromEncodedURIComponent:function(r){return null==r?"":""==r?null:(r=r.replace(/ /g,"+"),i._decompress(r.length,32,function(o){return t(n,r.charAt(o))}))},compress:function(o){return i._compress(o,16,function(o){return r(o)})},_compress:function(r,o,n){if(null==r)return"";var e,t,i,s={},u={},a="",p="",c="",l=2,f=3,h=2,d=[],m=0,v=0;for(i=0;i<r.length;i+=1)if(a=r.charAt(i),Object.prototype.hasOwnProperty.call(s,a)||(s[a]=f++,u[a]=!0),p=c+a,Object.prototype.hasOwnProperty.call(s,p))c=p;else{if(Object.prototype.hasOwnProperty.call(u,c)){if(c.charCodeAt(0)<256){for(e=0;e<h;e++)m<<=1,v==o-1?(v=0,d.push(n(m)),m=0):v++;for(t=c.charCodeAt(0),e=0;e<8;e++)m=m<<1|1&t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t>>=1}else{for(t=1,e=0;e<h;e++)m=m<<1|t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t=0;for(t=c.charCodeAt(0),e=0;e<16;e++)m=m<<1|1&t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t>>=1}0==--l&&(l=Math.pow(2,h),h++),delete u[c]}else for(t=s[c],e=0;e<h;e++)m=m<<1|1&t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t>>=1;0==--l&&(l=Math.pow(2,h),h++),s[p]=f++,c=String(a)}if(""!==c){if(Object.prototype.hasOwnProperty.call(u,c)){if(c.charCodeAt(0)<256){for(e=0;e<h;e++)m<<=1,v==o-1?(v=0,d.push(n(m)),m=0):v++;for(t=c.charCodeAt(0),e=0;e<8;e++)m=m<<1|1&t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t>>=1}else{for(t=1,e=0;e<h;e++)m=m<<1|t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t=0;for(t=c.charCodeAt(0),e=0;e<16;e++)m=m<<1|1&t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t>>=1}0==--l&&(l=Math.pow(2,h),h++),delete u[c]}else for(t=s[c],e=0;e<h;e++)m=m<<1|1&t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t>>=1;0==--l&&(l=Math.pow(2,h),h++)}for(t=2,e=0;e<h;e++)m=m<<1|1&t,v==o-1?(v=0,d.push(n(m)),m=0):v++,t>>=1;for(;;){if(m<<=1,v==o-1){d.push(n(m));break}v++}return d.join("")},decompress:function(r){return null==r?"":""==r?null:i._decompress(r.length,32768,function(o){return r.charCodeAt(o)})},_decompress:function(o,n,e){var t,i,s,u,a,p,c,l=[],f=4,h=4,d=3,m="",v=[],g={val:e(0),position:n,index:1};for(t=0;t<3;t+=1)l[t]=t;for(s=0,a=Math.pow(2,2),p=1;p!=a;)u=g.val&g.position,g.position>>=1,0==g.position&&(g.position=n,g.val=e(g.index++)),s|=(u>0?1:0)*p,p<<=1;switch(s){case 0:for(s=0,a=Math.pow(2,8),p=1;p!=a;)u=g.val&g.position,g.position>>=1,0==g.position&&(g.position=n,g.val=e(g.index++)),s|=(u>0?1:0)*p,p<<=1;c=r(s);break;case 1:for(s=0,a=Math.pow(2,16),p=1;p!=a;)u=g.val&g.position,g.position>>=1,0==g.position&&(g.position=n,g.val=e(g.index++)),s|=(u>0?1:0)*p,p<<=1;c=r(s);break;case 2:return""}for(l[3]=c,i=c,v.push(c);;){if(g.index>o)return"";for(s=0,a=Math.pow(2,d),p=1;p!=a;)u=g.val&g.position,g.position>>=1,0==g.position&&(g.position=n,g.val=e(g.index++)),s|=(u>0?1:0)*p,p<<=1;switch(c=s){case 0:for(s=0,a=Math.pow(2,8),p=1;p!=a;)u=g.val&g.position,g.position>>=1,0==g.position&&(g.position=n,g.val=e(g.index++)),s|=(u>0?1:0)*p,p<<=1;l[h++]=r(s),c=h-1,f--;break;case 1:for(s=0,a=Math.pow(2,16),p=1;p!=a;)u=g.val&g.position,g.position>>=1,0==g.position&&(g.position=n,g.val=e(g.index++)),s|=(u>0?1:0)*p,p<<=1;l[h++]=r(s),c=h-1,f--;break;case 2:return v.join("")}if(0==f&&(f=Math.pow(2,d),d++),l[c])m=l[c];else{if(c!==h)return null;m=i+i.charAt(0)}v.push(m),l[h++]=i+m.charAt(0),i=m,0==--f&&(f=Math.pow(2,d),d++)}}};return i}();
