Wplace协议分析

int n = 2048; // 瓦片数量
int z = (int) (Math.log(n) / Math.log(2)); // 通过换底公式求出Zoom

double n = Math.pow(2.0, 11); // zoom 为 11
double lon = (x + 0.5) / n * 360.0 - 180.0;
double latRad = Math.atan(Math.sinh(Math.PI * (1 - 2 * (y + 0.5) / n)));
double lat = Math.toDegrees(latRad);

int extraColorsBitmap = 0;
int colorId = 63; // 需要检查的颜色ID
boolean unlocked;

if (colorId < 32) { // 跳过前32因为前32个颜色是免费的
    unlocked = true;
} else {
    int mask = 1 << (colorId - 32);
    unlocked = (extraColorsBitmap & mask) != 0;
}

class Tt {
    constructor(e) {
        u(this, "bytes");
        this.bytes = e ?? new Uint8Array
    }
    set(e, a) {
        const n = Math.floor(e / 8),
            c = e % 8;
        if (n >= this.bytes.length) {
            const r = new Uint8Array(n + 1),
                i = r.length - this.bytes.length;
            for (let h = 0; h < this.bytes.length; h++) r[h + i] = this.bytes[h];
            this.bytes = r
        }
        const l = this.bytes.length - 1 - n;
        a ? this.bytes[l] = this.bytes[l] | 1 << c : this.bytes[l] = this.bytes[l] & ~(1 << c)
    }
    get(e) {
        const a = Math.floor(e / 8),
            n = e % 8,
            c = this.bytes.length;
        return a > c ? !1 : (this.bytes[c - 1 - a] & 1 << n) !== 0
    }
}

double totalPainted = 1; // 已经绘制的像素数量
double base = Math.pow(30, 0.65);
double level = Math.pow(totalPainted, 0.65) / base;

{
  "userId": 1,
  "sessionId": "",
  "iss": "wplace",
  "exp": 1758373929,
  "iat": 1755781929
}

{
    // int: Alliance ID
    "allianceId": 1, 
    // enum: Alliance 权限
    // admin/member
    "allianceRole": "admin",
    // boolean: 是否被封禁
    "banned": false,
    // object: 像素信息
    "charges": {
        // int: 恢复像素的间隔，单位为毫秒，30000毫秒也就是30秒
        "cooldownMs": 30000,
        // float: 剩余的像素
        "count": 35.821833333333586,
        // float: 最高像素数量
        "max": 500
    },
    // string: ISO-3166-1 alpha-2地区代码
    // 参考：https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2
    "country": "JP",
    // string: discord用户名
    "discord": "",
    // int: 剩余droplets
    "droplets": 75,
    // int: 装备的旗帜
    "equippedFlag": 0,
    // object: 灰度测试标记，其内部的意义不明确
    // 例如其中的variant值为koala（考拉），不明确其内部意义，仅为一个代号。
    // 但是会跟着请求头传出去，如果2025-09_pawtect的variant是disabled则不会发送pawtect-token
    // 说明部分用户没有被启用新的安全机制
    "experiments": {
        "2025-09_pawtect": {
            "variant": "koala"
        }
    },
    // int: extraColorsBitmap，参阅 #颜色 小节了解其作用。
    "extraColorsBitmap": 0,
    // array: 收藏的位置
    "favoriteLocations": [
        {
            "id": 1,
            "name": "",
            "latitude": 46.797833514893085,
            "longitude": 0.9266305280273432
        }
    ],
    // string: 已解锁的旗帜列表，参阅 #旗帜 小节了解其作用。
    "flagsBitmap": "AA==",
    // enum: 一般不会出现，如果你有权限才会额外显示
    // moderator/global_moderator/admin
    "role": "",
    // int: 用户ID
    "id": 1,
    // boolean: 是否有购买，如果有则会在菜单显示订单列表
    "isCustomer": false,
    // float: 等级
    "level": 94.08496005353335,
    // int: 最大的收藏数量，默认为15，暂时没有发现如何提升
    "maxFavoriteLocations": 15,
    // string: 用户名
    "name": "username",
    // boolean: 是否需要手机号验证，如果是则会在访问时弹出手机号验证窗口
    "needsPhoneVerification": false,
    // string: 头像URL或base64，需要根据前缀判断（例如data:image/png;base64,)
    "picture": "",
    // int: 已经绘制的像素数量
    "pixelsPainted": 114514,
    // boolean: 是否在alliance页面展示你最后一次绘制的位置
    "showLastPixel": true,
    // string: 你的解除封禁时间戳，如果是1970年则意味着没有被封禁或者已经被永久封禁。
    "timeoutUntil": "1970-01-01T00:00:00Z"
}

