From e6e595194cd553f8141db61911ff4a833aab8dab Mon Sep 17 00:00:00 2001
From: Neo <me@timerring.com>
Date: Mon, 9 Feb 2026 14:38:32 +0800
Subject: [PATCH] fix: aliyun cors detection (#181)

---
 packages/detection/src/platforms/aliyun.js | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/packages/detection/src/platforms/aliyun.js b/packages/detection/src/platforms/aliyun.js
index 5d369a0..afb2b36 100644
--- a/packages/detection/src/platforms/aliyun.js
+++ b/packages/detection/src/platforms/aliyun.js
@@ -1,8 +1,11 @@
+import { convertAvatarToBase64 } from '../utils.js'
+
 /**
  * Aliyun Developer platform detection logic
  * Strategy:
  * 1. Check login_aliyunid_ticket cookie
  * 2. Call getUser API for username/avatar
+ * 3. Convert avatar to base64 to bypass CORS/ORB
  */
 export async function detectAliyunUser() {
     try {
@@ -17,7 +20,11 @@ export async function detectAliyunUser() {
         const data = await response.json()
 
         if (data.success && data.data?.nickname) {
-            return { loggedIn: true, username: data.data.nickname, avatar: data.data.avatar || '' }
+            let avatar = data.data.avatar || ''
+            if (avatar) {
+                avatar = await convertAvatarToBase64(avatar, 'https://developer.aliyun.com/')
+            }
+            return { loggedIn: true, username: data.data.nickname, avatar }
         }
         return { loggedIn: false }
     } catch (e) { return { loggedIn: false } }