Java利用MSNP协议取得MSN联系人

上一篇文章中介绍了怎样利用MSNP登录MSN，在登录后便可取联系人了，很简单。

 

参考文章：

http://msnpiki.msnfanatic.com/index.php/MSNP13:Contact_List

http://msnpiki.msnfanatic.com/index.php/MSNP15:TicketTokens

 

在登录后，可以得到一个contacts.msn.com的ticketToken，这可用于后续的验证

一种方法是加入一个MSPAuth的cookie值为ticketToken，另一种是在SOAP请求的<ABAuthHeader xmlns="http://www.msn.com/webservices/AddressBook">中加入<TicketToken>t=RwyZZAkmFsHiK+GCv...&p=</TicketToken>

发送的SOAP请求如下：

 POST /abservice/abservice.asmx HTTP/1.1SOAPAction: http://www.msn.com/webservices/AddressBook/ABFindAllContent-Type: text/xml; charset=utf-8Cookie: MSPAuth=RemovedHost: contacts.msn.comContent-Length: Variable<?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"><soap:Header><ABApplicationHeader xmlns="http://www.msn.com/webservices/AddressBook"><ApplicationId>CFE80F9D-180F-4399-82AB-413F33A1FA11</ApplicationId><IsMigration>false</IsMigration><PartnerScenario>Initial</PartnerScenario></ABApplicationHeader><ABAuthHeader xmlns="http://www.msn.com/webservices/AddressBook"><ManagedGroupRequest>false</ManagedGroupRequest></ABAuthHeader></soap:Header><soap:Body><ABFindAll xmlns="http://www.msn.com/webservices/AddressBook"><abId>00000000-0000-0000-0000-000000000000</abId><abView>Full</abView><deltasOnly>true</deltasOnly><lastChange>0001-01-01T00:00:00.0000000-08:00</lastChange></ABFindAll></soap:Body></soap:Envelope>

回复的XML包括了联系人信息：

HTTP/1.1 200 OKDate: Fri, 11 Nov 2005 23:55:09 GMTServer: Microsoft-IIS/6.0P3P:CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"Cache-Control: private, max-age=0Content-Type: text/xml; charset=utf-8Content-Length: 2207<?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <soap:Header> <ServiceHeader xmlns="http://www.msn.com/webservices/AddressBook"> <Version>11.01.0922.0000</Version> </ServiceHeader> </soap:Header> <soap:Body> <ABFindAllResponse xmlns="http://www.msn.com/webservices/AddressBook"> <ABFindAllResult> <contacts> <Contact> <contactId> Removed </contactId> <contactInfo> <annotations> <Annotation> <Name>MSN.IM.MBEA</Name> <Value>0</Value> </Annotation> <Annotation> <Name>MSN.IM.GTC</Name> <Value>1</Value> </Annotation> <Annotation> <Name>MSN.IM.BLP</Name> <Value>0</Value> </Annotation> </annotations> <contactType>Me</contactType> <quickName>Q</quickName> <passportName> Removed </passportName> <IsPassportNameHidden>false</IsPassportNameHidden> <displayName>Inky | Hello, World from WLM</displayName> <puid>0</puid> <CID>0</CID> <IsNotMobileVisible>false</IsNotMobileVisible> <isMobileIMEnabled>false</isMobileIMEnabled> <isMessengerUser>false</isMessengerUser> <isFavorite>false</isFavorite> <isSmtp>false</isSmtp> <hasSpace>true</hasSpace> <spotWatchState>NoDevice</spotWatchState> <birthdate>0001-01-01T00:00:00.0000000-08:00</birthdate> <primaryEmailType>ContactEmailPersonal</primaryEmailType> <PrimaryLocation>ContactLocationPersonal</PrimaryLocation> <PrimaryPhone>ContactPhonePersonal</PrimaryPhone> <IsPrivate>false</IsPrivate> <Gender>Unspecified</Gender> <TimeZone>None</TimeZone> </contactInfo> <propertiesChanged /> <fDeleted>false</fDeleted> <lastChange>2005-11-11T15:55:03.2600000-08:00</lastChange> </Contact> </contacts> <ab> <abId>00000000-0000-0000-0000-000000000000</abId> <abInfo> <ownerPuid>0</ownerPuid> <OwnerCID>0</OwnerCID> <ownerEmail> Removed </ownerEmail> <fDefault>true</fDefault> <joinedNamespace>false</joinedNamespace> </abInfo> <lastChange>2005-11-11T15:55:03.2600000-08:00</lastChange> <DynamicItemLastChanged>2005-11-09T09:16:56.2970000-08:00</DynamicItemLastChanged> <createDate>2003-07-14T15:46:20.6500000-07:00</createDate> <propertiesChanged /> </ab> </ABFindAllResult> </ABFindAllResponse> </soap:Body></soap:Envelope>