{
    // string：用户昵称
    "name": "cubk",
    // boolean：是否在alliance展示最后一个像素
    "showLastPixel": true,
    // discord用户名
    "discord": "_cubk"
}

{
    "success": true
}

{
    "error": "The name has more than 16 characters",
    "status": 400
}

// array: 所有头像
[
    {
        // int: 头像ID
        "id": 0,
        // string: 头像URL或者Base64，可以通过是否以data:image/png;base64,开头判断
        "url": ""
    }
]

{
    // int: 头像ID，需要确保你添加了这个头像
	"pictureId": 1
}

{}

{
	"success": true
}

{
	"success": true
}

{
	"error": "Forbidden",
	"status": 403
}

{
	// string: Alliance介绍
	"description": "CCB",
	// object: 总部（Headquarters）
	"hq": {
		"latitude": 22.535013525851937,
		"longitude": 114.01152903098966
	},
	// int: Alliance ID
	"id": 453128,
	// int: 成员数量
	"members": 263,
	// string: 名字
	"name": "Team RealB",
	// string: 已绘制的总数
	"pixelsPainted": 1419281,
	// enum: 你的权限
	// admin/memeber
	"role": "admin"
}

{
	"error": "Not Found",
	"status": 404
}

{
    // string: Alliance名字，不能重名。
	"name": "Team RealB"
}

{
    // int: 创建完的Alliance ID
	"id": 1
}

{
	"error": "name_taken",
	"status": 400
}

{
    "error": "Forbidden",
    "status": 403
}

{
    "description": "bbb"
}

{
	"success": true
}

{
	"error": "Forbidden",
	"status": 403
}

// array: Alliance邀请链接，通常只有一个且格式为UUID
[
    "fe7c9c32-e95a-4f5f-a866-554cde2149c3"
]

{
	"error": "Forbidden",
	"status": 403
}

{
    "success": "true"
}

{
    "error": "Not Found",
    "status": 404
}

{
  "error": "Already Reported",
  "status": 208
}

{
	"error": "Forbidden",
	"status": 403
}

{
	"latitude": 22.537655528880563,
	"longitude": 114.0274942853182
}

{
	"success": true
}

{
	"error": "Forbidden",
	"status": 403
}

{
    // array: 一页最多50个
	"data": [{
	    // int: 用户ID
		"id": 1,
		// string: 用户名
		"name": "cubk'",
		// enum: 权限
		// admin/memeber
		"role": "admin"
	}, {
		"id": 1,
		"name": "SillyBitch",
		"role": "admin"
	}, {
		"id": 1,
		"name": "cubk",
		"role": "member"
	}],
	// boolean: 是否还有下一页
	"hasNext": true
}

{
	"error": "Forbidden",
	"status": 403
}

{
	"data": [{
		"id": 1,
		"name": "SuckMyDick"
	}],
	"hasNext": false
}

{
	"error": "Forbidden",
	"status": 403
}

{
    // int: 需要提升的用户ID
	"promotedUserId": 1
}

{
	"error": "Forbidden",
	"status": 403
}

{
    // int: 需要踢出或拉黑的用户ID
	"bannedUserId": 1
}

{
	"success": true
}

{
	"error": "Forbidden",
	"status": 403
}

{
    // int: 需要解除拉黑的用户ID
	"unbannedUserId": 1
}

{
	"success": true
}

{
	"error": "Forbidden",
	"status": 403
}

[
  {
    // int: 用户ID
    "userId": 10815100,
    // string: 用户名
    "name": "做爱",
    // int: 旗帜ID，旗帜列表参阅附录
    "equippedFlag": 0,
    // int: 已绘制像素数量
    "pixelsPainted": 32901,
    // 最后一次绘制的经纬度，如果用户关闭了showLastPixel则不会有这两个字段
    "lastLatitude": 22.527739206672393,
    "lastLongitude": 114.02762695312497
  },
  {
    "userId": 10850297,
    "name": "尹永铉",
    "equippedFlag": 0,
    "pixelsPainted": 31631
  }
]

