fix: increase WebVPN timeouts from 30s to 60s for reliability

Author: LeafCreeper

src/api/webvpn.py

@@ -199,7 +199,7 @@ def authenticate_icourse(
         vpn_url = get_vpn_url(casapi_url)
 
         # Follow redirect chain to reach IDP login page and extract lck
-        resp = self.session.get(vpn_url, allow_redirects=False, timeout=30)
+        resp = self.session.get(vpn_url, allow_redirects=False, timeout=60)
         lck = None
         for _ in range(15):
             location = resp.headers.get("Location", "")
@@ -212,7 +212,7 @@ def authenticate_icourse(
             if not location.startswith("http"):
                 location = urljoin(resp.url, location)
             resp = self.session.get(
-                location, allow_redirects=False, timeout=30
+                location, allow_redirects=False, timeout=60
             )
 
         if not lck:
@@ -241,7 +241,7 @@ def authenticate_icourse(
                 "Referer": f"{idp_vpn_base}/ac/",
                 "Origin": config.WEBVPN_BASE,
             },
-            timeout=30,
+            timeout=60,
         )
         data = resp.json()
         auth_method_list = data.get("data", [])
@@ -262,7 +262,7 @@ def authenticate_icourse(
         resp = self.session.get(
             url,
             headers={"Referer": f"{idp_vpn_base}/ac/"},
-            timeout=30,
+            timeout=60,
         )
         data = resp.json()
         pub_key_b64 = data.get("data", "")
@@ -297,7 +297,7 @@ def authenticate_icourse(
                 "Referer": f"{idp_vpn_base}/ac/",
                 "Origin": config.WEBVPN_BASE,
             },
-            timeout=30,
+            timeout=60,
         )
         data = resp.json()
 
@@ -321,7 +321,7 @@ def authenticate_icourse(
                 "Referer": f"{idp_vpn_base}/ac/",
                 "Origin": config.WEBVPN_BASE,
             },
-            timeout=30,
+            timeout=60,
         )
         html = resp.text
 
@@ -356,7 +356,7 @@ def authenticate_icourse(
         test_url = get_vpn_url(
             f"{config.ICOURSE_BASE}/userapi/v1/infosimple"
         )
-        resp = self.session.get(test_url, timeout=30)
+        resp = self.session.get(test_url, timeout=60)
         if resp.status_code == 200:
             try:
                 user_data = resp.json()
@@ -401,12 +401,12 @@ def _get_auth_context(self) -> tuple[str, str]:
             f"{config.IDP_BASE}/idp/authCenter/authenticate"
             f"?service={quote(service_url, safe='')}"
         )
-        resp = self.session.get(url, allow_redirects=False, timeout=30)
+        resp = self.session.get(url, allow_redirects=False, timeout=60)
 
         # Follow redirects manually to extract lck
         location = resp.headers.get("Location", "")
         while resp.status_code in (301, 302) and "lck=" not in location:
-            resp = self.session.get(location, allow_redirects=False, timeout=30)
+            resp = self.session.get(location, allow_redirects=False, timeout=60)
             location = resp.headers.get("Location", "")
 
         if resp.status_code in (301, 302):
@@ -437,7 +437,7 @@ def _query_auth_methods(
                 "Referer": f"{config.IDP_BASE}/ac/",
                 "Origin": config.IDP_BASE,
             },
-            timeout=30,
+            timeout=60,
         )
         data = resp.json()
 
@@ -467,7 +467,7 @@ def _get_public_key(self) -> str:
             headers={
                 "Referer": f"{config.IDP_BASE}/ac/",
             },
-            timeout=30,
+            timeout=60,
         )
         data = resp.json()
         pub_key_b64 = data.get("data", "")
@@ -521,7 +521,7 @@ def _auth_execute(
                 "Referer": f"{config.IDP_BASE}/ac/",
                 "Origin": config.IDP_BASE,
             },
-            timeout=30,
+            timeout=60,
         )
         data = resp.json()
 
@@ -548,7 +548,7 @@ def _get_cas_ticket(self, login_token: str) -> str:
                 "Referer": f"{config.IDP_BASE}/ac/",
                 "Origin": config.IDP_BASE,
             },
-            timeout=30,
+            timeout=60,
         )
 
         # The response is HTML containing a JS redirect with the ticket URL