Xuite

From Archiveteam
Revision as of 14:07, 20 April 2023 by Yts98 (talk | contribs) (Added domains, API & extend site structure)
Jump to navigation Jump to search
Xuite.net
URL https://xuite.net/
Status Closing
Archiving status Not saved yet
Archiving type Unknown
IRC channel #archiveteam-bs (on hackint)

Xuite.net is a Taiwanese blog website operated by Chunghwa Telecom. Xuite currently provides blog, photo album, and video services.

Shutdown

Announcement:

Xuite隨意窩平台服務終止公告

感謝您長期以來對Xuite隨意窩服務的支持,「Xuite 隨意窩」是許多人曾經的青春日記,也是現在進行式的樂活人生筆記。惟考量現今社群使用習慣改變,為使資源做更有效運用,Xuite隨意窩將於112年8月31日終止服務,並刪除網站全部資料。自112年4月6日起,我們提供所有 Xuiter(會員)後續處理服務,請注意以下關站時程,建議您盡早進行資料備份下載與部落格搬家等相關作業。

Closing schedule

Phase 1: April 6th 10:00 UTC+8 ~ May 1st 10:00 UTC+8, 2023

  • The website functions normally.
  • Data backup and download functions are provided for the members.

Phase 2: May 1st 10:00 UTC+8 ~ August 31st 14:00 UTC+8, 2023

  • Stop the opening of new member registration.
  • The website enters read-only mode, and the management console will be closed.
  • Members can browse the public webpage normally but cannot enter the management console to add, modify or delete the contents.
  • Only data backup and download functions are provided.

Phase 3: August 31st 14:00 UTC+8, 2023

  • The website is closed and cannot be accessed.
  • Members cannot backup or restore their data. All data will be deleted.

Domains

The following domains are currently functional:

  • xuite.net
  • api.xuite.net
  • avatar.xuite.net
  • blog.xuite.net
  • events.xuite.net
  • img.xuite.net
  • m.xuite.net
  • wms.map.xuite.net
  • my.xuite.net
  • photo.xuite.net
  • qa.xuite.net
  • redir.xuite.net
  • s.blog.xuite.net
  • s.photo.xuite.net
  • town.xuite.net
  • vlog.xuite.net
  • vote.xuite.net

The following domains host user-generated contents:

  • [0-9a-f].blog.xuite.net
  • [0-9a-f].mms.blog.xuite.net (suffering from invalid certificate common name)
  • [0-9a-f].photo.xuite.net (suffering from invalid certificate common name)
  • o.[0-9a-f].photo.xuite.net
  • [0-9a-f].share.photo.xuite.net
  • [0-9a-f].mms.vlog.xuite.net

The following domains redirect the pages elsewhere:

  • event.xuite.net
  • roomi.xuite.net
  • vip.xuite.net

Site structure

Each member has a user_id in the regex form of [a-z0-9\.]{1,20} and a numeric serial number.

A member can have multiple blogs. Each blog has a custom alphanumeric blogUrl and a globally unique incremental numeric blog_id. The blogUrl is editable after blog creation.

Each article has a globally unique incremental numeric article_id.

Each album has a globally unique incremental numeric album_id. Each photo has a numeric position number and a globally unique incremental numeric photo_id.

Each video or audio has a globally unique incremental numeric MEDIA_ID, and a FILE_NAME in the regex form of [A-Za-z0-9]{6}-MEDIA_ID\.flv in Base64 encoding forms the video URL.

Each playlist has a globally unique incremental numeric plid.

Members used to be able to embed Flash gadgets in blog sidebars or articles. Although these gadgets are deprecated [1][2], the configuration XML files, images and audios shown in FlashVars are archivable.

If http://c.blog.xuite.net/cf/7b/11732000/blog_698/mtv/4711036/flash_config.xml (occasionally) redirects to the forbidden page https://my.xuite.net/error.php?ecode=403, there is an alternative URL https://blog.xuite.net/_users/cf/7b/11732000/blog_698/mtv/4711036/flash_config.xml .

Other subdomains consists mostly of static content, which has been partially saved by Wayback Machine:

API

Xuite API

Members used to be able to apply for Xuite API keys since 2011 [3]. Although new applications were later closed, existing API keys can still be used.

All requests should be accompanied by a signature api_sig derived from the API key and the corresponding 10-digit secret key, but methods with "public" property do not require Oauth 2.0 Authorization from the user.

The signature generation formula is md5(<secret key> + <concatenated parameter values sorted by parameter names>) [4] . For example, if the API key is 500e40b862395d8a177d402d43cee9db, the corresponding secret key is 0123456789, and the query parameters are api_key=500e40b862395d8a177d402d43cee9db&method=xuite.photo.public.getPhotos&user_id=photo&album_id=4286795&pw=&start=0&limit=21, the signature should be md5(01234567894286795500e40b862395d8a177d402d43cee9db21xuite.photo.public.getPhotos0photo) = afc87f038f0c538677609eca6b1e7e88.

Non-public APIs

Some methods are designed to be called by AJAX or Flash. These methods do not require the API key.

User nickname

Friend list

Similar to Wretch, the friendship of Xuite is directional. Username discovery can be performed in two directions.

Album photo list

The following method returns a JSON-encoded photo list.

The following method derived from https://blog.xuite.net/_service/swf/slideshow.swf returns an XML-encoded list with album thumbnail and photo size. It uses a 10-character check key that is affected by the day of the week.

Media source info

The following method returns an XML-encoded media source info by providing the Base64-encoded MEDIA_ID solely. The FILE_NAME and owner's user_id can derive from the returned Base64-encoded flv_src.

Media playlist

References

See also