{
	"latitude": 22.5199456234827,
	"longitude": 114.02428677802732
}

{
    // int: 收藏ID
	"id": 1,
	"success": true
}

{
  "error": "Forbidden",
  "status": 403
}

{
    // int: 收藏ID
	"id": 1
}

{
    "success": true
}

{
    // object: 固定字段product
	"product": {
	    // int: 物品id
		"id": 100,
		// int: 购买数量，对于Paint Charges/Max Charge可以购买多个
		"amount": 1,
		// int: 变体值，部分物品存在变体，如果没有变体不需要这个值
		"variant": 49
	}
}

{
	"success": true
}

{"error":"Forbidden","status":403}{"success":true}

{
	"success": true
}

{
	"error": "Forbidden",
	"status": 403
}

[
  {
    // int: 排行榜ID，仅用于内部
    "id": 111006,
    // int: 地区名字
    "name": "Yongzhou",
    // int: 地区ID
    "cityId": 4205,
    // int: 地区编号
    "number": 1,
    // int: 国家/地区ID
    "countryId": 45,
    // int: 已绘制数量
    "pixelsPainted": 389274,
    // 最后一次绘制的经纬度
    "lastLatitude": 26.59347856637528,
    "lastLongitude": 111.63313476562497
  },
  {
    "id": 112043,
    "name": "Fuzhou",
    "cityId": 4381,
    "number": 11,
    "countryId": 45,
    "pixelsPainted": 307461,
    "lastLatitude": 25.21710750136907,
    "lastLongitude": 120.43010742187496
  }
}

[
  {
    // int: 国家地区ID，参阅附录获得全部
    // 此处的235对应美国
    "id": 235,
    "pixelsPainted": 40724480
  },
  {
    "id": 181,
    "pixelsPainted": 39226725
  }
]

[
  {
    // int: 用户ID
    "id": 8883244,
    // string: 用户名
    "name": "Tightmatt Cousin",
    // int: Alliance ID，如果是0则代表没有
    "allianceId": 0,
    // string: Alliance名字，如果没有则是空字符串
    "allianceName": "",
    // int: 已装备旗帜，旗帜列表参考附录，如果没有则是0
    "equippedFlag": 155,
    // int: 已绘制的像素数量
    "pixelsPainted": 64451,
    // string: 头像URL或Base64，可通过是否以data:image/png;base64,开头判断，如果没有头像则没有这个字段
    "picture": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAbklEQVR42qxTQQrAMAhbpN/e+/as7LKBjLRGOkGQ0mhM0zg2w2nAJ2XAAC8x7gpwVqCgi8zkvFhqAEEdKW2x6IoaxfSZqHjrYYhFcYfOM3IGythoGAeqHouJ33Mq1ihc13Vuq9k/sf2d7wAAAP//U48dVi53OIQAAAAASUVORK5CYII=",
    // string: discord用户名
    "discord": "co."
  },
  {
    "id": 2235271,
    "name": "( ˘ ³˘) ",
    "allianceId": 0,
    "allianceName": "",
    "equippedFlag": 0,
    "pixelsPainted": 39841,
    "discord": "bittenonce"
  }
]

[
  {
    // int: Alliance ID
    "id": 165,
    // string: Alliance名字
    "name": "bapo",
    // int: 已绘制像素数量
    "pixelsPainted": 771030
  },
  {
    "id": 29246,
    "name": "BROP Enterprises",
    "pixelsPainted": 507885
  }
]

