Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] got 403 with openai needs to review the security #112

Closed
MirrorCY opened this issue Dec 11, 2022 · 22 comments
Closed

[BUG] got 403 with openai needs to review the security #112

MirrorCY opened this issue Dec 11, 2022 · 22 comments
Assignees
Labels
bug Something isn't working

Comments

@MirrorCY
Copy link

Describe the bug
When using pychatgpt normally, a 403 status code is returned with an html page requesting verification of connection security.​ And then asking any questions will return this. Restarting pychatgpt will not fix the problem, nor will the token be deemed invalid and reacquired.

To Reproduce
Steps to reproduce the behavior:

  1. Run pip install chatgptpy --upgrade
  2. Complete the Options()
  3. Call chat.ask(prompt)
  4. See error
  5. Restart
  6. See error again

Expected behavior
The program can handle the problem or report an error.

Screenshots
If applicable, add screenshots to help explain your problem.

Version Info (please complete the following information):

  • Chatgptpy 1.0.8
  • Dependency latest
  • python 3.10.8

Additional context
options

options = Options()
options.log = True
options.track = True 
options.proxies = 'socks5://192.168.31.88:7890'

chat = Chat(email="******@wuhuayun.cn",
            password="******",
            options=options)
>> Using proxies: True.
>> Tracking conversation enabled.
>> Using proxies: True.
>> Tracking conversation enabled.
INFO:     Started server process [15680]
INFO:     Waiting for application startup.
INFO:     Application startup complete.
INFO:     Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
>> Starting chat...
windows 一定有 C 盘吗
[Status Code] 403 | [Response Text] <!DOCTYPE html>
<html lang="en-US">
<head>
    <title>Just a moment...</title>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=Edge">
    <meta name="robots" content="noindex,nofollow">
    <meta name="viewport" content="width=device-width,initial-scale=1">
    <link href="/cdn-cgi/styles/challenges.css" rel="stylesheet">


