@LemonLeon base64 转下

我猜你找的应该是 Workflow Engine for Kubernetes ，Google 搜索页第一个即可

感兴趣 wx dG9ueXdhbmdpbw==

@tonywangcn 经过测试，是 clashx pro 的问题，换成 v2rayU 正常了。虽然 YT 速度一般。谢谢教程 @yunyuyuan

@wuliaolaozi 试试 ams 几次都是秒成功

@yunyuyuan 奇怪，又尝试了几次。nginx 端能看到如下的访问日志，但 v2ray 却任何日志也没有。clashx 配置如下，请问可能是什么问题呢？

::1 - - [23/Feb/2023:13:51:50 +0000] "GET / HTTP/1.1" 200 0 "-" "Go-http-client/1.1"


proxies:
- name: "v2ray"
type: vmess
server: v2ray.example .com
port: 80
uuid: uuid
alterId: 0
cipher: auto
network: ws
ws-path: /ray
ws-headers:
Host: vv2ray.example .com

@zuosiruan 改成 0 后同样不行
@yunyuyuan clashx 客户端端口改成 80 后，没有了 bad request 报错，返回 200 ok ，但链接同样失败。
我开的是 AMS 1 机子，另外，ip v4 没有开通成功，会有影响么？

@tonywangcn

如果浏览器直接访问 v2ray.example .com/ws-path 同样报 bad request 错误，v2ray 服务端有如下错误日志。

transport/internet/websocket: failed to convert to WebSocket connection > websocket: the client is not using the websocket protocol: 'websocket' token not found in 'Upgrade' header


@yunyuyuan 请问，这可能是哪里的问题呢？

请教下，机子开了，但没有配置 nat64 ，通过 cloudflared 转发 ssh 到 localhost ip6 ssh 。成功接入。
但问题是，clashx 日志中一直报错，
[TCP] dial GLOBAL to 185.60.216.169:80 error: dial v2ray.
example.com:443 error: 400 Bad Request

v2ray 服务端 debug 模式没有任何信息，nginx 同样。

如果浏览器直接访问 v2ray.example.com/ws-path 同样报 bad request 错误，v2ray 服务端有如下错误日志。



clashX

```
proxies:
- name: "vmess"
type: vmess
server: v2ray.example.com
port: 443
uuid: "uuid"
alterId: 64
cipher: auto
ws-path: /ws-path
skip-cert-verify: true
network: ws
ws-headers:
Host: v2ray.example.com
```

```
{
"log": {
"loglevel": "debug",
"access": "/tmp/logs/v2ray/log.log",
"error": "/tmp/logs/v2ray/log.log"
},
"inbounds": [{
"listen":"127.0.0.1",
"port": 10086,
"protocol": "vmess",
"settings": {
"clients": [{ "id": "uuid" , "alterId": 64}]
},
"streamSettings": {
"network": "ws",
"wsSettings": {
"path": "/ws-path"
}
}
}],
"outbounds": [{
"protocol": "freedom",
"settings": {}
}]
}
```
nginx.conf

```
worker_processes 1;

events {
worker_connections 1024;
}

http {
include mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;
server {
listen 80;
listen [::]:80;
server_name v2ray.example.com;

location = /ws-path {
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_pass http://localhost:10086;
}
}
}
```

厉害！ 上市公司的大佬又回来了

赞头像

@catsky dG9ueXdhbmcuZGF0YUBnbWFpbC5jb20= base64 通过这个联系

提供一个分析思路

1. 输入驾照号码后，点击 search ，network 显示的第一条请求便是，如下图所示。
[]( https://imgur.com/rVsPhCW)

2. 点击 headers ，发现第一条请求通过 post 提交参数，得到一个 302 重定向，看 Response Headers 的 location 部分，即为第二条请求。
[]( https://imgur.com/4aoZRYk)

3. 点击第二条 request 的 response ，搜索 左侧页面中出现的 Registration number ，即 515DF3 ，即可判断出重定向中的请求结果为目标页面
[]( https://imgur.com/21KFxWc)

4. 构造请求，确认上述猜测是否正确，如下图所示右键第一条请求 选择 Copy as cURL
[]( https://imgur.com/Ko0KZFa)

5. 在 Postman 中通过 import -> Raw text -> continue 导入，点击 Send (或直接将 cURL 命令粘贴到命令行工具回车)，在返回的 Body 中搜索 Registration number(515DF3) 即可发现如下图中的结果。

[]( https://imgur.com/T5yympW)

