yangjianbo
25e1632628
增加请求阶段 DNS 解析校验，阻断重绑定到私网 补充默认透传 WWW-Authenticate 头，保留认证挑战 前端相对 URL 过滤拒绝 // 协议相对路径 测试: go test ./internal/repository -run TestGitHubReleaseServiceSuite 测试: go test ./internal/repository -run TestTurnstileServiceSuite 测试: go test ./internal/repository -run TestProxyProbeServiceSuite 测试: go test ./internal/repository -run TestClaudeUsageServiceSuite
86 lines
1.9 KiB
Go
86 lines
1.9 KiB
Go
package repository
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/Wei-Shaw/sub2api/internal/config"
|
|
"github.com/Wei-Shaw/sub2api/internal/pkg/httpclient"
|
|
"github.com/Wei-Shaw/sub2api/internal/service"
|
|
)
|
|
|
|
type pricingRemoteClient struct {
|
|
httpClient *http.Client
|
|
}
|
|
|
|
func NewPricingRemoteClient(cfg *config.Config) service.PricingRemoteClient {
|
|
allowPrivate := false
|
|
if cfg != nil {
|
|
allowPrivate = cfg.Security.URLAllowlist.AllowPrivateHosts
|
|
}
|
|
sharedClient, err := httpclient.GetClient(httpclient.Options{
|
|
Timeout: 30 * time.Second,
|
|
ValidateResolvedIP: true,
|
|
AllowPrivateHosts: allowPrivate,
|
|
})
|
|
if err != nil {
|
|
sharedClient = &http.Client{Timeout: 30 * time.Second}
|
|
}
|
|
return &pricingRemoteClient{
|
|
httpClient: sharedClient,
|
|
}
|
|
}
|
|
|
|
func (c *pricingRemoteClient) FetchPricingJSON(ctx context.Context, url string) ([]byte, error) {
|
|
req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
resp, err := c.httpClient.Do(req)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer func() { _ = resp.Body.Close() }()
|
|
|
|
if resp.StatusCode != http.StatusOK {
|
|
return nil, fmt.Errorf("HTTP %d", resp.StatusCode)
|
|
}
|
|
|
|
return io.ReadAll(resp.Body)
|
|
}
|
|
|
|
func (c *pricingRemoteClient) FetchHashText(ctx context.Context, url string) (string, error) {
|
|
req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
resp, err := c.httpClient.Do(req)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
defer func() { _ = resp.Body.Close() }()
|
|
|
|
if resp.StatusCode != http.StatusOK {
|
|
return "", fmt.Errorf("HTTP %d", resp.StatusCode)
|
|
}
|
|
|
|
body, err := io.ReadAll(resp.Body)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
// 哈希文件格式：hash filename 或者纯 hash
|
|
hash := strings.TrimSpace(string(body))
|
|
parts := strings.Fields(hash)
|
|
if len(parts) > 0 {
|
|
return parts[0], nil
|
|
}
|
|
return hash, nil
|
|
}
|