</head>
<body class="no-js">
    <div class="main-wrapper" role="main">
    <div class="main-content">
        <h1 class="zone-name-title h1">
            <img class="heading-favicon" src="/favicon.ico"
                 onerror="this.onerror=null;this.parentNode.removeChild(this)">
            chat.openai.com
        </h1>
        <h2 class="h2" id="challenge-running">
            Checking if the site connection is secure
        </h2>
        <noscript>
            <div id="challenge-error-title">
                <div class="h2">
                    <span class="icon-wrapper">
                        <div class="heading-icon warning-icon"></div>
                    </span>
                    <span id="challenge-error-text">
                        Enable JavaScript and cookies to continue
                    </span>
                </div>
            </div>
        </noscript>
        <div id="trk_jschal_js" style="display:none;background-image:url('/cdn-cgi/images/trace/managed/nojs/transparent.gif?ray=778146d9086aa038')"></div>
        <div id="challenge-body-text" class="core-msg spacer">
            chat.openai.com needs to review the security of your connection before proceeding.
        </div>
        <form id="challenge-form" action="/backend-api/conversation?__cf_chl_f_tk=5osx61Z15lrKove7nv2fNVz7jbjvVRc1h.BQiQRx39Q-1670793757-0-gaNycGzNDqU" method="POST" enctype="application/x-www-form-urlencoded">
            <input type="hidden" name="md" value="RoNaf26qX4j9evWFMKx0QgUjlv4_jDNuUSietg_wXEU-1670793757-0-Ab8VE0RRYaOkFWno6U21DcGfe3_hCVkjWKLfmUkf1Rg8V-W6utZXPr3mIGP5sKopzrQxBmTXY2LnbzkCvBdNbPYU0XLrNnY_QaHmmGLPM1FGhGsjyZMMfJkFmmsiMRO1gfQTObLqCFg56hFBr714BQeP1skPetkQNpmMkZDKVSukoTppWWJUX1Udf6ROq7zcGZzWNJvuEDnfBZs5B1OhQkZTCWImCwn0rPrW40aam3uLih18lHWMx_ShouuLRjG2cgKvFb16EAkOx-YUo4HVnRv2C2ofKA4EYcpdUGmxCTqKbzCyLacfLGVeg0tOz7_cwIXK0tV2o3B9aBYg9s24JDEq46KNJCQfD2_k2TLTamtAy0GcWRu--N74NA-Y5UqJRvc50Am2mA5SMcg7ZGflLYi2vFFUkivyaFdVp1JT1vhD6lQLjLgiyj12RE4vf5NGyVlORaK6XHS2nlO2uz97GZYSW9fWGrFxQSQMHB_gBr6i8G8ENxOmF25mLDHOajrWmRfO_nVq7njkhnmItRxEXOrsxoT4cbkL6o1t5IuIyG0MqXfHXd3WrLINAzuXNTJcScnfB1Ps0rEP4GLl3wrQHMf5nt7j5X7G9hrHL_vlobT4DJlVjKG-AmNztE8yqAcFSB_Pr_cEh5Y-rGk1IKiI_nweTzpHGaWqIkcJ6lGnU4MTZuBU-Kv6wK3DS_fACS_fdL4MHtq6yRP2_NLO6aEZQWk">
            <input type="hidden" name="r" value="vCoSnAjZk97VOFIz7wJO6pa1ZiIcRqkUfLPQipKXw4w-1670793757-0-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">
        </form>
    </div>
</div>
<script>
    (function(){
        window._cf_chl_opt={
            cvId: '2',
            cType: 'managed',
            cNounce: '17125',
            cRay: '778146d9086aa038',
            cHash: '67e8dbdf26bf3eb',
            cUPMDTk: "\/backend-api\/conversation?__cf_chl_tk=5osx61Z15lrKove7nv2fNVz7jbjvVRc1h.BQiQRx39Q-1670793757-0-gaNycGzNDqU",
            cFPWv: 'b',
            cTTimeMs: '1000',
            cTplV: 4,
            cTplB: 'cf',
            cRq: {
                ru: 'aHR0cHM6Ly9jaGF0Lm9wZW5haS5jb20vY2hhdC9iYWNrZW5kL2FwaS9jb252ZXJzYXRpb24=',
                ra: 'TW96aWxsYS81LjAgKE1hY2ludG9zaDsgSW50ZWwgTWFjIE9TIFggMTBfMTVfNykgQXBwbGVXZWJLaXQvNjA1LjEuMTUgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzE2LjEgU2FmYXJpLzYwNS4xLjE1',
                rm: 'UE9TVA==',
                d: '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',
                t: 'MTY3MDc5Mzc1Ny42MjIwMDA=',
                m: 'JYAnf3PS+WX73G1UQSlhiMS5r3bO3ey37+R/WqGQcYk=',
                i1: '9F4vHJ1SM6rvnvKw6ty1Tw==',
                i2: '0x/akdpzCdU53kKtsyOkyQ==',
                zh: 'iuyN59AGNgeBFFEOPj72EN+xtBfXXvoCyd1dJnIVFAc=',
                uh: 'cm2wjUr6M+ZSWJGGpQRwl8TWzcHP0274MxfQYzAQXGE=',
                hh: 'foaWmAUHGGlVCZaNUJIHhxzxFNzSPNnVe6rJjiQw728=',
            }
        };
        var trkjs = document.createElement('img');
        trkjs.setAttribute('src', '/cdn-cgi/images/trace/managed/js/transparent.gif?ray=778146d9086aa038');
        trkjs.setAttribute('style', 'display: none');
        document.body.appendChild(trkjs);
        var cpo = document.createElement('script');
        cpo.src = '/cdn-cgi/challenge-platform/h/b/orchestrate/managed/v1?ray=778146d9086aa038';
        window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;
        window._cf_chl_opt.cOgUQuery = location.search === '' && location.href.slice(0, -window._cf_chl_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : location.search;
        if (window.history && window.history.replaceState) {
            var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;
            history.replaceState(null, null, "\/backend-api\/conversation?__cf_chl_rt_tk=5osx61Z15lrKove7nv2fNVz7jbjvVRc1h.BQiQRx39Q-1670793757-0-gaNycGzNDqU" + window._cf_chl_opt.cOgUHash);
            cpo.onload = function() {
                history.replaceState(null, null, ogU);
            };
        }
        document.getElementsByTagName('head')[0].appendChild(cpo);
    }());
</script>


    <div class="footer" role="contentinfo">
        <div class="footer-inner">
            <div class="clearfix diagnostic-wrapper">
                <div class="ray-id">Ray ID: <code>778146d9086aa038</code></div>
            </div>
            <div class="text-center">Performance &amp; security by <a rel="noopener noreferrer" href="https://www.cloudflare.com?utm_source=challenge&utm_campaign=m" target="_blank">Cloudflare</a></div>
        </div>
    </div>
</body>
</html>

Provide information on each section, or your issue will be closed.

@MirrorCY MirrorCY added the bug Something isn't working label Dec 11, 2022
@MirrorCY
Copy link
Author

Just found that the same process is required on the web page.