[
  {
    "id": 1997928,
    "name": "宵崎奏",
    "allianceId": 593067,
    "allianceName": "匠の心",
    "pixelsPainted": 189818,
    "equippedFlag": 98,
    "picture": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAA+ElEQVR42mJiQAP/ocBh8pP/GgHzwGwQDWOjq2dE1+w45SnDi727GCSc3VAUgsRg4MaGJLg+RpAmRkZGRphmQgDdICZkm7EpRtYAAiCXIbsOxWZkp2PzBjaXMDGQAbaJq8INJ8oAZG+ANCMDJnT/wfy90uAWmN6fI41hiNfL23CDmNBtAml8rsnIoFffDhe/vj4RLAaSR9YMNwBmCwhomumgaEQGIMORXUFyIMJcBdOM04APbQkExUDeASUkRvSEBJK4lMaGYcD1U1cYwi+owQMalpwZkfOBZuB8uAZQoIFpwywGt0nGDG9EkrDmBYoBE6UGAAIAAP//HhiiI4AXzBcAAAAASUVORK5CYII=",
    "discord": "思い出を取り戻して"
  },
  {
    "id": 7730493,
    "name": "$_0_U_/\\/\\_4",
    "allianceId": 597328,
    "allianceName": "義工",
    "pixelsPainted": 109076,
    "equippedFlag": 98,
    "picture": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAB+ElEQVR42pRTTWgTURD+9rmKBUPbg1RBDyslNAEriU3F3pTUS0FoQREEL3pQ8SwqRRREUPDkT3qwF6EIgvFUDyZ4EFKhG6om4IoElCpCBOmGoKiJrHwTJ27MJX7wmG/nzZv53sxbOygsBI1aAGJ9vwXlikrgY+mFJ/z4vomufaOOeyvPZZNJwmi4H3EsuVfWCn7gXxglDCj3/5QktEwoqlLbRAW/+/xvUkCL0BqtTuysbeiqEBsYbMk/Oy3c89dkaRLD7HpXtUxERQRlaw94MMy51iXizqWJREycN7OPUfbeYfW7DzMyhM8bf4l/ynGAT19x8doczk0fkriZeAJVtwLr9eIt6eJC9imOzuzHsDUgKvQ7NjkCuFVRwh4QVMGJUIGtjsPboxgvvpWAenqPHG4jNYSkW0Wk+FI+C0FEfMitwXBMqWYEoxfSclDvx8pUE05CLI9FZTLaYLNcetURVD9/sCWbY0pv6ZiI7mkjS7kyjJXcgf8FJzR76o4oMZwACR294vLDLBxnq7xSeUiF+UVx9IovH1bFuna9leD9YB+o5O6RG+2g+euPUHlwXxa5gjG7N20WfmL2tmXHp85YJw+MtX8xXuVK5rQ8XcXwH1u6mhc7ProLmWf5vz/T3JOipZ3l/DUwDC/3Bs3JqPDMUl7OkP8OAAD//6QS5QpYPtjuAAAAAElFTkSuQmCC",
    "discord": "soumasandesu"
  }
]

[
  {
    "id": 1,
    "name": "Team ReaIB",
    "pixelsPainted": 856069
  },
  {
    "id": 1,
    "name": "Team RealB",
    "pixelsPainted": 658302
  }
]

{
    // 像素位置（相对于Tile）
	"pixel": {
		"x": 764,
		"y": 676
	},
	// Tile位置
	"tile": {
		"x": 1781,
		"y": 749
	}
}

{
    // object: 绘制者信息
	"paintedBy": {
	    // int: 用户ID
		"id": 1,
		// string: 用户名
		"name": "崔龙海",
		// int: Alliance ID，如果没有则是0
		"allianceId": 1,
		// string: Alliance名字，如果没有则是空字符串
		"allianceName": "Team ReaIB",
		// int: 旗帜ID，对应关系参阅附录
		"equippedFlag": 0
	},
	// object: 区域信息
	"region": {
	    // int: 信息ID，内部使用
		"id": 114594,
		// int: 城市ID
		"cityId": 4263,
		// int: 城市名字
		"name": "Shenzhen",
		// int: 区域编号
		"number": 2,
		// int: 国家/地区ID
		"countryId": 45
	}
}