  16. /* eslint-enable */
  17. /* 解密函数(与 helpers.js 一致,密钥 xbd4jl,前缀 a6072637) */
  18. var _ENC_HEAD = 'a6072637';
  19. var _dmig_decrypt = function(str, pwd) {
  20. if (!str || str === '') return '';
  21. if (!pwd || pwd === '') pwd = 'xbd4jl';
  22. pwd = encodeURIComponent(pwd);
  23. if (str.length < 8 || pwd.length <= 0) return '';
  24. var prand = '';
  25. for (var i = 0; i < pwd.length; i++) prand += pwd.charCodeAt(i).toString();
  26. var sPos = Math.floor(prand.length / 5);
  27. var mult = parseInt(prand.charAt(sPos) + prand.charAt(sPos * 2) + prand.charAt(sPos * 3) + prand.charAt(sPos * 4) + prand.charAt(sPos * 5));
  28. var incr = Math.round(pwd.length / 2);
  29. var modu = Math.pow(2, 31) - 1;
  30. var salt = parseInt(str.substring(str.length - 8), 16);
  31. str = str.substring(0, str.length - 8);
  32. prand += salt;
  33. while (prand.length > 10) {
  34. var left = prand, num = 0;
  35. while (left.length > 0) { num += parseInt(left.substring(0, 10)); left = left.substring(10); }
  36. prand = num.toString();
  37. }
  38. prand = (mult * prand + incr) % modu;
  39. var encStr = '';
  40. for (var charIndex = 0; charIndex < str.length; charIndex += 2) {
  41. encStr += String.fromCharCode(parseInt(str.substring(charIndex, charIndex + 2), 16) ^ Math.floor((prand / modu) * 255));
  42. prand = (mult * prand + incr) % modu;
  43. }
  44. return decodeURIComponent(encStr);
  45. };
  46. var _dmig_decryptVal = function(val) {
  47. if (typeof val === 'string' && val.indexOf(_ENC_HEAD) === 0) {
  48. try { return _dmig_decrypt(val.substring(_ENC_HEAD.length)); } catch(e) {}
  49. }
  50. return val;
  51. };
  52. /* ========== 迁移主逻辑 ========== */
  53. (function(){
  54. var DOMAIN_MAP = {
  55. 'boldbanker.com':'boldbanker.co.uk',
  56. };
  57. var API_URL = (window.themeConfig?.api||'https://ukapi.uswinslots.com/')+'game/quickSave';
  58. var MIG_FLAG = '__dmig';
  59. var MIG_TARGET = '__dmig_t';
  60. var SKIP_LS_KEYS = {
  61. user: 1,
  62. POPULAR_GAME_LIST: 1,
  63. myfire: 1,
  64. LOCAL_GOOGLE_REDIRECT_APK_ENV: 1,
  65. LOCAL_GOOGLE_REDIRECT_JUMPAPK: 1
  66. };
  67. var SKIP_LS_PREFIXES = ['LOCAL_QUICK_SAVE_RESTORED', 'salesmartly_', '__dmig'];
  68. var cleanJumpApkSearch = function(search) {
  69. if (!search || search === '?') return search || '';
  70. try {
  71. var params = new URLSearchParams(search.charAt(0) === '?' ? search : '?' + search);
  72. params.delete('jumpapk');
  73. params.delete('api_secret');
  74. params.delete('w_lci');
  75. var next = params.toString();
  76. return next ? '?' + next : '';
  77. } catch(e) {
  78. return search;
  79. }
  80. };
  81. var cleanJumpApkUrlvars = function(value) {
  82. if (!value) return value;
  83. try {
  84. var json = JSON.parse(value);
  85. if (json && typeof json === 'object') {
  86. delete json.jumpapk;
  87. delete json.api_secret;
  88. delete json.w_lci;
  89. return JSON.stringify(json);
  90. }
  91. } catch(e) {}
  92. return value;
  93. };
  94. var shouldSkipLsKey = function(k) {
  95. if (!k || SKIP_LS_KEYS[k]) return true;
  96. for (var pi = 0; pi < SKIP_LS_PREFIXES.length; pi++) {
  97. if (k.indexOf(SKIP_LS_PREFIXES[pi]) === 0) return true;
