docs: update Thunder login verification guide

docs/guide/README.md

@@ -50,6 +50,7 @@ A file list program that supports multiple storage, and supports web browsing an
 - [x] [BaiduNetdisk](https://pan.baidu.com/) / [share](./drivers/baidu_share.md)
 - [x] [Quark/TV](https://pan.quark.cn/)
 - [x] [Thunder / X Browser](../guide/drivers/thunder.md)
+- [x] [GuangYaPan](../guide/drivers/guangyapan.md)
 - [x] [Lanzou](https://www.lanzou.com/)、[NewLanzou](https://www.ilanzou.com)
 - [x] [Feiji Cloud](https://www.feijipan.com/)
 - [x] [Aliyundrive share](https://www.alipan.com/)

docs/guide/drivers/thunder.md

@@ -51,7 +51,7 @@ Thunder Browser：Currently only supports mobile phones (Android, iOS)
 
 That is, the mobile phone number, email, and username used for login (there is a probability that you cannot log in, you need to try)
 
-- You need to bring the `+86` area code, for example +86 13722223333 fill in like this
+- For phone numbers, try the 11-digit number first. If login fails, try adding the `+86` area code, for example `+86 13722223333`.
 
 <br/>
 
@@ -65,19 +65,65 @@ password for login
 
 
 
-### **CaptchaToken**
+### **CaptchaToken / CreditKey / DeviceID**
+
+`CaptchaToken` usually does not need to be filled manually. If `need verify: {url}` appears when logging in or uploading, open the link in the error and complete the verification. The driver will save the new `CaptchaToken` automatically.
+
+`DeviceID` can usually be left empty. The driver will generate and save one automatically. If login verification is triggered, keep the same `DeviceID` before retrying; changing it frequently may make the verification result unusable.
+
+`CreditKey` is only used when login verification is triggered. If the following prompt appears when adding the driver, login verification has been triggered:
+
+![xunlei-login-review-error-1](/img/drivers/xunlei/pr8342/login-review-error-1.png)
 
-Need verify: {url} may appear when logging in or uploading, please visit the link in the error to complete the verification and get CaptchaToken (verification code)
+![xunlei-login-review-error-2](/img/drivers/xunlei/pr8342/login-review-error-2.png)
 
-![xunlei](/img/drivers/xunlei/x1.png)
+### **Login verification solution**
+
+Use a computer if possible.
+
+Copy the complete data in the box, from the first `{` to the last `}`, for example:
+
+```json
+{
+  "creditkey": "",
+  "reviewurl": "",
+  "deviceid": "",
+  "devicesign": ""
+}
+```
+
+Open this site:
+
+`https://i.xunlei.com/xlcaptcha/android.html`
+
+![xunlei-captcha-page-initial](/img/drivers/xunlei/pr8342/captcha-page-initial.png)
+
+The image above shows the initial page. This captcha is unrelated to the verification required by the mount.
+
+Open the browser console (F12), enter `reviewCb(the copied data as the parameter)`, and press Enter. Example:
+
+```js
+reviewCb({
+  "creditkey": "",
+  "reviewurl": "",
+  "deviceid": "",
+  "devicesign": ""
+})
+```
 
-Fill in the mount directory ID account password and save it, there will be a big lump in the upper right corner (cannot be copied),
+Then the page will change to SMS verification or smart detection:
 
-Let's go back to adding an account to copy from Https to the end to a new window to get the verification code parameter (CaptchaToken)
+![xunlei-reviewcb-console](/img/drivers/xunlei/pr8342/reviewcb-console.png)
 
-See the image below to add
+![xunlei-sms-review](/img/drivers/xunlei/pr8342/sms-review.png)
 
-![xunlei](/img/drivers/xunlei/x2.png)
+![xunlei-smart-review](/img/drivers/xunlei/pr8342/smart-review.png)
+
+Complete the SMS verification. The smart detection page does not need to be completed. It will not redirect back to AList, and clicking the confirm button may not show any prompt.
+
+Copy `creditkey` from the console, fill it into the driver's `CreditKey` field, then save the driver configuration.
+
+![xunlei-creditkey-field](/img/drivers/xunlei/pr8342/creditkey-field.png)
 