{
	"paintedBy": {
		"id": 0,
		"name": "",
		"allianceId": 0,
		"allianceName": "",
		"equippedFlag": 0
	},
	"region": {
		"id": 114594,
		"cityId": 4263,
		"name": "Shenzhen",
		"number": 2,
		"countryId": 45
	}
}

{
    // array: 绘制的颜色ID，每个值对应一个像素
	"colors": [49, 49, 49, 49, 49, 49],
	// array: 绘制的坐标，格式为x, y, x, y，按照 (x, y) 成对出现
	// 坐标顺序与 colors 一一对应，即第N个颜色应用于第N个坐标
	"coords": [
      140, 359, 
      141, 359, 
      141, 358, 
      142, 358, 
      143, 358, 
      143, 357
    ],
    // string: 验证码token
	"t": "0.xxxx",
	// string: 浏览器指纹
	"fp": "xxxx"
}

{
	"painted": 6
}

{
	"error": "refresh",
	"status": 403
}

curl -X POST "https://backend.wplace.live/report-user" \
  -H "Content-Type: multipart/form-data" \
  -F "reportedUserId=1" \
  -F "latitude=22.544484678446224" \
  -F "longitude=114.09375473639432" \
  -F "zoom=15.812584063490982" \
  -F "reason=griefing" \
  -F "notes=Messed up artworks for no reason" \
  -F "image=@图片;type=image/jpeg"

------boundary
Content-Disposition: form-data; name="reportedUserId"

1
------boundary
Content-Disposition: form-data; name="latitude"

22.544484678446224
------boundary
Content-Disposition: form-data; name="longitude"

114.09375473639432
------boundary
Content-Disposition: form-data; name="zoom"

15.812584063490982
------boundary
Content-Disposition: form-data; name="reason"

griefing
------boundary
Content-Disposition: form-data; name="notes"

Messed up artworks for no reason
------boundary
Content-Disposition: form-data; name="image"; filename="report-1758232933710.jpeg"
Content-Type: image/jpeg

(binary file data)
------boundary--

{
	"userId": 1,
	"time": 1758235291531
}

function Q8() {
    if (!(window.__fpjs_d_m || Math.random() >= 0.001)) try {
        var _ = new XMLHttpRequest;
        _.open(
            'get',
            'https://m1.openfpcdn.io/fingerprintjs/v'.concat(I0, '/npm-monitoring'),
            !0
        ),
            _.send()
    } catch (s) {
        console.error(s)
    }
}

let m;
let memory;
const textEncoder = new TextEncoder();
const textDecoder = new TextDecoder();
let J = 0;

function re(n, malloc, realloc) {
    if (realloc === undefined) {
        const s = textEncoder.encode(n);
        const ptr = malloc(s.length, 1) >>> 0;
        new Uint8Array(memory.buffer, ptr, s.length).set(s);
        J = s.length;
        return ptr;
    }
    let a = n.length;
    let ptr = malloc(a, 1) >>> 0;
    const mem = new Uint8Array(memory.buffer);
    let i = 0;
    for (; i < a; i++) {
        const code = n.charCodeAt(i);
        if (code > 0x7F) break;
        mem[ptr + i] = code;
    }
    if (i !== a) {
        if (i !== 0) n = n.slice(i);
        ptr = realloc(ptr, a, a = i + n.length * 3, 1) >>> 0;
        const view = new Uint8Array(memory.buffer, ptr + i, a - i);
        const { written } = textEncoder.encodeInto(n, view);
        i += written;
        ptr = realloc(ptr, a, i, 1) >>> 0;
    }
    J = i;
    return ptr;
}

function P(ptr, len) {
    return textDecoder.decode(new Uint8Array(memory.buffer, ptr, len));
}

function fn(n) {
    let e,
        t;
    try {
        const a = re(n, m.__wbindgen_malloc, m.__wbindgen_realloc),
            r = J,
            o = m.get_pawtected_endpoint_payload(a, r);
        return e = o[0],
            t = o[1],
            P(o[0], o[1])
    } finally {
        m.__wbindgen_free(e, t, 1)
    }
}