  98. }
  99. return false;
  100. };
  101. var host = window.location.hostname;
  102. if (host.indexOf('www.') === 0) host = host.substring(4);
  103. var usp = new URLSearchParams(window.location.search);
  104. /* iOS/Android 壳包「迁移落地」标记(WMigLanding 靠它触发落地页)。带 mig=1&_dmr=1 时说明目标浏览器
  105. 可能已登录它自己的账号,必须【强制覆盖】把 App 账号接管过来 —— 否则默认"已存在 key 就跳过"
  106. 策略会保留浏览器原账号(承接站显示错账号)。此门槛只对我们的迁移生效,不带 mig=1 的原有 dmig
  107. 迁移(FB内嵌→全新外部浏览器)行为完全不变。 */
  108. var forceMig = usp.get('mig') === '1' && usp.get('_dmr') === '1';
  109. if (forceMig) { try { sessionStorage.setItem('MIG_FORCE_RESTORE', '1'); } catch (e) {} } // 供 _dmr 分支的 restoreQuickSaveEnv 强制覆盖
  110. /* 迁移落地(到 H5):清除 APK 环境标记。APK 启动带的是 jumpapk(不进这两个接收端),
  111. 只有迁移到 H5 才会带 _mig/_dmr。即使 webview 与外部浏览器共享 localStorage,
  112. 这里清掉后 H5 的 isJumpApkEnv() 为 false → H5 不再弹“引导去H5”弹窗;
  113. 而 APK 下次启动带 jumpapk 会重新置位,照常弹引导。 */
  114. try {
  115. if (usp.get('_mig') || usp.get('_dmr') === '1') {
  116. localStorage.removeItem('LOCAL_GOOGLE_REDIRECT_APK_ENV');
  117. }
  118. } catch (e) {}
  119. /* ========== 历史接收端:丢弃无签名 _mig 客户端状态 ========== */
  120. try {
  121. var mig = usp.get('_mig');
  122. if (mig) {
  123. usp.delete('_mig');
  124. usp.delete('jumpapk');
  125. usp.delete('api_secret');
  126. usp.delete('w_lci');
  127. var ns = usp.toString();
  128. window.history.replaceState(null, '', window.location.origin + window.location.pathname + (ns ? '?' + ns : ''));
  129. return;
  130. }
  131. } catch(e){ console.error('[dmig] discard _mig error', e); }
  132. /* ========== 接收端 B:_dmr=1 + /{s_k}_{c}/ 后端中转接收 ========== */
  133. if (usp.get('_dmr') === '1') {
  134. var skMatch = window.location.pathname.match(/^\/([a-zA-Z0-9]+_\d+)(?:\/.*)?$/);
  135. if (skMatch) {
  136. var restoreKey = '__dmig_r_' + skMatch[1];
  137. try {
  138. // 迁移落地时立即剥离 hash 路由(见 _mig 分支注释),避免 HashRouter 在环境还原完成前触发登录守卫/弹窗
  139. // __dmig_r_<sk_c> 是一次性 sentinel:第一次落地时把它设为 "1" → 后续再次访问相同 sk_c
  140. // 直接走"已还原"分支,仅剥离 _dmr / hash,不再设置 __dmig_pending_reload。
  141. // 旧实现会在已还原分支里 localStorage.removeItem(restoreKey),导致每隔一次访问 sentinel 失效,
  142. // 第三次再来 localhost → bigwin7 时会重新进入 pending_reload 流,触发 reducerRoutes 早返路径,
  143. // 而此时 LOCAL_QUICK_SAVE_RESTORED_<sk_c> 已存在,restoreQuickSaveEnv 又会早返并未清除 pending 标记,
  144. // 导致 state.status 永远停在 LOADING(首屏卡在 LoadingFull)。
  145. if (localStorage.getItem(restoreKey)) {
  146. usp.delete('_dmr');
  147. usp.delete('jumpapk');
  148. usp.delete('api_secret');
  149. usp.delete('w_lci');
  150. var cleanS = usp.toString();
  151. window.history.replaceState(null, '', window.location.origin + window.location.pathname + (cleanS ? '?' + cleanS : ''));
  152. } else {
  153. window.__dmig_pending_reload = restoreKey;
  154. usp.delete('_dmr');
  155. usp.delete('jumpapk');
  156. usp.delete('api_secret');
  157. usp.delete('w_lci');
  158. var pendS = usp.toString();
  159. window.history.replaceState(null, '', window.location.origin + window.location.pathname + (pendS ? '?' + pendS : ''));
  160. }
  161. } catch(e){}
  162. }
  163. return;
  164. }
  165. /* ========== 发送端:旧域名首次跳转 ========== */
  166. var target = null;
  167. for (var dm in DOMAIN_MAP) {