代码如下：

private void getContacts(NonBlockTelnetClient client) { StringBuilder xml = new StringBuilder(); xml.append("<?xml version=/"1.0/" encoding=/"utf-8/"?>"); xml.append("<soap:Envelope xmlns:soap=/"http://schemas.xmlsoap.org/soap/envelope//" xmlns:xsi=/"http://www.w3.org/2001/XMLSchema-instance/" xmlns:xsd=/"http://www.w3.org/2001/XMLSchema/" xmlns:soapenc=/"http://schemas.xmlsoap.org/soap/encoding//">"); xml.append("<soap:Header>"); xml.append("<ABApplicationHeader xmlns=/"http://www.msn.com/webservices/AddressBook/">"); xml.append("<ApplicationId>CFE80F9D-180F-4399-82AB-413F33A1FA11</ApplicationId>"); xml.append("<IsMigration>false</IsMigration>"); xml.append("<PartnerScenario>Initial</PartnerScenario>"); xml.append("</ABApplicationHeader>"); xml.append("<ABAuthHeader xmlns=/"http://www.msn.com/webservices/AddressBook/">"); xml.append("<ManagedGroupRequest>false</ManagedGroupRequest>"); xml.append("<TicketToken>" + ticketToken + "</TicketToken>"); xml.append("</ABAuthHeader>"); xml.append("</soap:Header>"); xml.append("<soap:Body>"); xml.append("<ABFindAll xmlns=/"http://www.msn.com/webservices/AddressBook/">"); xml.append("<abId>00000000-0000-0000-0000-000000000000</abId>"); xml.append("<abView>Full</abView>"); xml.append("<deltasOnly>false</deltasOnly>"); xml.append("<lastChange>0001-01-01T00:00:00.0000000-08:00</lastChange>"); xml.append("</ABFindAll>"); xml.append("</soap:Body>"); xml.append("</soap:Envelope>"); System.out.println("xml=" + xml.toString()); HttpBrowser browser = new HttpBrowser(); try { NameValuePair[] headers = new NameValuePair[] { new NameValuePair("SOAPAction", "http://www.msn.com/webservices/AddressBook/ABFindAll"), new NameValuePair("Content-Type", "text/xml; charset=utf-8"), new NameValuePair("Cookie", "MSPAuth=Removed"), new NameValuePair("Host", "contacts.msn.com") }; HttpResponse resp = browser.doPost("https://contacts.msn.com/abservice/abservice.asmx", xml.toString(), headers); System.out.println("AB Resp=" + resp.getBodyAsString()); parseContacts(resp.getBodyAsString()); } catch (Exception e) { e.printStackTrace(); } }

注意：

（1）这里的ticketToken要用contacts.msn.com的ticketToken，否则会报HTTP500错

（2）另外可能的错误是Need to do full sync. Can't sync deltas Client has too old a copy for us to do a delta sync，这是因为

xml += "<adr:deltasOnly>true</adr:deltasOnly>";
xml += "<adr:lastChange>0001-01-01T00:00:00.0000000-08:00</adr:lastChange>";
应写为
xml += "<adr:deltasOnly>false</adr:deltasOnly>";
xml += "<adr:lastChange>0001-01-01T00:00:00.0000000-08:00</adr:lastChange>";