@sawyer
Copy link

sawyer commented Dec 11, 2022

Same issue, just started ~30 mins ago. Happens with or without VPN.

I cannot refresh my token through the client, fails on Step 1, but if I fetch a token manually from the website I can get this response:

[Status Code] 403 | [Response Text]
<!DOCTYPE html>
<html lang="en-US">

<head>
	<title>Just a moment...</title>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
	<meta http-equiv="X-UA-Compatible" content="IE=Edge">
	<meta name="robots" content="noindex,nofollow">
	<meta name="viewport" content="width=device-width,initial-scale=1">
	<link href="/cdn-cgi/styles/challenges.css" rel="stylesheet">
</head>

<body class="no-js">
	<div class="main-wrapper" role="main">
		<div class="main-content">
			<h1 class="zone-name-title h1">
				<img class="heading-favicon" src="/favicon.ico"                 onerror="this.onerror=null;this.parentNode.removeChild(this)">            chat.openai.com        </h1>
				<h2 class="h2" id="challenge-running"> Checking if the site connection is secure </h2> <noscript>
					<div id="challenge-error-title">
						<div class="h2">
							<span class="icon-wrapper">                        <div class="heading-icon warning-icon"></div>                    </span>
							<span id="challenge-error-text">                        Enable JavaScript and cookies to continue                    </span>
						</div>
					</div>
				</noscript>
				<div id="trk_jschal_js"
					style="display:none;background-image:url('/cdn-cgi/images/trace/managed/nojs/transparent.gif?ray=77816ab23d72c3b4')">
				</div>
				<div id="challenge-body-text" class="core-msg spacer"> chat.openai.com needs to review the security of
					your connection before proceeding. </div>
				<form id="challenge-form"
					action="/backend-api/conversation?__cf_chl_f_tk=bp77mutGygO6bCr69rOZ0GlFS2RH_QfwPpBl2hSBq8s-1670795225-0-gaNycGzND2U"
					method="POST" enctype="application/x-www-form-urlencoded"> <input type="hidden" name="md" value="ahy6yLwpGUmKi4qHf1QbmuMhtQ2AINSRgVOXLTeJveo-1670795225-0-AXCJw4GN2pWSYuMWV3vuva9pkxIY7afQuIsBhdDCR4fCgrLqT3WNZRN8Kut3aUck0bKREVonm1RdjwiwoA83wsk5bVHAk6YZwClsgBsHKrzkC6qhG6iKnvQ6Mu0ZfVvX2z0bJbwoqhGP1NmyDWzOHRisU5N3IvK61MApgbi_jcKgzykRSxaRaXvFnBSrpkwZVgvEtD-PIw18byRQSF3ePvYvwy8B7p3QWkYW849sOCnWaonKTOip2Ym9ufVnlGDCAZt8bTC5fenB6Wj21QRLqWhsbcubQgITvM9NpfcnIQUBdI0yydc2ucyDX0ME4p2DYrgNfMoD-K1kig6N878tmvKY9KtQ9qlNgR3C_S5gs8op5Th12xJuVrSHT8cQA4VboCbvqh_eiWOjYBptHR45SUzDDSOHvHxI2pbgkjPzA6q0Zeks8YTGi7RfWIT9N3MQPLX7Hmu6yfePi7BosPCFYuWcP-QUC_0732sjXl9q6RZN3zJNYSHJ4sUc5F9SRUbmD3t9XF7nJOaLuapmSsfa3JaqbaJXUp95H_Pb5k-oGdiG283RaHlBIbdWm_lhUj9HqgW2VzFeRwW0y32WpXQ6uBhhRBU0IBbjEnzAWNVEhzCtXYa8GLYwBZ98w9UdiAiXOs_F4hxHBPJbVgCCeAZS9S9PBUj5qlUqnBAoHApkNUv1ohZqf4_w5VzHxJwdgqln7XmIxCjk4n3-6n2zlHHC_uk">
					<input type="hidden" name="r" value="yNKnv8D3IT3OAVbXDWakMmwACmpxx4_fF9866rdTfcw-1670795225-0-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">        </form>
		</div>
	</div>
	<script>
		(function(){        window._cf_chl_opt={            cvId: '2',            cType: 'managed',            cNounce: '99028',            cRay: '77816ab23d72c3b4',            cHash: '806cd18d42624ef',            cUPMDTk: "/backend-api/conversation?__cf_chl_tk=bp77mutGygO6bCr69rOZ0GlFS2RH_QfwPpBl2hSBq8s-1670795225-0-gaNycGzND2U",            cFPWv: 'b',            cTTimeMs: '1000',            cTplV: 4,            cTplB: 'cf',            cRq: {                ru: 'aHR0cHM6Ly9jaGF0Lm9wZW5haS5jb20vY2hhdC9iYWNrZW5kL2FwaS9jb252ZXJzYXRpb24=',                ra: 'TW96aWxsYS81LjAgKE1hY2ludG9zaDsgSW50ZWwgTWFjIE9TIFggMTBfMTVfNykgQXBwbGVXZWJLaXQvNjA1LjEuMTUgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzE2LjEgU2FmYXJpLzYwNS4xLjE1',                rm: 'UE9TVA==',                d: '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',                t: 'MTY3MDc5NTIyNS45NjMwMDA=',                m: 'OQsDQmlbEei4fvDhyByxjXTRXA8HbJ3kHQOaqBnulHk=',                i1: 'TOjjVWq6sBPRzgqb3xbr+A==',                i2: '24sD2VVTzFf0kuRm+Y0bCg==',                zh: 'iuyN59AGNgeBFFEOPj72EN+xtBfXXvoCyd1dJnIVFAc=',                uh: 'cm2wjUr6M+ZSWJGGpQRwl8TWzcHP0274MxfQYzAQXGE=',                hh: 'foaWmAUHGGlVCZaNUJIHhxzxFNzSPNnVe6rJjiQw728=',            }        };        var trkjs = document.createElement('img');        trkjs.setAttribute('src', '/cdn-cgi/images/trace/managed/js/transparent.gif?ray=77816ab23d72c3b4');        trkjs.setAttribute('style', 'display: none');        document.body.appendChild(trkjs);        var cpo = document.createElement('script');        cpo.src = '/cdn-cgi/challenge-platform/h/b/orchestrate/managed/v1?ray=77816ab23d72c3b4';        window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;        window._cf_chl_opt.cOgUQuery = location.search === '' && location.href.slice(0, -window._cf_chl_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : location.search;        if (window.history && window.history.replaceState) {            var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;            history.replaceState(null, null, "/backend-api/conversation?__cf_chl_rt_tk=bp77mutGygO6bCr69rOZ0GlFS2RH_QfwPpBl2hSBq8s-1670795225-0-gaNycGzND2U" + window._cf_chl_opt.cOgUHash);            cpo.onload = function() {                history.replaceState(null, null, ogU);            };        }        document.getElementsByTagName('head')[0].appendChild(cpo);    }());
	</script>
	<div class="footer" role="contentinfo">
		<div class="footer-inner">
			<div class="clearfix diagnostic-wrapper">
				<div class="ray-id">Ray ID: <code>77816ab23d72c3b4</code></div>
			</div>
			<div class="text-center">Performance &amp; security by <a rel="noopener noreferrer"
					href="https://www.cloudflare.com?utm_source=challenge&utm_campaign=m" target="_blank">Cloudflare</a>
			</div>
		</div>
	</div>
</body>