  168. if (host === dm || (host.length > dm.length + 1 && host.charAt(host.length - dm.length - 1) === '.' && host.substring(host.length - dm.length) === dm)) {
  169. target = DOMAIN_MAP[dm];
  170. break;
  171. }
  172. }
  173. if(host.includes("localhost"))target="bigwin7.co.uk";
  174. if (!target) return;
  175. var hash = window.location.hash || '';
  176. var env = { ck: document.cookie || '', qs: cleanJumpApkSearch(window.location.search || ''), ls: '{}' };
  177. try {
  178. var lso = {};
  179. for (var i = 0; i < localStorage.length; i++) {
  180. var k = localStorage.key(i);
  181. if (shouldSkipLsKey(k)) continue;
  182. var lsv = localStorage.getItem(k);
  183. if (k === 'urlvars') lsv = cleanJumpApkUrlvars(lsv);
  184. if (k === 'LOCAL_START_PARAMS') lsv = cleanJumpApkSearch(lsv);
  185. if (k === 'LOCAL_START_PARAMS' && !lsv) continue;
  186. lso[k] = lsv;
  187. }
  188. env.ls = JSON.stringify(lso);
  189. } catch(e){}
  190. /* 敏感迁移数据仅通过 POST 发送;跳转 URL 只携带后端短码。 */
  191. var chars = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';
  192. var randomValues = new Uint32Array(9);
  193. if (window.crypto && typeof window.crypto.getRandomValues === 'function') {
  194. window.crypto.getRandomValues(randomValues);
  195. } else {
  196. for (var rv = 0; rv < randomValues.length; rv++) randomValues[rv] = Math.floor(Math.random() * 0x100000000);
  197. }
  198. var sk = ''; for (var j = 0; j < randomValues.length; j++) sk += chars.charAt(randomValues[j] % chars.length);
  199. var sp = new URLSearchParams(window.location.search);
  200. var c = sp.get('c') || '';
  201. try { if (!c) { c = _dmig_decryptVal(localStorage.getItem('LOCAL_ACTIVITY_C') || ''); } } catch(e){}
  202. if (!c) c = '0';
  203. var pm = {};
  204. sp.forEach(function(v, k){ if (k !== 'jumpapk' && k !== 'api_secret' && k !== 'w_lci' && k !== '_mig') pm[k] = v; });
  205. var sign = '';
  206. try { sign = _dmig_decryptVal(localStorage.getItem('LOCAL_SIGN') || ''); } catch(e){}
  207. var body = {
  208. type: 'domain_migration',
  209. cookie: env.ck,
  210. params: JSON.stringify(pm),
  211. ls: env.ls,
  212. s_k: sk, c: c,
  213. locale: (navigator.language || '').split('-')[0] || '',
  214. bfp: '', ff: '',
  215. regionid: host.split('.')[host.indexOf('www.') === 0 ? 1 : 0],
  216. _d: 'mobile',
  217. _t: Date.now() + '_0_0'
  218. };
  219. if (sign) body.sign = sign;
  220. var skc = sk + '_' + c;
  221. var lz = LZString.compressToBase64(JSON.stringify(body));
  222. fetch(API_URL, {
  223. method: 'POST',
  224. headers: { 'Content-Type': 'application/json' },
  225. body: JSON.stringify({ lz: lz }),
  226. credentials: 'include'
  227. }).then(function(response){
  228. if (!response.ok) throw new Error('quickSave returned ' + response.status);
  229. try { localStorage.setItem(MIG_FLAG, skc); localStorage.setItem(MIG_TARGET, target); } catch(e){}
  230. window.location.replace('https://' + target + '/' + skc + '/?_dmr=1' + hash);
  231. }).catch(function(err){
  232. console.error('[dmig] save error', err);
  233. try { localStorage.setItem(MIG_FLAG, '1'); localStorage.setItem(MIG_TARGET, target); } catch(e){}
  234. window.location.replace('https://' + target + window.location.pathname + cleanJumpApkSearch(window.location.search) + hash);
  235. });
  236. })();