微博模拟登陆

public static final String URL_PRE_LOGIN = "https://login.sina.com.cn/sso/prelogin.php";
public static final String URL_LOGIN = "https://login.sina.com.cn/sso/login.php";

/**
 * 预登陆
 *
 * @return
 * @throws Exception
 */
public Map<String, String> preLogin() throws Exception {
    HashMap<String, String> params = new HashMap<String, String>();
    params.put("entry", "weibo");
    // jsonp的函数名
    params.put("callback", "sinaSSOController.preloginCallBack");
    params.put("rsakt", "mod");
    params.put("checkpin", "1");
    params.put("client", "ssologin.js(v1.4.19)");
    params.put("_", String.valueOf(System.currentTimeMillis()));
    // 对用户名先URLEncoder编码再进行Base64编码
    params.put("su", this.encodeUserName(this.getUserName()));

    RequestBuilder request = Requests.get(URL_PRE_LOGIN);
    request.params(params);
    RawResponse resp = request.send();

    String respBody = resp.readToText();
    // 去除最层jsonp函数名，得到json串
    respBody = respBody.substring(params.get("callback").length() + 1, respBody.length() - 1);
    Map<String, String> result = JSONObject.parseObject(respBody, new TypeReference<Map<String, String>>() {
    });
    if (!"0".equals(result.get("retcode"))) {
        throw new Exception("预登陆失败：" + JsonKit.toJson(result));
    }
    return result;
}

/**
 * 对密码进行加密
 * RSA算法原因，每次结果不一样，是正常的，同样的参数和抓包的不一样是正常的
 * 加密过程可以看https://login.sina.com.cn/signup/signin.php中的ssologin.js
 *
 * @param servertime
 * @param nonce
 * @param password
 * @param pubKey
 * @return
 * @throws Exception
 */
public String encodePwd(String servertime, String nonce, String password, String pubKey) throws Exception {
    // ssologin.js 822行
    String toEncode = servertime + "\t" + nonce + "\n" + password;
    KeyFactory keyFactory = KeyFactory.getInstance("RSA");
    BigInteger modulus = new BigInteger(pubKey, 16);
    BigInteger publicExponent = new BigInteger("10001", 16);
    RSAPublicKeySpec rsaPublicKeySpec = new RSAPublicKeySpec(modulus, publicExponent);
    PublicKey publicKey = keyFactory.generatePublic(rsaPublicKeySpec);
    Cipher cipher = Cipher.getInstance("RSA");
    cipher.init(Cipher.ENCRYPT_MODE, publicKey);
    byte[] encodeStr = cipher.doFinal(toEncode.getBytes());
    return HashKit.toHex(encodeStr);
}

/**
 * 登陆
 * @param body,预登陆得到的json
 * @return
 * @throws Exception
 */
public Map<?, ?> login(Map<String, String> body) throws Exception {
    // Url parm
    body.put("client", "ssologin.js(v1.4.11)");
    body.put("_", String.valueOf(System.currentTimeMillis()));

    // Form body
    body.put("entry", "weibo");
    body.put("gateway", "1");
    body.put("from", "");
    body.put("savestate", "7");
    body.put("qrcode_flag", "false");
    body.put("useticket", "1");
    body.put("pagerefer", "");
    body.put("vsnf", "1");
    body.put("service", "miniblog");
    body.put("pwencode", "rsa2");
    body.put("sr", "1366*768");
    body.put("domain", "weibo.com");
    body.put("cdult", "2");
    // 设为TEXT会返回json格式数据
    body.put("returntype", "TEXT");
    // 对用户名先URLEncoder编码再进行Base64编码
    body.put("su", this.encodeUserName(this.getUserName()));
    // 密码加密
    body.put("sp", this.encodePwd(body.get("servertime"), body.get("nonce"), this.getPassword(), body.get("pubkey")));
    body.put("encoding", "UTF-8");
    // 100-1000的一个随机数
    body.put("prelt", String.valueOf(new Random().nextInt(900) + 100));

    RequestBuilder request = Requests.post(URL_LOGIN);
    request.body(body);
    RawResponse resp = request.send();

    // 收集Cookie，很重要！！！！
    this.addCookies(resp.getCookies());

    Map<?, ?> result = JSONObject.parseObject(resp.readToText(), Map.class);
    if (!"0".equals(result.get("retcode").toString())) {
        throw new Exception("登陆失败：" + result.get("reason").toString());
    }
    return result;
}

StringBuilder sb = new StringBuilder();
for (String name : this.cookies.keySet()) {
    sb.append(name).append("=").append(this.cookies.get(name));
    sb.append("; ");
}
return sb.substring(0, sb.length() - 1);

// 直接放到请求头
headers.put("Cookie", this.getCookiesStr());