From f190f770c49e56a594395873321ad914b3800e1d Mon Sep 17 00:00:00 2001
From: Harold <8866033@gmail.com>
Date: Mon, 20 Apr 2026 12:58:35 +0800
Subject: [PATCH] feat: add _api_post with encrypted API communication

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 py/tests/test_鲸鱼APP.py | 16 ++++++++++++++++
 py/鲸鱼APP.py            | 19 +++++++++++++++++++
 2 files changed, 35 insertions(+)

diff --git a/py/tests/test_鲸鱼APP.py b/py/tests/test_鲸鱼APP.py
index 04b7d12..405c6da 100644
--- a/py/tests/test_鲸鱼APP.py
+++ b/py/tests/test_鲸鱼APP.py
@@ -1,3 +1,4 @@
+import json
 import unittest
 from importlib.machinery import SourceFileLoader
 from pathlib import Path
@@ -22,3 +23,18 @@ class TestJingyuSpider(unittest.TestCase):
         import re
         encrypted = self.spider._aes_encrypt("hello")
         self.assertTrue(re.match(r'^[A-Za-z0-9+/=]+$', encrypted))
+
+    def test_api_post_decrypts_response(self):
+        payload = {"result": "ok"}
+        encrypted = self.spider._aes_encrypt(json.dumps(payload))
+
+        class FakeResponse:
+            status_code = 200
+            encoding = "utf-8"
+            def json(self):
+                return {"data": encrypted}
+
+        self.spider.post = lambda url, **kwargs: FakeResponse()
+        self.spider.host = "http://test.com"
+        result = self.spider._api_post("someEndpoint")
+        self.assertEqual(result, payload)
diff --git a/py/鲸鱼APP.py b/py/鲸鱼APP.py
index 10621d3..5f0de08 100644
--- a/py/鲸鱼APP.py
+++ b/py/鲸鱼APP.py
@@ -47,3 +47,22 @@ class Spider(BaseSpider):
         cipher = AES.new(key, AES.MODE_CBC, iv)
         decrypted = unpad(cipher.decrypt(raw), AES.block_size)
         return decrypted.decode("utf-8")
+
+    def _api_post(self, endpoint, payload=None):
+        if payload is None:
+            payload = {}
+        ep = f"/{endpoint}" if not endpoint.startswith("/") else endpoint
+        url = f"{self.host}{self.api_path}{ep}"
+        headers = {
+            "User-Agent": self.ua,
+            "Accept-Encoding": "gzip",
+        }
+        rsp = self.post(url, json=payload, headers=headers, timeout=15, verify=False)
+        data = rsp.json().get("data")
+        if not data:
+            return None
+        try:
+            return json.loads(self._aes_decrypt(data))
+        except Exception as e:
+            self.log(f"JSON解析失败: {e}")
+            return None