Flik
5a03d9e1f1
- Deleted version comparison logic from `pkg/plugin/sign/version.go`. - Removed unused types and constants from `pkg/plugin/types.go`. - Updated `pkg/protocol/message.go` to remove plugin-related message types. - Enhanced `pkg/proxy/http.go` and `pkg/proxy/socks5.go` to include username/password authentication for HTTP and SOCKS5 proxies. - Modified `pkg/proxy/server.go` to pass authentication parameters to server constructors. - Added new API endpoint to generate installation commands with a token for clients. - Created database functions to manage installation tokens in `internal/server/db/install_token.go`. - Implemented the installation command generation logic in `internal/server/router/handler/install.go`. - Updated web frontend to support installation command generation and display in `web/src/views/ClientsView.vue`.
132 lines
3.0 KiB
Go
132 lines
3.0 KiB
Go
package proxy
|
|
|
|
import (
|
|
"bufio"
|
|
"encoding/base64"
|
|
"errors"
|
|
"io"
|
|
"net"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/gotunnel/pkg/relay"
|
|
)
|
|
|
|
// HTTPServer HTTP 代理服务
|
|
type HTTPServer struct {
|
|
dialer Dialer
|
|
onStats func(in, out int64) // 流量统计回调
|
|
username string
|
|
password string
|
|
}
|
|
|
|
// NewHTTPServer 创建 HTTP 代理服务
|
|
func NewHTTPServer(dialer Dialer, onStats func(in, out int64), username, password string) *HTTPServer {
|
|
return &HTTPServer{dialer: dialer, onStats: onStats, username: username, password: password}
|
|
}
|
|
|
|
// HandleConn 处理 HTTP 代理连接
|
|
func (h *HTTPServer) HandleConn(conn net.Conn) error {
|
|
defer conn.Close()
|
|
|
|
reader := bufio.NewReader(conn)
|
|
req, err := http.ReadRequest(reader)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// 检查认证
|
|
if h.username != "" && h.password != "" {
|
|
if !h.checkAuth(req) {
|
|
conn.Write([]byte("HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"proxy\"\r\n\r\n"))
|
|
return errors.New("authentication required")
|
|
}
|
|
}
|
|
|
|
if req.Method == http.MethodConnect {
|
|
return h.handleConnect(conn, req)
|
|
}
|
|
return h.handleHTTP(conn, req, reader)
|
|
}
|
|
|
|
// checkAuth 检查 Proxy-Authorization 头
|
|
func (h *HTTPServer) checkAuth(req *http.Request) bool {
|
|
auth := req.Header.Get("Proxy-Authorization")
|
|
if auth == "" {
|
|
return false
|
|
}
|
|
|
|
const prefix = "Basic "
|
|
if !strings.HasPrefix(auth, prefix) {
|
|
return false
|
|
}
|
|
|
|
decoded, err := base64.StdEncoding.DecodeString(auth[len(prefix):])
|
|
if err != nil {
|
|
return false
|
|
}
|
|
|
|
credentials := strings.SplitN(string(decoded), ":", 2)
|
|
if len(credentials) != 2 {
|
|
return false
|
|
}
|
|
|
|
return credentials[0] == h.username && credentials[1] == h.password
|
|
}
|
|
|
|
// handleConnect 处理 CONNECT 方法 (HTTPS)
|
|
func (h *HTTPServer) handleConnect(conn net.Conn, req *http.Request) error {
|
|
target := req.Host
|
|
if !strings.Contains(target, ":") {
|
|
target = target + ":443"
|
|
}
|
|
|
|
remote, err := h.dialer.Dial("tcp", target)
|
|
if err != nil {
|
|
conn.Write([]byte("HTTP/1.1 502 Bad Gateway\r\n\r\n"))
|
|
return err
|
|
}
|
|
defer remote.Close()
|
|
|
|
conn.Write([]byte("HTTP/1.1 200 Connection Established\r\n\r\n"))
|
|
|
|
// 双向转发 (带流量统计)
|
|
relay.RelayWithStats(conn, remote, h.onStats)
|
|
return nil
|
|
}
|
|
|
|
// handleHTTP 处理普通 HTTP 请求
|
|
func (h *HTTPServer) handleHTTP(conn net.Conn, req *http.Request, reader *bufio.Reader) error {
|
|
target := req.Host
|
|
if !strings.Contains(target, ":") {
|
|
target = target + ":80"
|
|
}
|
|
|
|
remote, err := h.dialer.Dial("tcp", target)
|
|
if err != nil {
|
|
conn.Write([]byte("HTTP/1.1 502 Bad Gateway\r\n\r\n"))
|
|
return err
|
|
}
|
|
defer remote.Close()
|
|
|
|
// 修改请求路径为相对路径
|
|
req.URL.Scheme = ""
|
|
req.URL.Host = ""
|
|
req.RequestURI = req.URL.Path
|
|
if req.URL.RawQuery != "" {
|
|
req.RequestURI += "?" + req.URL.RawQuery
|
|
}
|
|
|
|
// 发送请求到目标
|
|
if err := req.Write(remote); err != nil {
|
|
return err
|
|
}
|
|
|
|
// 转发响应 (带流量统计)
|
|
n, err := io.Copy(conn, remote)
|
|
if h.onStats != nil && n > 0 {
|
|
h.onStats(0, n) // 响应数据为出站流量
|
|
}
|
|
return err
|
|
}
|