整个操作过程无需开启 Javascript 即可实现，换言之，无需任何 headless browser 即可实现 OP 的需求。

下面为具体的实现步骤：

1. 请求 `https://www.service.transport.qld.gov.au/checkrego/application/VehicleSearch.xhtml`
2. Redirect 到 https://www.service.transport.qld.gov.au/checkrego/application/VehicleSearch.xhtml?dswid=7019
3. 拿到 2 中的 cookie ，dswid ，以及 response 中的 `javax.faces.ViewState`
4. 将上述拿到的 cookie ，dswid ，以及 javax.faces.ViewState 将下面的值进行相应替换，请求，即可获取到目标数据
5. 剩下的就是通过 css selector 等技术解析 html 数据了

```
curl --location --request POST 'https://www.service.transport.qld.gov.au/checkrego/application/VehicleSearch.xhtml?dswid=-4097' \
--header 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9' \
--header 'Accept-Language: en-CA,en;q=0.9,fr-CA;q=0.8,fr;q=0.7,zh-TW;q=0.6,zh-CN;q=0.5,zh;q=0.4,en-US;q=0.3,ja-JP;q=0.2,ja;q=0.1,en-GB;q=0.1' \
--header 'Cache-Control: no-cache' \
--header 'Connection: keep-alive' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Cookie: oam.Flash.REDIRECT=true; JSESSIONID=0001YXWHRoRmC2n_Ur_iDbDJ5GJ:1c05gfnja; LPVID=Q4NmYxMmJhYTc2NmJiZWVj; LPSID-36317183=3ZTOIJh_TpueQjQE9EnFdQ; ADRUM_BTa=R:94|g:37c82fe9-373a-4a38-b0a8-29a58de27da5|n:tmr-prod_2381add0-3320-4317-90dd-93ddbdaa5c0d; SameSite=None; ADRUM_BT1=R:94|i:124181|e:5; ADRUM_BT1=R:94|i:124181|e:4; ADRUM_BTa=R:94|g:43df3ec2-861c-4365-9418-d933ea606284|n:tmr-prod_2381add0-3320-4317-90dd-93ddbdaa5c0d; JSESSIONID=0001EMXzKZ1B4mwI7r7wzhcGF3L:1c05gfnja; SameSite=None' \
--header 'DNT: 1' \
--header 'Origin: https://www.service.transport.qld.gov.au' \
--header 'Pragma: no-cache' \
--header 'Referer: https://www.service.transport.qld.gov.au/checkrego/application/VehicleSearch.xhtml?dswid=-4097' \
--header 'Sec-Fetch-Dest: document' \
--header 'Sec-Fetch-Mode: navigate' \
--header 'Sec-Fetch-Site: same-origin' \
--header 'Sec-Fetch-User: ?1' \
--header 'Upgrade-Insecure-Requests: 1' \
--header 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36' \
--data-urlencode 'vehicleSearchForm:plateNumber=6666' \
--data-urlencode 'vehicleSearchForm:referenceId=' \
--data-urlencode 'vehicleSearchForm:confirmButton=' \
--data-urlencode 'vehicleSearchForm_SUBMIT=1' \
--data-urlencode 'javax.faces.ViewState=97L3Xac9P5KSdnHwMlK7fmBuOMA9xhe7oQT/dF6FrTQ5Xa+yhup62pPrTc8ozfKyJ9mCORg8uqJlyWeXaifmBg==' \
--data-urlencode 'javax.faces.ClientWindow=-4097'
```

你们的 casdoor 支持 traefik forward auth 么

Event.isTrusted 并不可靠，puppeteer 即可破防 https://github.com/puppeteer/puppeteer

`
Q: What’s the difference between a “trusted" and "untrusted" input event?
In browsers, input events could be divided into two big groups: trusted vs. untrusted.

Trusted events: events generated by users interacting with the page, e.g. using a mouse or keyboard.
Untrusted event: events generated by Web APIs, e.g. document.createEvent or element.click() methods.
Websites can distinguish between these two groups:

using an Event.isTrusted event flag
sniffing for accompanying events. For example, every trusted 'click' event is preceded by 'mousedown' and 'mouseup' events.
For automation purposes it’s important to generate trusted events. All input events generated with Puppeteer are trusted and fire proper accompanying events. If, for some reason, one needs an untrusted event, it’s always possible to hop into a page context with page.evaluate and generate a fake event:

await page.evaluate(() => {
document.querySelector('button[type=submit]').click();
});

`

Lifewire: https://www.lifewire.com/what-is-a-mac-4155662
```
In the strictest definition, a Mac is a PC because PC stands for personal computer. However, in everyday use, the term PC typically refers to a computer running the Windows operating system, not the operating system made by Apple.
```

wikipedia: https://en.wikipedia.org/wiki/Macintosh

```
The Macintosh (mainly Mac since 1998)[1] is a family of personal computers designed, manufactured, and sold by Apple Inc. (originally as Apple Computer, Inc.) since January 1984.
```

Intel: https://www.intel.com/content/www/us/en/tech-tips-and-tricks/pc-vs-mac-the-big-debate.html

```
When it comes to the choice between PC vs. Mac, it's the differences that count most. Decide which features are most important in your next device.
```

@lostberryzz 链接明明是个热议话题，为何会返回这个消息呢