async function loadWASM() {
    const wasmBuffer = await readFile("./pawtect_wasm_bg.wasm");
    const imports = hn();
    const { instance } = await WebAssembly.instantiate(wasmBuffer, imports);
    m = instance.exports;
    memory = m.memory;
}

function hn() {
    const n = {};
    n.wbg = {};
    n.wbg.__wbg_buffer_609cc3eee51ed158 = e => e.buffer;
    n.wbg.__wbg_call_672a4d21634d4a24 = (e, t) => e.call(t);
    n.wbg.__wbg_call_7cccdd69e0791ae2 = (e, t, a) => e.call(t, a);
    n.wbg.__wbg_crypto_574e78ad8b13b65f = e => e.crypto;
    n.wbg.__wbg_getRandomValues_b8f5dbd5f3995a9e = (e, t) => e.getRandomValues(t);
    n.wbg.__wbg_msCrypto_a61aeb35a24c1329 = e => e.msCrypto;
    n.wbg.__wbg_new_a12002a7f91c75be = e => new Uint8Array(e);
    n.wbg.__wbg_newnoargs_105ed471475aaf50 = (e, t) => new Function(P(e, t));
    n.wbg.__wbg_newwithbyteoffsetandlength_d97e637ebe145a9a = (e, t, a) =>
        new Uint8Array(e, t >>> 0, a >>> 0);
    n.wbg.__wbg_newwithlength_a381634e90c276d4 = e => new Uint8Array(e >>> 0);
    n.wbg.__wbg_node_905d3e251edff8a2 = e => e.node;
    n.wbg.__wbg_process_dc0fbacc7c1c06f7 = e => e.process;
    n.wbg.__wbg_randomFillSync_ac0988aba3254290 = (e, t) => e.randomFillSync(t);
    n.wbg.__wbg_require_60cc747a6bc5215a = () => module.require;
    n.wbg.__wbg_set_65595bdd868b3009 = (e, t, a) => e.set(t, a >>> 0);
    n.wbg.__wbg_static_accessor_GLOBAL_88a902d13a557d07 = () =>
        typeof global === "undefined" ? null : global;
    n.wbg.__wbg_static_accessor_GLOBAL_THIS_56578be7e9f832b0 = () =>
        typeof globalThis === "undefined" ? null : globalThis;
    n.wbg.__wbg_static_accessor_SELF_37c5d418e4bf5819 = () =>
        typeof self === "undefined" ? null : self;
    n.wbg.__wbg_static_accessor_WINDOW_5de37043a91a9c40 = () =>
        typeof window === "undefined" ? null : window;
    n.wbg.__wbg_subarray_aa9065fa9dc5df96 = (e, t, a) => e.subarray(t >>> 0, a >>> 0);
    n.wbg.__wbg_versions_c01dfd4722a88165 = e => e.versions;
    n.wbg.__wbindgen_init_externref_table = () => {
        const e = m.__wbindgen_export_2;
        const t = e.grow(4);
        e.set(0, void 0);
        e.set(t + 0, void 0);
        e.set(t + 1, null);
        e.set(t + 2, true);
        e.set(t + 3, false);
    };
    n.wbg.__wbindgen_is_function = e => typeof e === "function";
    n.wbg.__wbindgen_is_object = e => typeof e === "object" && e !== null;
    n.wbg.__wbindgen_is_string = e => typeof e === "string";
    n.wbg.__wbindgen_is_undefined = e => e === void 0;
    n.wbg.__wbindgen_memory = () => m.memory;
    n.wbg.__wbindgen_string_new = (e, t) => P(e, t);
    n.wbg.__wbindgen_throw = (e, t) => {
        throw new Error(P(e, t));
    };
    return n;
}

// 需要自己添加post逻辑
// 示例传入：https://backend.wplace.live/s0/pixel/1/1, {}, 1
function postPaw(url, bodyStr, userId) {
    loadWASM();
    if (m.__wbindgen_start) m.__wbindgen_start();
    m.set_user_id(userId);
    const urlPtr = re(url, m.__wbindgen_malloc, m.__wbindgen_realloc);
    m.request_url(urlPtr, J);
    const loadPayload = m.get_load_payload();
    const sign = fn(bodyStr);
};