 <br/>
 
@@ -113,7 +159,7 @@ Or use the proxy function in this program to transfer.
 ### **Login Type**
 
 1. When selecting User, you only need to fill in the username and password
-   - User You need to bring the `+86` area code, for example +86 13722223333 fill in like this
+   - For phone numbers, try the 11-digit number first. If login fails, try adding the `+86` area code, for example `+86 13722223333`.
 
 
 2. **RefreshToken**: Just fill in RefreshToken when selecting RefreshToken
@@ -124,7 +170,7 @@ Or use the proxy function in this program to transfer.
 
 ### **Signature Type**
 
-**Algorithms**：When selecting Algorithms, just fill in the Algorithms (it is difficult to obtain, and needs to be reversed)
+**Algorithms**: When selecting Algorithms, fill in Algorithms. The default value has been updated to the parameters built into the current driver, so normally keep the default.
 
 **Captcha sign**: Only fill in CaptchaSign and Timestamp when selecting CaptchaSign
 
@@ -147,53 +193,48 @@ Login type and Sign type recommended options
 
 ### **DeviceID**
 
-The value calculated by md5 is used to determine the logged in device
+Used to identify the login device. If left empty, the driver will generate and save one automatically. If login verification is triggered, keep the same `DeviceID` and retry.
 
 ### **ClientID, ClientSecret, ClientVersion, PackageName**
 
-It is related to the signature, fill in according to the actual situation
-
-### **UserAgent**
-
-UserAgent used by API requests, may be inaccessible or speed limited if the setting is incorrect
-
-### **DownUserAgent**
-
-The User Agent used for downloading, if the setting is wrong, it will not be downloaded (it will be used when the agent is turned on) Fixed parameters:
-**Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36**
-
-<br/>
+These values are related to signing and login. The defaults have been updated to:
 
+- `ClientID`: `Xp6vsxz_7IYVw2BB`
+- `ClientSecret`: `Xp6vsy4tN9toTVdMSpomVdXpRmES`
+- `ClientVersion`: `8.31.0.9726`
+- `PackageName`: `com.xunlei.downloadprovider`
 
+Normally keep the defaults.
 
-## **Key data acquisition process**
+### **UserAgent**
 
-Obtain Xunlei request data through network analysis tools (packet capture tools) --- Please read the following information carefully
+UserAgent used by API requests. Incorrect values may cause access failure or speed limits. The default has been updated to `ANDROID-com.xunlei.downloadprovider/8.31.0.9726 ... sdkVersion/512000 ...`.
 
-Open Xunlei and log in to your account (the picture below uses the PC client to operate, and the web terminal is also available)
+### **DownUserAgent**
 
-Included in the request https://xluser-ssl.xunlei.com/v1/shield/captcha/init
-CaptchaSign, Timestamp, DeviceID, ClientID, ClientVersion, PackageName, User-Agent
+The User Agent used for downloading. Incorrect values may cause download failures or abnormal speed (used when proxy is enabled). Default:
 
-**Note**: After obtaining the information of the two pictures, slowly select the data from the two data captured and fill in it
+`Dalvik/2.1.0 (Linux; U; Android 12; M2004J7AC Build/SP1A.210812.016)`
 
-After logging in to Thunder and opening the packet capture tool, it is possible that the information of **v1/shield/captcha/init** cannot be immediately obtained at this time.
+### **CreditKey**
 
-Do not close the Xunlei PC client and the packet capture tool, just wait, it will refresh automatically after **5 minutes**
+Only used when login verification is triggered. Use the same handling steps as [CaptchaToken / CreditKey / DeviceID](#captchatoken--creditkey--deviceid). After a successful login, the driver clears this field.
 