（3）http 400 bad request：因为xml中有&,应用&amp;代换

（4）soap http 415(Unsupported Media Type)，这是因为http请求头上设置的Content-Type的类型服务器不接受。比如：在请求中设置了Content-Type：application/x-www-form-urlencoded，而服务器只接受Content-Type：text/xml，就会出现这种错误。

 

完整的代码如下：

public class TestMsn { private String username; private String password; private String dsHost = "64.4.9.254";//ds host private String nsHost;//ns host private int port = 1863;//port private int trId = 1;//命令序列号 private String ticketToken; public TestMsn(String username, String password) { this.username = username; this.password = password; } private String getMSNCommand(String cmd, String ... args) { StringBuilder sb = new StringBuilder(); sb.append(cmd).append(' '); sb.append(trId++).append(' '); for (int i = 0; i < args.length; i++) { if (i < args.length - 1) { sb.append(args[i]).append(' '); } else { sb.append(args[i]); } } sb.append("/r/n"); return sb.toString(); } private String getTicket(String policy, String nonce) { // create the xml for the SOAP request StringBuilder xml = new StringBuilder(); xml.append("<?xml version=/"1.0/" encoding=/"UTF-8/"?>"); xml.append("<Envelope xmlns=/"http://schemas.xmlsoap.org/soap/envelope//" xmlns:wsse=/"http://schemas.xmlsoap.org/ws/2003/06/secext/" xmlns:saml=/"urn:oasis:names:tc:SAML:1.0:assertion/" xmlns:wsp=/"http://schemas.xmlsoap.org/ws/2002/12/policy/" xmlns:wsu=/"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd/" xmlns:wsa=/"http://schemas.xmlsoap.org/ws/2004/03/addressing/" xmlns:wssc=/"http://schemas.xmlsoap.org/ws/2004/04/sc/" xmlns:wst=/"http://schemas.xmlsoap.org/ws/2004/04/trust/"><Header>"); xml.append("<ps:AuthInfo xmlns:ps=/"http://schemas.microsoft.com/Passport/SoapServices/PPCRL/" Id=/"PPAuthInfo/">"); xml.append("<ps:HostingApp>{7108E71A-9926-4FCB-BCC9-9A9D3F32E423}</ps:HostingApp>"); xml.append("<ps:BinaryVersion>4</ps:BinaryVersion>"); xml.append("<ps:UIVersion>1</ps:UIVersion>"); xml.append("<ps:Cookies></ps:Cookies>"); xml.append("<ps:RequestParams>AQAAAAIAAABsYwQAAAAxMDMz</ps:RequestParams>"); xml.append("</ps:AuthInfo>"); xml.append("<wsse:Security><wsse:UsernameToken Id=/"user/">"); xml.append("<wsse:Username>" + username + "</wsse:Username>"); xml.append("<wsse:Password>" + password + "</wsse:Password>"); xml.append("</wsse:UsernameToken></wsse:Security></Header><Body>"); xml.append("<ps:RequestMultipleSecurityTokens xmlns:ps=/"http://schemas.microsoft.com/Passport/SoapServices/PPCRL/" Id=/"RSTS/">"); xml.append("<wst:RequestSecurityToken Id=/"RST0/">"); xml.append("<wst:RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</wst:RequestType>"); xml.append("<wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb"); xml.append("</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken>"); xml.append("<wst:RequestSecurityToken Id=/"RST1/">"); xml.append("<wst:RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference>"); xml.append("<wsa:Address>messengerclear.live.