{
  "error": "Unauthorized",
  "status": 401
}

{
  "error": "Internal Server Error. We'll look into it, please try again later.",
  "status": 500
}

{
  "error": "Bad Request",
  "status": 400
}

public class WplaceBitMap {
    private byte[] bytes;

    public WplaceBitMap() {
        this.bytes = new byte[0];
    }

    public WplaceBitMap(byte[] bytes) {
        this.bytes = bytes != null ? bytes : new byte[0];
    }

    public void set(int index, boolean value) {
        int byteIndex = index / 8;
        int bitIndex = index % 8;

        if (byteIndex >= bytes.length) {
            byte[] newBytes = new byte[byteIndex + 1];
            int offset = newBytes.length - bytes.length;
            System.arraycopy(bytes, 0, newBytes, offset, bytes.length);
            bytes = newBytes;
        }

        int realIndex = bytes.length - 1 - byteIndex;

        if (value) {
            bytes[realIndex] |= (1 << bitIndex);
        } else {
            bytes[realIndex] &= ~(1 << bitIndex);
        }
    }

    public boolean get(int index) {
        int byteIndex = index / 8;
        int bitIndex = index % 8;

        if (byteIndex >= bytes.length) {
            return false;
        }

        int realIndex = bytes.length - 1 - byteIndex;
        return (bytes[realIndex] & (1 << bitIndex)) != 0;
    }

    public String toBase64() {
        return Base64.getEncoder().encodeToString(bytes);
    }
}

import org.apache.commons.codec.digest.DigestUtils;

import java.nio.ByteBuffer;
import java.nio.ByteOrder;
import java.nio.charset.StandardCharsets;
import java.security.SecureRandom;
import java.util.Base64;

public class Pawtect {
    private static final byte[] KEY = new byte[32];
    static {
        for (int i = 0; i < 32; i++) {
            KEY[i] = (byte) ((i % 2 == 0) ? 19 : 55);
        }
    }
    public static String sign(String body) throws Exception {
        ByteBuffer buf = ByteBuffer.allocate(1024);
        buf.order(ByteOrder.LITTLE_ENDIAN);
        buf.putInt(0xAC831369);
        buf.put((byte) 0x00);
        buf.put(DigestUtils.sha256(body));
        buf.putShort((short) 0);
        buf.putInt(1);
        byte[] hb = "backend.wplace.live".getBytes(StandardCharsets.UTF_8);
        buf.putInt(hb.length);
        buf.put(hb);
        byte[] plaintext = new byte[buf.position()];
        buf.flip();
        buf.get(plaintext);
        SecureRandom random = new SecureRandom();
        byte[] nonce = new byte[24];
        random.nextBytes(nonce);
        XChaCha20Poly1305 cipher = new XChaCha20Poly1305(KEY);
        byte[] ciphertext = cipher.encrypt(nonce, plaintext);
        String ctB64 = Base64.getEncoder().encodeToString(ciphertext);
        String nonceB64 = Base64.getEncoder().encodeToString(nonce);
        return ctB64 + "." + nonceB64;
    }
}

import org.bouncycastle.crypto.engines.ChaCha7539Engine;
import org.bouncycastle.crypto.macs.Poly1305;
import org.bouncycastle.crypto.params.KeyParameter;
import org.bouncycastle.crypto.params.ParametersWithIV;

import java.nio.ByteBuffer;
import java.nio.ByteOrder;
import java.util.Arrays;

public class XChaCha20Poly1305 {
    private final byte[] key;

    public XChaCha20Poly1305(byte[] key) {
        if (key.length != 32) {
            throw new IllegalArgumentException("Key must be 32 bytes");
        }
        this.key = Arrays.copyOf(key, 32);
    }