-You will see the parameters as shown in the figure below, and you can fill in it according to the acquisition (if you can't see it clearly, you can right-click to copy the picture and link it to the browser to open a new window)
+<br/>
 
-See **v1/shield/captcha/init** and grab it, please **immediately don't delay for a second** Right-click Xunlei in the taskbar in the lower right corner to exit, exit completely and then reopen to get * *Figure II**
 
-![xunlei](/img/drivers/xunlei/x4.png)
 
-Restarting Thunder will refresh the token
+## **Key data acquisition process**
 
-The request to https://xluser-ssl.xunlei.com/v1/auth/token contains RefreshToken (please use the returned value), ClientSecret (does not exist on the web side)
+After PR [#8342](https://github.com/AlistGo/alist/pull/8342), username/password login for `Thunder` and `ThunderExpert` was changed:
 
-![xunlei](/img/drivers/xunlei/x5.png)
+1. The driver first calls `https://xluser-ssl.xunlei.com/xluser.core.login/v3/login` to get `sessionID`.
+2. It then calls `https://xluser-ssl.xunlei.com/v1/auth/signin/token` to exchange the token used by AList.
+3. Login parameters were updated to Xunlei Android client `8.31.0.9726` and `sdkVersion/512000`.
+4. A `CreditKey` field was added for login verification.
+5. The normal `Thunder` driver can also customize `DeviceID`.
 
-Figure 1 contains **7** parameters | Figure 1 contains **2** parameters | a fixed parameter (Down UserAgent), ten parameters and 3 options and a mount path, just write and save, before saving Remember to check~
+Therefore, the old process of capturing `v1/shield/captcha/init` and `v1/auth/token` to obtain `CaptchaSign`, `Timestamp`, `RefreshToken`, and related fields is outdated. Prefer the normal `Thunder` driver and only fill in username and password. Use `ThunderExpert` only when advanced parameters or custom UserAgent are needed.
 
