Flik
5a03d9e1f1
- Deleted version comparison logic from `pkg/plugin/sign/version.go`. - Removed unused types and constants from `pkg/plugin/types.go`. - Updated `pkg/protocol/message.go` to remove plugin-related message types. - Enhanced `pkg/proxy/http.go` and `pkg/proxy/socks5.go` to include username/password authentication for HTTP and SOCKS5 proxies. - Modified `pkg/proxy/server.go` to pass authentication parameters to server constructors. - Added new API endpoint to generate installation commands with a token for clients. - Created database functions to manage installation tokens in `internal/server/db/install_token.go`. - Implemented the installation command generation logic in `internal/server/router/handler/install.go`. - Updated web frontend to support installation command generation and display in `web/src/views/ClientsView.vue`.
115 lines
2.7 KiB
Go
115 lines
2.7 KiB
Go
package config
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"encoding/hex"
|
|
"os"
|
|
|
|
"gopkg.in/yaml.v3"
|
|
)
|
|
|
|
// ServerConfig 服务端配置
|
|
type ServerConfig struct {
|
|
Server ServerSettings `yaml:"server"`
|
|
}
|
|
|
|
// ServerSettings 服务端设置
|
|
type ServerSettings struct {
|
|
BindAddr string `yaml:"bind_addr"`
|
|
BindPort int `yaml:"bind_port"`
|
|
Token string `yaml:"token"`
|
|
HeartbeatSec int `yaml:"heartbeat_sec"`
|
|
HeartbeatTimeout int `yaml:"heartbeat_timeout"`
|
|
DBPath string `yaml:"db_path"`
|
|
TLSDisabled bool `yaml:"tls_disabled"`
|
|
Web WebSettings `yaml:"web"`
|
|
}
|
|
|
|
// WebSettings Web控制台设置
|
|
type WebSettings struct {
|
|
Enabled bool `yaml:"enabled"`
|
|
BindPort int `yaml:"bind_port"`
|
|
Username string `yaml:"username"`
|
|
Password string `yaml:"password"`
|
|
}
|
|
|
|
// LoadServerConfig 加载服务端配置
|
|
func LoadServerConfig(path string) (*ServerConfig, error) {
|
|
var cfg ServerConfig
|
|
|
|
// 尝试读取配置文件，不存在则使用默认配置
|
|
data, err := os.ReadFile(path)
|
|
if err == nil {
|
|
if err := yaml.Unmarshal(data, &cfg); err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
// 设置默认值
|
|
setDefaults(&cfg)
|
|
|
|
return &cfg, nil
|
|
}
|
|
|
|
// setDefaults 设置默认值
|
|
func setDefaults(cfg *ServerConfig) {
|
|
if cfg.Server.BindAddr == "" {
|
|
cfg.Server.BindAddr = "0.0.0.0"
|
|
}
|
|
if cfg.Server.BindPort == 0 {
|
|
cfg.Server.BindPort = 7000
|
|
}
|
|
if cfg.Server.HeartbeatSec == 0 {
|
|
cfg.Server.HeartbeatSec = 30
|
|
}
|
|
if cfg.Server.HeartbeatTimeout == 0 {
|
|
cfg.Server.HeartbeatTimeout = 90
|
|
}
|
|
if cfg.Server.DBPath == "" {
|
|
cfg.Server.DBPath = "gotunnel.db"
|
|
}
|
|
|
|
// Web 默认启用
|
|
if cfg.Server.Web.BindPort == 0 {
|
|
cfg.Server.Web.BindPort = 7500
|
|
cfg.Server.Web.Enabled = true
|
|
}
|
|
|
|
// Token 未配置时自动生成 32 位
|
|
if cfg.Server.Token == "" {
|
|
cfg.Server.Token = generateToken(32)
|
|
}
|
|
}
|
|
|
|
// generateToken 生成随机 token
|
|
func generateToken(length int) string {
|
|
bytes := make([]byte, length/2)
|
|
n, err := rand.Read(bytes)
|
|
if err != nil || n != len(bytes) {
|
|
// 安全关键：随机数生成失败时 panic
|
|
panic("crypto/rand failed: unable to generate secure token")
|
|
}
|
|
return hex.EncodeToString(bytes)
|
|
}
|
|
|
|
// GenerateWebCredentials 生成 Web 控制台凭据
|
|
func GenerateWebCredentials(cfg *ServerConfig) bool {
|
|
if cfg.Server.Web.Username == "" {
|
|
cfg.Server.Web.Username = "admin"
|
|
}
|
|
if cfg.Server.Web.Password == "" {
|
|
cfg.Server.Web.Password = generateToken(16)
|
|
return true // 表示生成了新密码
|
|
}
|
|
return false
|
|
}
|
|
|
|
// SaveServerConfig 保存服务端配置
|
|
func SaveServerConfig(path string, cfg *ServerConfig) error {
|
|
data, err := yaml.Marshal(cfg)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return os.WriteFile(path, data, 0644)
|
|
}
|