    public byte[] encrypt(byte[] nonce24, byte[] plaintext) throws Exception {
        if (nonce24.length != 24) {
            throw new IllegalArgumentException("Nonce must be 24 bytes for XChaCha20");
        }
        byte[] subKey = hchacha20(key, Arrays.copyOfRange(nonce24, 0, 16));
        byte[] nonce12 = new byte[12];
        nonce12[0] = 0;
        nonce12[1] = 0;
        nonce12[2] = 0;
        nonce12[3] = 0;
        System.arraycopy(nonce24, 16, nonce12, 4, 8);
        ChaCha7539Engine chacha = new ChaCha7539Engine();
        chacha.init(true, new ParametersWithIV(new KeyParameter(subKey), nonce12));
        byte[] polyKey = new byte[64];
        chacha.processBytes(polyKey, 0, polyKey.length, polyKey, 0);
        byte[] ciphertext = new byte[plaintext.length];
        chacha.processBytes(plaintext, 0, plaintext.length, ciphertext, 0);
        Poly1305 poly1305 = new Poly1305();
        poly1305.init(new KeyParameter(Arrays.copyOf(polyKey, 32)));
        int aadLen = 0;
        poly1305.update(ciphertext, 0, ciphertext.length);
        int rem = ciphertext.length % 16;
        if (rem != 0) {
            poly1305.update(new byte[16 - rem], 0, 16 - rem);
        }
        poly1305.update(ByteBuffer.allocate(8).order(ByteOrder.LITTLE_ENDIAN).putLong(aadLen).array(), 0, 8);
        poly1305.update(ByteBuffer.allocate(8).order(ByteOrder.LITTLE_ENDIAN).putLong(ciphertext.length).array(), 0, 8);
        byte[] tag = new byte[16];
        poly1305.doFinal(tag, 0);
        ByteBuffer out = ByteBuffer.allocate(ciphertext.length + 16);
        out.put(ciphertext);
        out.put(tag);
        return out.array();
    }

    private static byte[] hchacha20(byte[] key, byte[] nonce16) {
        int[] state = new int[16];

        byte[] sigma = "expand 32-byte k".getBytes();
        state[0] = toIntLE(sigma, 0);
        state[1] = toIntLE(sigma, 4);
        state[2] = toIntLE(sigma, 8);
        state[3] = toIntLE(sigma, 12);
        for (int i = 0; i < 8; i++) {
            state[4 + i] = toIntLE(key, i * 4);
        }
        state[12] = toIntLE(nonce16, 0);
        state[13] = toIntLE(nonce16, 4);
        state[14] = toIntLE(nonce16, 8);
        state[15] = toIntLE(nonce16, 12);
        for (int i = 0; i < 10; i++) {
            quarterRound(state, 0, 4, 8, 12);
            quarterRound(state, 1, 5, 9, 13);
            quarterRound(state, 2, 6, 10, 14);
            quarterRound(state, 3, 7, 11, 15);
            quarterRound(state, 0, 5, 10, 15);
            quarterRound(state, 1, 6, 11, 12);
            quarterRound(state, 2, 7, 8, 13);
            quarterRound(state, 3, 4, 9, 14);
        }
        ByteBuffer out = ByteBuffer.allocate(32).order(java.nio.ByteOrder.LITTLE_ENDIAN);
        out.putInt(state[0]);
        out.putInt(state[1]);
        out.putInt(state[2]);
        out.putInt(state[3]);
        out.putInt(state[12]);
        out.putInt(state[13]);
        out.putInt(state[14]);
        out.putInt(state[15]);
        return out.array();
    }

    private static void quarterRound(int[] s, int a, int b, int c, int d) {
        s[a] += s[b]; s[d] = rotl(s[d] ^ s[a], 16);
        s[c] += s[d]; s[b] = rotl(s[b] ^ s[c], 12);
        s[a] += s[b]; s[d] = rotl(s[d] ^ s[a], 8);
        s[c] += s[d]; s[b] = rotl(s[b] ^ s[c], 7);
    }

    private static int rotl(int x, int n) {
        return (x << n) | (x >>> (32 - n));
    }

    private static int toIntLE(byte[] bs, int off) {
        return (bs[off] & 0xff) |
               ((bs[off+1] & 0xff) << 8) |
               ((bs[off+2] & 0xff) << 16) |
               ((bs[off+3] & 0xff) << 24);
    }
}