</html>

@altryne
Copy link

altryne commented Dec 11, 2022

This also happens from incognito

CleanShot 2022-12-11 at 14 59 39

@Cubicpath
Copy link

Cubicpath commented Dec 11, 2022

It's to do with and their (new) cloudflare hCaptcha implementation. Once you pass the security check, the browser stores a cf_clearance cookie which has a 1-year expiration. If this cookie is missing, even if you have a valid session/access token you will need to pass the security check again before accessing the website.

@cesarhuret
Copy link

This also happens from incognito

CleanShot 2022-12-11 at 14 59 39

What browser is that lol

@gerrywastaken
Copy link

Here's some more info on their cookies:
https://www.cloudflare.com/cookie-policy/#strictly-necessary-cookies

There is a _cf_bm cookie that is specifically to prevent bots.

I wish openAI would just add an option to pay for an API so we could just stop the arms race. :D

@sawyer
Copy link

sawyer commented Dec 12, 2022

I couldn't beat the CF challenge but this fork allows you to pass the required cookies and user-agent as Options: https://github.com/sawyer/PyChatGPT

@acheong08
Copy link

Tracking here: acheong08/ChatGPT#261

cf_clearance cookie supported

@as882301
Copy link

I had the same problem

@nistvan86
Copy link

nistvan86 commented Dec 12, 2022

I couldn't beat the CF challenge but this fork allows you to pass the required cookies and user-agent as Options: https://github.com/sawyer/PyChatGPT

Your fork doesn't seem to work for me. Part 3 of auth flow fails with HTTP 400 Cloudflare error. I've only added the extra 3 parameters to Options, previously my code was working fine. I've tried multiple times to extract the cf extra attributes, even with different browsers.