 <br/>
 
@@ -636,4 +677,4 @@ flowchart TB
     click c1 "../drivers/common.html#webdav-policy"
 ```
 
-::::
+::::

docs/zh/guide/README.md

@@ -48,6 +48,7 @@ category:
 - [x] [百度网盘](https://pan.baidu.com/) / [分享](./drivers/baidu_share.md)
 - [x] [夸克网盘/TV](https://pan.quark.cn)
 - [x] [迅雷网盘 / X / 浏览器](../guide/drivers/thunder.md)
+- [x] [光鸭网盘](../guide/drivers/guangyapan.md)
 - [x] [蓝奏云](https://www.lanzou.com/)、[蓝奏云优享版](https://www.ilanzou.com)
 - [x] [小飞机网盘](https://www.feijipan.com/)
 - [x] [阿里云盘分享](https://www.alipan.com/)

docs/zh/guide/drivers/thunder.md

@@ -54,8 +54,7 @@ star: true
 
 即用于登陆的手机号,邮箱,用户名(有概率无法登录,需要尝试)
 
-1. 在获取验证码之前填写手机号先不要携带 `+86` 区号
-2. 获取验证码后填写需要携带 `+86` 区号，例如 +86 13722223333 这样填写
+- 手机号可先直接填写 11 位手机号；如果登录失败，再尝试携带 `+86` 区号，例如 `+86 13722223333`
 
 <br/>
 
@@ -69,19 +68,65 @@ star: true
 
 
 
-### **CaptchaToken**
+### **CaptchaToken / 信任密钥 / 设备ID**
 
-在登录或上传是可能出现 need verify: {url},请访问错误中的链接完成验证得到 CaptchaToken（验证码）
+`CaptchaToken` 一般不需要手动填写。登录或上传时如果出现 `need verify: {url}`，请打开错误中的链接完成验证，驱动会自动保存新的 `CaptchaToken`。
 
-![xunlei](/img/drivers/xunlei/x1.png)
+`设备ID` 默认留空即可，驱动会自动生成并保存。触发登录验证后，不要频繁更换 `设备ID`，否则可能导致验证结果无法复用。
 
-填写好挂载目录 ID 账号 密码后保存，右上角会出现一大坨(没法复制)，
+`信任密钥（CreditKey）` 只在触发登录验证时使用。保存驱动时如果出现下图所示的情况，就是触发了登录验证：
 
-我们回到添加账号这里来复制 从 Https 开始复制到结束到一个新窗口进行获取验证码参数(CaptchaToken)
+![xunlei-login-review-error-1](/img/drivers/xunlei/pr8342/login-review-error-1.png)
 
-看下图添加
+![xunlei-login-review-error-2](/img/drivers/xunlei/pr8342/login-review-error-2.png)
 
-![xunlei](/img/drivers/xunlei/x2.png)
+### **登录验证的解决办法**
+
+尽量使用电脑操作。
+
+完整复制方框中的数据，从第一个 `{` 开始到最后一个 `}` 结束，例如：
+
+```json
+{
+  "creditkey": "",
+  "reviewurl": "",
+  "deviceid": "",
+  "devicesign": ""
+}
+```
+
+打开下面的网站：
+
+`https://i.xunlei.com/xlcaptcha/android.html`
+
+![xunlei-captcha-page-initial](/img/drivers/xunlei/pr8342/captcha-page-initial.png)
+
+上图是刚打开的样子，注意这个验证码与挂载所需的验证无关。
+
+打开浏览器控制台（F12），输入 `reviewCb(中间的参数为之前复制的数据)` 后回车，例如：
+
+```js
+reviewCb({
+  "creditkey": "",
+  "reviewurl": "",
+  "deviceid": "",
+  "devicesign": ""
+})
+```
+
+即可看到页面变成短信验证或智能检测：
+
+![xunlei-reviewcb-console](/img/drivers/xunlei/pr8342/reviewcb-console.png)
+
+![xunlei-sms-review](/img/drivers/xunlei/pr8342/sms-review.png)
+
+![xunlei-smart-review](/img/drivers/xunlei/pr8342/smart-review.png)
+
+完成短信验证，智能检测页面无需完成。这里不会跳转回 AList，且点击确定按钮后可能没有任何提示。
+
+复制控制台中的 `creditkey`，并将其填回驱动配置的 `信任密钥（CreditKey）` 字段中，然后保存驱动配置。
+
+![xunlei-creditkey-field](/img/drivers/xunlei/pr8342/creditkey-field.png)
 
 <br/>
 
@@ -117,7 +162,7 @@ flowchart TB
 ### **登录类型**
 
 1. 选择 `用户名` 时填用户名和密码
-   - 用户名需要携带 `+86` 区号，例如 +86 13722223333 这样填写
