QQ音乐的歌曲真实地址解析

ゝ一世哀愁。 2021-10-30 08:20 2815阅读 0赞

以QQ音乐的单曲页面URL [https://y.qq.com/n/yqq/song/000YU69H3N55rZ.html][https_y.qq.com_n_yqq_song_000YU69H3N55rZ.html] 为例，说明如何解析得到真实的音频地址。

打开该页面地址，是这样的：

![3479982-b58dffc10000b035.png][]

梦一场 - 那英 - QQ音乐

点击页面中的播放按钮，会在新页面的播放器里播放该音乐。在新页面中打开开发者工具的网络探测，重新刷新页面，会发现相关请求如下：

https://c.y.qq.com/base/fcgi-bin/fcg_music_express_mobile3.fcg?g_tk=5381&jsonpCallback=MusicJsonCallback39355320624659207&loginUin=0&hostUin=0&format=json&inCharset=utf8&outCharset=utf-8&notice=0&platform=yqq&needNewCode=0&cid=205361747&callback=MusicJsonCallback39355320624659207&uin=0&songmid=000YU69H3N55rZ&filename=C400000YU69H3N55rZ.m4a&guid=328569683
    
    http://dl.stream.qqmusic.qq.com/C400000YU69H3N55rZ.m4a?vkey=927C721D272189FED484EF874A8D646C6B13C20C53277FB99D496DA6804CDF1B64C33A4F049D24FFC4366605DB4755A6E9AB632AA770C09A&guid=328569683&uin=0&fromtag=66

其中，第二个请求就是音频的真实地址，该地址中主要有如下几个部分：

*  文件名：C400000YU69H3N55rZ.m4a
 *  vkey参数：927C721D272189FED484EF874A8D646C6B13C20C53277FB99D496DA6804CDF1B64C33A4F049D24FFC4366605DB4755A6E9AB632AA770C09A
 *  guid参数：328569683
 *  uin参数：0
 *  fromtag参数：66

第一个请求的响应如下：

MusicJsonCallback39355320624659207({"code":0,"cid":205361747,"data":{"expiration":80400,"items":[{"subcode":0,"songmid":"000YU69H3N55rZ","filename":"C400000YU69H3N55rZ.m4a","vkey":"927C721D272189FED484EF874A8D646C6B13C20C53277FB99D496DA6804CDF1B64C33A4F049D24FFC4366605DB4755A6E9AB632AA770C09A"}]}})

我们发现，vkey参数值就在上述响应内容里面。songmid的值正好出现在单曲页面URL里面，通过字符串拼接可以得到文件名："C400" + songmid + ".m4a"

只有文件名和vkey是不够的，还需要知道guid参数值是如何得来的，没有guid参数的话请求音频真实地址会返回响应码403。

在js文件 [https://y.gtimg.cn/music/portal/js/common/pkg/player\_module\_b5739d0.js][https_y.gtimg.cn_music_portal_js_common_pkg_player_module_b5739d0.js] 中，搜索 fcg\_music\_express\_mobile3 可找到如下jsonp请求代码：

r.length > 0 ? MUSIC.jQueryAjax.jsonp({
                url: location.protocol + "//c.y.qq.com/base/fcgi-bin/fcg_music_express_mobile3.fcg",
                data: {
                    cid: 205361747,
                    format: "json",
                    callback: a,
                    uin: g_user.getUin(),
                    songmid: r.join(","),
                    filename: n.join(","),
                    guid: _getGuid()
                },
                ...
            }) : t && t()

这段js代码正好写明了请求参数有哪些，guid是通过调用 \_getGuid 得到的。\_getGuid 方法的代码如下：

function _getGuid() {
            if (_guid.length > 0)
                return _guid;
            var e = MUSIC.cookie.get("pgv_pvid");
            if (e && e.length > 0)
                return _guid = e;
            var t = (new Date).getUTCMilliseconds();
            return _guid = Math.round(2147483647 * Math.random()) * t % 1e10,
            document.cookie = "pgv_pvid=" + _guid + "; Expires=Sun, 18 Jan 2038 00:00:00 GMT; PATH=/; DOMAIN=qq.com;",
            _guid
        }

由此可见，guid的核心构造代码是如下两行：

var t = (new Date).getUTCMilliseconds()
    _guid = Math.round(2147483647 * Math.random()) * t % 1e10

## Python代码示例 ##

import re
    import json
    import time
    import random
    import requests
    
    def resolve(url):
        """
        resolve audio url
        :param url: like 'https://y.qq.com/n/yqq/song/000YU69H3N55rZ.html'
        :return:
        """
        songmid = re.search('/(\w+).html$', url).groups()[0]
        filename = 'C400' + songmid + '.m4a'
        guid = int(random.random() * 2147483647) * int(time.time() * 1000) % 10000000000
    
        d = {
            'format': 'json',
            'cid': 205361747,
            'uin': 0,
            'songmid': songmid,
            'filename': filename,
            'guid': guid,
        }
        r = requests.get('https://c.y.qq.com/base/fcgi-bin/fcg_music_express_mobile3.fcg', params=d, verify=False)
        vkey = json.loads(r.content)['data']['items'][0]['vkey']
        audio_url = 'http://dl.stream.qqmusic.qq.com/%s?vkey=%s&guid=%s&uin=0&fromtag=66' % (filename, vkey, guid)
        return audio_url

[https_y.qq.com_n_yqq_song_000YU69H3N55rZ.html]: https://link.jianshu.com?t=https://y.qq.com/n/yqq/song/000YU69H3N55rZ.html
[3479982-b58dffc10000b035.png]: /images/20211029/829b2a267287492babb0d2713d2aa1f8.png
[https_y.gtimg.cn_music_portal_js_common_pkg_player_module_b5739d0.js]: https://link.jianshu.com?t=https://y.gtimg.cn/music/portal/js/common/pkg/player_module_b5739d0.js