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo>"); xml.append("<wsse:PolicyReference URI=/"" + policy + "/"></wsse:PolicyReference></wst:RequestSecurityToken>"); xml.append("<wst:RequestSecurityToken Id=/"RST2/">"); xml.append("<wst:RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</wst:RequestType>"); xml.append("<wsp:AppliesTo>"); xml.append("<wsa:EndpointReference>"); xml.append("<wsa:Address>contacts.msn.com</wsa:Address>"); xml.append("</wsa:EndpointReference>"); xml.append("</wsp:AppliesTo>"); xml.append("<wsse:PolicyReference URI=/"MBI/">"); xml.append("</wsse:PolicyReference>"); xml.append("</wst:RequestSecurityToken>"); xml.append("</ps:RequestMultipleSecurityTokens></Body></Envelope>"); // create a new SOAP request with the xml HttpBrowser browser = new HttpBrowser(); try { HttpResponse resp = browser.doPost("https://login.live.com/RST.srf", xml.toString()); String respXml = resp.getBodyAsString(); System.out.println("soap resp=" + respXml); int idx1 = respXml.indexOf("<wst:BinarySecret>") + "<wst:BinarySecret>".length(); String secret = respXml.substring(idx1); int idx2 = secret.indexOf("<wst:BinarySecret>") + "<wst:BinarySecret>".length(); secret = secret.substring(idx2); int idx3 = secret.indexOf("</wst:BinarySecret>"); secret = secret.substring(0, idx3); System.out.println("secret=" + secret); int idx4 = respXml.indexOf("<wsse:BinarySecurityToken Id=/"Compact1/">") + "<wsse:BinarySecurityToken Id=/"Compact1/">".length(); String ticket1 = respXml.substring(idx4); int idx5 = ticket1.indexOf("</wsse:BinarySecurityToken>"); ticket1 = ticket1.substring(0, idx5); ticket1 = ticket1.replaceAll("&", "&"); System.out.println("ticket1=" + ticket1); int idx6 = respXml.indexOf("<wsse:BinarySecurityToken Id=/"Compact2/">") + "<wsse:BinarySecurityToken Id=/"Compact2/">".length(); String ticket2 = respXml.substring(idx6); int idx7 = ticket2.indexOf("</wsse:BinarySecurityToken>"); ticket2 = ticket2.substring(0, idx7); System.out.println("ticket2=" + ticket2); ticketToken = ticket2; String ssoTicket = getSSOTicket(secret, nonce); return ticket1 + " " + ssoTicket; } catch (Exception e) { e.printStackTrace(); } return ""; } public static String getSSOTicket(String secret, String nonce) { // fill random iv byte[] iv = new byte[8]; for (int i = 0; i < 8; i++) { byte rand = (byte) Math.floor(Math.random() * 256); iv[i] = rand; } // fill the begining of the struct byte start[] = new byte[28]; // uStructHeaderSize = 28 start[0] = 0x1c; start[1] = 0x00; start[2] = 0x00; start[3] = 0x00; // uCryptMode = 1 start[4] = 0x01; start[5] = 0x00; start[6] = 0x00; start[7] = 0x00; // uCipherType = 0x6603 start[8] = 0x03; start[9] = 0x66; start[10] = 0x00; start[11] = 0x00; // uHashType = 0x8004 start[12] = 0x04; start[13] = (byte) 0x80; start[14] = 0x00; start[15] = 0x00; // uIVLen = 8 start[16] = 0x08; start[17] = 0x00; start[18] = 0x00; start[19] = 0x00; // uHashLen = 20 start[20] = 0x14; start[21] = 0x00; start[22] = 0x00; start[23] = 0x00; // uCipherLen = 72 start[24] = 0x48; start[25] = 0x00; start[26] = 0x00; start[27] = 0x00; // generate key's byte key1[] = Base64Coder.decode(secret); byte key2[] = derive_key(key1, "WS-SecureConversationSESSION KEY HASH".getBytes()); byte key3[] = derive_key(key1, "WS-SecureConversationSESSION KEY ENCRYPTION".getBytes()); // create hash byte hash[] = HMAC(key2, nonce.getBytes()); // add 8 bytes to the nonce byte nonceFillup[] = new byte[8]; for (int i = 0; i < 8; i++) { nonceFillup[i] = 0x08; } // create des3 thingy byte des[] = DES3(key3, byteCombine(nonce.getBytes(), nonceFillup), iv); // fill struct byte struct[] = byteCombine(byteCombine(byteCombine(start, iv), hash), des); // return stuff return new String(Base64Coder.encode(struct)); } private static byte[] derive_key(byte[] key, byte[] magic) { byte hash1[] = HMAC(key, magic); byte hash2[] = HMAC(key, byteCombine(hash1, magic)); byte hash3[] = HMAC(key, hash1); byte hash4[] = HMAC(key, byteCombine(hash3, magic)); byte out[] = new byte[4]; out[0] = hash4[0]; out[1] = hash4[1]; out[2] = hash4[2]; out[3] = hash4[3]; return byteCombine(hash2, out); } private static byte[] HMAC(byte[] key, byte[] subject) { try { Mac mac = Mac.getInstance("HmacSHA1"); SecretKeySpec sk = new SecretKeySpec(key, "HmacSHA1"); mac.init(sk); return mac.doFinal(subject); } catch (NoSuchAlgorithmException ex) { ex.printStackTrace(); } catch (InvalidKeyException ex) { ex.printStackTrace(); } return null; } private static byte[] byteCombine(byte[] front, byte[] back) { byte output[] = new byte[front.length + back.length]; for (int i = 0; i < front.length; i++) { output[i] = front[i]; } for (int i = 0; i < back.length; i++) { output[i + front.length] = back[i]; } return output; } private static byte[] DES3(byte[] key, byte[] subject, byte[] iv) { try { Cipher cipher = Cipher.getInstance("DESede/CBC/NoPadding"); SecretKeySpec sk = new SecretKeySpec(key, "DESede"); IvParameterSpec sr = new IvParameterSpec(iv); cipher.init(Cipher.ENCRYPT_MODE, sk, sr); return cipher.doFinal(subject); } catch (Exception ex) { ex.printStackTrace(); } return null; } public int doLogin() throws HttpBrowserException, HttpServerException, ProtocolException { try { initNSHost(); NonBlockTelnetClient client = new NonBlockTelnetClient(nsHost, port); client.connect(); loginNS(client); getContacts(client); client.disconnect(); } catch (TelnetException e) { e.printStackTrace(); } return 0; } private void initNSHost() throws TelnetException { NonBlockTelnetClient client = new NonBlockTelnetClient(dsHost, port); client.connect(); String cmd = getMSNCommand("VER", "MSNP18", "CVR0"); client.sendCommand(cmd); String resp = client.getOutputByLine(); System.out.println("resp=" + resp); cmd = getMSNCommand("CVR", "0x0804", "winnt", "5.1", "i386", "MSNMSGR", "14.0.8089.0726", "msmsgs", username); client.sendCommand(cmd); resp = client.getOutputByLine(); System.out.println("resp=" + resp); cmd = getMSNCommand("USR", "SSO", "I", username); client.sendCommand(cmd); resp = client.getOutputByLine(); System.out.println("resp=" + resp); String[] tmpArr = resp.split(" "); nsHost = tmpArr[3].split(":")[0]; client.disconnect(); } private void loginNS(NonBlockTelnetClient client) throws TelnetException { String cmd = getMSNCommand("VER", "MSNP18", "CVR0"); client.sendCommand(cmd); String resp = client.getOutputByLine(); System.out.println("resp=" + resp); cmd = getMSNCommand("CVR", "0x0804", "winnt", "5.1", "i386", "MSNMSGR", "14.0.8089.0726", "msmsgs", username); client.sendCommand(cmd); resp = client.getOutputByLine(); System.out.println("resp=" + resp); cmd = getMSNCommand("USR", "SSO", "I", username); client.sendCommand(cmd); resp = client.getOutputByLine(); System.out.println("resp=" + resp); resp = client.getOutputByLine(); System.out.println("resp=" + resp); int