签名验证失败

[nankaine]

app.providers.zai_provider:_create_stream_response:779 | ❌ 上游返回错误: 400
app.providers.zai_provider:_create_stream_response:783 | ❌ 错误详情: {"detail":"403: Signature validation failed: 签名验证失败"}

官方又升级了？

不知道各位有遇到没呢

[igeekbb]

一样

[ZyphrZero]

寄了，签名逻辑没变，但是验证变了，不清楚服务端用什么验证的会一直返426，有可能是浏览器指纹？不太懂

[igeekbb]

寄了，签名逻辑没变，但是验证变了，不清楚服务端用什么验证的会一直返426，有可能是浏览器指纹？不太懂

相信佬

[ZyphrZero]

寄了，签名逻辑没变，但是验证变了，不清楚服务端用什么验证的会一直返426，有可能是浏览器指纹？不太懂

相信佬

没用的不搞了，等别人吧，国内模型感觉不太好薅，说不好回头一个律师函下来

[DestroyerDarkNess]

@ZyphrZero I saw you made it, congratulations. They only changed the key and the obfuscation was more aggressive. All these changes were made since version prod-fe-1.0.103.

Now that you've made it public... we'll be waiting to see what other changes they make.

PS: I've been monitoring the key on github to see what other people have managed to crack it. 🫡

[Pentesting-28]

@DestroyerDarkNess It was very easy:

t(531, "Ofuu") //key-@@@@)))()((9))-xxxx&&&%%%

[ZyphrZero]

Now it can be used.
现在可以使用了，感谢各位!~

[DestroyerDarkNess]

@ZyphrZero You need to obtain the X-Fe-Version dynamically:

import re
import asyncio
import httpx

async def check_fe_version():
    url = "https://chat.z.ai"
    async with httpx.AsyncClient(follow_redirects=True, timeout=10) as client:
        resp = await client.get(url)
        if not (200 <= resp.status_code < 300):
            return False

        html = resp.text
        m = re.search(r"prod-fe-([\d.]+)", html)
        if m:
            print(f"Detected FE Version: {m.group(0)}")  # m.group(1) only number
        return True

if __name__ == "__main__":
    asyncio.run(check_fe_version())

[ZyphrZero]

@ZyphrZero You need to obtain the X-Fe-Version dynamically:

import re
import asyncio
import httpx

async def check_fe_version():
url = "https://chat.z.ai"
async with httpx.AsyncClient(follow_redirects=True, timeout=10) as client:
resp = await client.get(url)
if not (200 <= resp.status_code < 300):
return False

    html = resp.text
    m = re.search(r"prod-fe-([\d.]+)", html)
    if m:
        print(f"Detected FE Version: {m.group(0)}")  # m.group(1) only number
    return True

if name == "main":
asyncio.run(check_fe_version())

Yes, a similar function has been added to the latest code.
app/utils/fe_version.py