@acheong08
Copy link

Email/Password authentication no longer supported. Using session tokens now

@nistvan86
Copy link

Email/Password authentication no longer supported. Using session tokens now

I've tried that as well, but it wasn't successful either, maybe I'm not initializing correctly (email/password is not an optional parameter in Auth).

def __reset_thread(self):
    cfg = get_app_config()

    options = Options()
    options.logs = False
    options.track = False
    options.cf_bm = cfg.chatgpt_cf_bm
    options.cf_clearance = cfg.chatgpt_cf_clearance
    options.user_agent = cfg.chatgpt_user_agent
    options.token_path = f"out/{cfg.chatgpt_email}_token.json"

    OpenAI.Auth(
        email_address=cfg.chatgpt_email,
        password=cfg.chatgpt_password,
        token_path=options.token_path,
        cf_clearance=cfg.chatgpt_cf_clearance,
        cf_bm=cfg.chatgpt_cf_bm,
        user_agent=cfg.chatgpt_user_agent
    ).save_access_token(access_token=cfg.chatgpt_session_token, path=options.token_path)

    self.chat = Chat(email=cfg.chatgpt_email,
                     password=cfg.chatgpt_password,
                     options=options)

I've captured the last XHR call in the browser, then used the Cookies in the response. Access token is from __Secure-next-auth.session-token.

When I first try to ask something from the bot I get HTTP 401 "Could not parse your authentication token. Please try signing in again.".

Wish we could just have an official API instead of relying on hacks :(

@acheong08
Copy link

@nistvan86 This hasn't been fixed by here yet. You can check out https://github.com/acheong08/ChatGPT/blob/cloudflare/wiki/Setup.md while you wait

@acheong08
Copy link

Wish we could just have an official API instead of relying on hacks :(

Me too. I hate maintaining the hacks when they actively try to sabotage us

@nistvan86
Copy link

@nistvan86 This hasn't been fixed by here yet. You can check out https://github.com/acheong08/ChatGPT/blob/cloudflare/wiki/Setup.md while you wait

Yeah, but I was trying the fork of @sawyer which supposed to work with the extra cf attributes.
If I understood correctly your lib branch needs an actual browser to do it's job. I don't want to do that (it's not even easy for me to setup that from a vscode devcontainer). I'd rather wait for something headless solution to show up.
But thanks anyway!

Me too. I hate maintaining the hacks when they actively try to sabotage us

I don't blame them though. This thing is a money sink to operate.
I'm only trying to use these libraries for my private experiments and with reasonable delays added between prompts to be fair. I would never even dare to use them in something more serious.
But I would gladly pay for an official API.

@acheong08
Copy link

If I understood correctly your lib branch needs an actual browser to do it's job

The main branch doesn't https://github.com/acheong08/ChatGPT/blob/main/wiki/Setup.md which is https://github.com/acheong08/ChatGPT/releases/tag/0.0.38.8

But I would gladly pay for an official API.

Same here. I would pay extravagant prices for their services, even if it's not an API.

@acheong08
Copy link

When I first try to ask something from the bot I get HTTP 401 "Could not parse your authentication token. Please try signing in again.".

Two possible reasons:

  1. Different user agent (they should be the same as your browser)
  2. Different IP address. You have to run locally or use your server as a VPN

@Pengchengistaken
Copy link

Pengchengistaken commented Dec 13, 2022

CF is killing all bots..
is there plan to maintain it?

@rawandahmad698
Copy link
Owner

Yes. Theres.

@YitziG
Copy link

YitziG commented Dec 13, 2022

This also happens from incognito
CleanShot 2022-12-11 at 14 59 39

    [
      
        ![CleanShot 2022-12-11 at 14 59 39](https://user-images.githubusercontent.com/463317/206931347-6e478936-e87e-4e23-b7f7-f3d2030ddf8f.gif)
      
    ](https://user-images.githubusercontent.com/463317/206931347-6e478936-e87e-4e23-b7f7-f3d2030ddf8f.gif)
    
    
      
        
          
        
        
          
          
        
      
      [
        
          
        
      ](https://user-images.githubusercontent.com/463317/206931347-6e478936-e87e-4e23-b7f7-f3d2030ddf8f.gif)

What browser is that lol

looks like Arc

@rawandahmad698
Copy link
Owner

Already bypassed the new CF update. Just need to wait a bit more. Join the discussion:
https://discord.gg/kf5ubS55GS

@Pengchengistaken
Copy link

still 1.0.8 in change log, not rleased yet?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests