### 整合后的 Python 实现 为了实现跨页提取完整的 reCAPTCHA token 响应并将其功能整合到纯 Python 中，可以基于 `requests` 库模拟前端的行为。以下是经过调整的代码： ```python import requests from urllib.parse import urlencode def get_recaptcha_token_with_fetch(url, website_key, action, client_secret): # Step 1: Simulate the execution of grecaptcha.execute to obtain a token. execute_payload = { "action": action, "client_secret": client_secret } execute_headers = { "accept": "application/json", "content-type": "application/x-www-form-urlencoded" } execute_url = f"https://www.google.com/recaptcha/api2/userverify?key={website_key}" execute_data = urlencode(execute_payload) try: execute_response = requests.post( execute_url, data=execute_data, headers=execute_headers ) if not execute_response.ok: raise Exception(f"Failed to execute captcha. Status code: {execute_response.status_code}") initial_token = execute_response.json().get("token", None) if not initial_token: raise ValueError("No initial token received from Google.") # Step 2: Validate and ensure completeness by simulating server-side validation. validate_payload = { "secret": client_secret, "response": initial_token } validate_url = "https://www.recaptcha.net/recaptcha/api/siteverify" validate_response = requests.post(validate_url, data=validate_payload) if not validate_response.ok: raise Exception(f"Validation failed with status code: {validate_response.status_code}") final_result = validate_response.json() if final_result.get("success"): return {"status": "success", "data": final_result} else: error_codes = final_result.get("error-codes", []) return {"status": "failure", "errors": error_codes} except Exception as e: return {"status": "exception", "message": str(e)} # Example usage if __name__ == "__main__": result = get_recaptcha_token_with_fetch( url="https://example.com", website_key="6LdTTf8cAAAAAJnW4jipqR0t03pG-84zpPwGPXfQ", action="homepage", client_secret="your_client_secret_here" ) print(result) ``` #### 解析与说明 1. **Google API 调用** 使用 `grecaptcha.execute` 的逻辑被替换为向 Google 提供的 `userverify` 接口发起 POST 请求[^1]。此接口用于生成初始的 reCAPTCHA token。 2. **Token 验证** 初始 token 可能不完整或未通过验证，因此引入了服务器端验证逻辑。这一步骤调用了 Google 官方提供的 `/siteverify` 接口来确认 token 的有效性[^2]。 3. **错误处理** 如果任何阶段失败，则返回详细的错误信息以便调试。这种设计确保即使在异常情况下也能提供清晰的状态反馈。 --- ###