idx = resp.indexOf("USR"); String tmp = resp.substring(idx); System.out.println("tmp=" + tmp); String[] tmpArr = tmp.split(" "); String policy = tmpArr[4]; String nonce = tmpArr[5]; System.out.println("policy=" + policy); System.out.println("nonce=" + nonce); String ticket = getTicket(policy, nonce); System.out.println("ticket=" + ticket); cmd = getMSNCommand("USR", "SSO", "S", ticket, "{691CC6CA-F23C-4E86-BB91-82965CBC5429}"); client.sendCommand(cmd); resp = client.getOutputByLine(); System.out.println("resp=" + resp); for (int i = 0; i < 20; i++) { resp = client.getOutputByLine(); System.out.println("resp=" + resp); } } private void getContacts(NonBlockTelnetClient client) { StringBuilder xml = new StringBuilder(); xml.append("<?xml version=/"1.0/" encoding=/"utf-8/"?>"); xml.append("<soap:Envelope xmlns:soap=/"http://schemas.xmlsoap.org/soap/envelope//" xmlns:xsi=/"http://www.w3.org/2001/XMLSchema-instance/" xmlns:xsd=/"http://www.w3.org/2001/XMLSchema/" xmlns:soapenc=/"http://schemas.xmlsoap.org/soap/encoding//">"); xml.append("<soap:Header>"); xml.append("<ABApplicationHeader xmlns=/"http://www.msn.com/webservices/AddressBook/">"); xml.append("<ApplicationId>CFE80F9D-180F-4399-82AB-413F33A1FA11</ApplicationId>"); xml.append("<IsMigration>false</IsMigration>"); xml.append("<PartnerScenario>Initial</PartnerScenario>"); xml.append("</ABApplicationHeader>"); xml.append("<ABAuthHeader xmlns=/"http://www.msn.com/webservices/AddressBook/">"); xml.append("<ManagedGroupRequest>false</ManagedGroupRequest>"); xml.append("<TicketToken>" + ticketToken + "</TicketToken>"); xml.append("</ABAuthHeader>"); xml.append("</soap:Header>"); xml.append("<soap:Body>"); xml.append("<ABFindAll xmlns=/"http://www.msn.com/webservices/AddressBook/">"); xml.append("<abId>00000000-0000-0000-0000-000000000000</abId>"); xml.append("<abView>Full</abView>"); xml.append("<deltasOnly>false</deltasOnly>"); xml.append("<lastChange>0001-01-01T00:00:00.0000000-08:00</lastChange>"); xml.append("</ABFindAll>"); xml.append("</soap:Body>"); xml.append("</soap:Envelope>"); System.out.println("xml=" + xml.toString()); HttpBrowser browser = new HttpBrowser(); try { NameValuePair[] headers = new NameValuePair[] { new NameValuePair("SOAPAction", "http://www.msn.com/webservices/AddressBook/ABFindAll"), new NameValuePair("Content-Type", "text/xml; charset=utf-8"), new NameValuePair("Cookie", "MSPAuth=Removed"), new NameValuePair("Host", "contacts.msn.com") }; HttpResponse resp = browser.doPost("https://contacts.msn.com/abservice/abservice.asmx", xml.toString(), headers); System.out.println("AB Resp=" + resp.getBodyAsString()); parseContacts(resp.getBodyAsString()); } catch (Exception e) { e.printStackTrace(); } } private void parseContacts(String xml) { //TODO } public static void main(String[] args) { try { //test encrypt String secret = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="; String nonce = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="; String ssoTicket = getSSOTicket(secret, nonce); System.out.println("ssoTicket=" + ssoTicket); TestMsn msn = new TestMsn("yourAccount", "yourPassword"); msn.doLogin(); Thread.sleep(1000); } catch (Exception e) { e.printStackTrace(); } }}