+   - 手机号可先直接填写 11 位手机号；如果登录失败，再尝试携带 `+86` 区号，例如 `+86 13722223333`
 
 
 2. 选择 `刷新令牌`时只需填写 `刷新令牌`
@@ -128,7 +173,7 @@ flowchart TB
 
 ### **签名类型**
 
-选择 `算法` 时需填写 `算法`(比较难获取,需要逆向)
+选择 `算法` 时填写 `算法`，默认值已更新为当前驱动内置参数，一般保持默认即可
 
 选择 `验证码签名` 时只需填写 `验证码签名` 和 `时间戳`
 
@@ -151,54 +196,48 @@ CaptchaSign = "1." + str
 
 ### **设备ID**
 
-通过 MD5 计算的值，用于判断登录的设备
+用于判断登录设备。留空时驱动会自动生成并保存；如果触发登录验证，建议保持同一个 `设备ID` 后再重试。
 
 ### **客户端ID, 客户端秘钥, 客户端版本, 包名**
 
-与签名有关，根据实际情况填写
-
-### **用户代理**
-
-API 请求使用的 UserAgent，设置错误可能无法访问或限速
-
-### **下载用户代理**
-
-下载时用到的 User Agent，如果设置错误会无法下载(开启代理会使用) 固定参数：
+与签名和登录有关。默认值已更新为：
 
-`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36`
-
-<br/>
+- `客户端ID`：`Xp6vsxz_7IYVw2BB`
+- `客户端秘钥`：`Xp6vsy4tN9toTVdMSpomVdXpRmES`
+- `客户端版本`：`8.31.0.9726`
+- `包名`：`com.xunlei.downloadprovider`
 
+一般保持默认即可。
 
+### **用户代理**
 
-## **关键数据获取流程**
-
-通过网络分析工具(抓包工具)获取迅雷请求数据
+API 请求使用的 UserAgent，设置错误可能无法访问或限速。默认值已更新到 `ANDROID-com.xunlei.downloadprovider/8.31.0.9726 ... sdkVersion/512000 ...`。
 
-打开迅雷并登录账号（下图使用的是 PC 客户端来操作的，Web 端也可以）
+### **下载用户代理**
 
-请求 https://xluser-ssl.xunlei.com/v1/shield/captcha/init 中包含
-CaptchaSign、Timestamp、DeviceID、ClientID、ClientVersion、PackageName、User-Agent
+下载时用到的 User Agent，如果设置错误可能无法下载或速度异常（开启代理会使用）。默认值：
 
-注：获取好两张图信息后再慢慢的从抓到的两条数据内挑选数据填进去
+`Dalvik/2.1.0 (Linux; U; Android 12; M2004J7AC Build/SP1A.210812.016)`
 
-登录迅雷 打开抓包工具后，这时候可能，不能立马获取到 `v1/shield/captcha/init` 的信息，
+### **信任密钥**
 
-迅雷 PC 客户端 和抓包工具不要关闭，等待即可，**5 分钟左右** 就会自动刷新
+仅在触发登录验证时使用，处理方法同上方 [CaptchaToken / 信任密钥 / 设备ID](#captchatoken--信任密钥--设备id)。登录成功后驱动会清空该字段。
 
-就会看到如下图的参数 照着获取填写即可(看不清的话可以右键复制图片链接到浏览器新开个窗口打开)
+<br/>
 
-看到 `v1/shield/captcha/init` 抓取到后 请**立刻马上不要耽误一秒钟** 把迅雷在右下角任务栏的迅雷右键点击退出，彻底退出 然后重新打开 获取到**图二**
 
-![xunlei](/img/drivers/xunlei/x4.png)
 
-重启迅雷会刷新 token
+## **关键数据获取流程**
 
-请求 https://xluser-ssl.xunlei.com/v1/auth/token 中包含 RefreshToken（请使用返回的值）、ClientSecret（web 端不存在）
+PR [#8342](https://github.com/AlistGo/alist/pull/8342) 后，`迅雷` 和 `迅雷专家版` 的账号密码登录流程已调整：
 
-![xunlei](/img/drivers/xunlei/x5.png)
+1. 先调用 `https://xluser-ssl.xunlei.com/xluser.core.login/v3/login` 获取 `sessionID`。
+2. 再调用 `https://xluser-ssl.xunlei.com/v1/auth/signin/token` 换取 AList 使用的登录令牌。
+3. 登录参数更新到迅雷 Android 客户端 `8.31.0.9726`、`sdkVersion/512000`。
+4. 新增 `信任密钥（CreditKey）` 字段，用于处理登录验证。
+5. `迅雷` 普通版也支持自定义 `设备ID`。
 
-图一包含 **7 条** 参数 | 图一包含 **2 条** 参数 | 一条固定参数(Down UserAgent) ，十条参数 和 3 个选项 以及一个挂载路径，写好保存即可，保存前记得检查喔~~
+因此，旧文档中通过抓包 `v1/shield/captcha/init`、`v1/auth/token` 来获取 `CaptchaSign`、`Timestamp`、`RefreshToken` 等参数的流程已经过期。普通用户优先使用 `迅雷` 驱动，只填写用户名和密码；需要高级参数或自定义 UserAgent 时再使用 `迅雷专家版`。
 
 <br/>