mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-29 14:06:36 +08:00
ryan
361 lines
10 KiB
TypeScript
361 lines
10 KiB
TypeScript
import type {
|
|
ProxyRouteConfigSection,
|
|
ProxyRouteCustomHeader,
|
|
ProxyRouteItem,
|
|
ProxyRouteMutationPayload,
|
|
ZoneDomainItem,
|
|
} from '@/lib/services/openflare';
|
|
import { ZoneService } from '@/lib/services/openflare';
|
|
|
|
export const proxyRouteConfigSections = [
|
|
{
|
|
key: 'domains' as const,
|
|
label: '域名设置',
|
|
description: '维护站点标识，并从 Zone 中选择绑定域名。',
|
|
},
|
|
{
|
|
key: 'limits' as const,
|
|
label: '流量限制',
|
|
description: '设置连接数和限速。',
|
|
},
|
|
{
|
|
key: 'proxy' as const,
|
|
label: '反向代理',
|
|
description: '配置主回源和上游地址。',
|
|
},
|
|
{
|
|
key: 'cache' as const,
|
|
label: '缓存',
|
|
description: '配置站点缓存策略。',
|
|
},
|
|
{
|
|
key: 'waf' as const,
|
|
label: 'WAF',
|
|
description: '绑定 WAF 规则组，并查看当前站点生效策略。',
|
|
},
|
|
{
|
|
key: 'auth' as const,
|
|
label: '认证配置',
|
|
description: '配置基础鉴权访问，需要输入账号密码才能访问网站。',
|
|
},
|
|
] satisfies ReadonlyArray<{
|
|
key: ProxyRouteConfigSection;
|
|
label: string;
|
|
description: string;
|
|
}>;
|
|
|
|
const domainPattern =
|
|
/^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/i;
|
|
|
|
export function getProxyRouteConfigSection(
|
|
value: string | null | undefined,
|
|
): ProxyRouteConfigSection {
|
|
return proxyRouteConfigSections.some((section) => section.key === value)
|
|
? (value as ProxyRouteConfigSection)
|
|
: 'domains';
|
|
}
|
|
|
|
export function validateDomain(domain: string): string | null {
|
|
const normalized = domain.trim().toLowerCase();
|
|
if (!normalized) {
|
|
return '请输入域名';
|
|
}
|
|
if (!domainPattern.test(normalized)) {
|
|
return '域名格式不合法';
|
|
}
|
|
return null;
|
|
}
|
|
|
|
export function parseOriginUrl(originUrl: string) {
|
|
const parsed = new URL(originUrl);
|
|
const port = parsed.port || (parsed.protocol === 'http:' ? '80' : '443');
|
|
const path = parsed.pathname === '/' ? '' : parsed.pathname;
|
|
|
|
return {
|
|
scheme: parsed.protocol.replace(':', '') as 'http' | 'https',
|
|
address: parsed.hostname,
|
|
port,
|
|
uri: parsed.search ? `${path}${parsed.search}` || parsed.search : path,
|
|
};
|
|
}
|
|
|
|
/** Domain FQDNs bound to a proxy route (from zone_domains). */
|
|
export function getRouteDomainNames(route: ProxyRouteItem): string[] {
|
|
return (route.zone_domains ?? []).map((item) => item.domain).filter(Boolean);
|
|
}
|
|
|
|
export function getRoutePrimaryDomain(route: ProxyRouteItem): string {
|
|
return getRouteDomainNames(route)[0] ?? '';
|
|
}
|
|
|
|
export function getRouteDomainsLabel(route: ProxyRouteItem): string {
|
|
const names = getRouteDomainNames(route);
|
|
return names.length > 0 ? names.join(', ') : '未绑定域名';
|
|
}
|
|
|
|
/** Upstream address labels for display (supports multi-upstream). */
|
|
export function getUpstreamLabels(route: ProxyRouteItem): string[] {
|
|
if (route.upstream_type === 'pages') {
|
|
return [
|
|
route.pages_project_id
|
|
? `Pages 项目 #${route.pages_project_id}`
|
|
: 'Pages 项目未绑定',
|
|
];
|
|
}
|
|
if (route.upstream_type === 'tunnel') {
|
|
const protocol = route.tunnel_target_protocol || 'http';
|
|
const target = route.tunnel_target_addr || '未配置目标';
|
|
return [`Tunnel → ${protocol}://${target}`];
|
|
}
|
|
const list = (route.upstream_list ?? []).filter(Boolean);
|
|
if (list.length > 0) {
|
|
return list;
|
|
}
|
|
return route.origin_url ? [route.origin_url] : [];
|
|
}
|
|
|
|
export function getUpstreamSummary(route: ProxyRouteItem): string {
|
|
const labels = getUpstreamLabels(route);
|
|
if (labels.length === 0) {
|
|
return '未配置上游';
|
|
}
|
|
if (labels.length === 1) {
|
|
return labels[0];
|
|
}
|
|
return labels.join(' · ');
|
|
}
|
|
|
|
const originHostPattern =
|
|
/^(?:(?:[a-z0-9-]+\.)*[a-z0-9-]+|\[[0-9a-f:.]+\]|[0-9.]+)(?::\d{1,5})?$/i;
|
|
const headerKeyPattern = /^[A-Za-z0-9_-]+$/;
|
|
const limitRatePattern = /^\d+(?:[kKmM])?$/;
|
|
|
|
export function getErrorMessage(error: unknown) {
|
|
return error instanceof Error ? error.message : '请求失败，请稍后重试。';
|
|
}
|
|
|
|
export function linesFromTextarea(value: string) {
|
|
return value
|
|
.split(/\r?\n/)
|
|
.map((item) => item.trim())
|
|
.filter(Boolean);
|
|
}
|
|
|
|
export function validateDomains(domains: string[]) {
|
|
if (domains.length === 0) {
|
|
return '请至少填写一个域名';
|
|
}
|
|
|
|
const seen = new Set<string>();
|
|
for (const domain of domains) {
|
|
const normalized = domain.trim().toLowerCase();
|
|
const error = validateDomain(normalized);
|
|
if (error && normalized) {
|
|
return `域名格式不合法：${domain}`;
|
|
}
|
|
if (!normalized) {
|
|
continue;
|
|
}
|
|
if (seen.has(normalized)) {
|
|
return `域名重复：${domain}`;
|
|
}
|
|
seen.add(normalized);
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
export function parseOriginUrls(value: string) {
|
|
const urls = linesFromTextarea(value);
|
|
if (urls.length === 0) {
|
|
return { urls: [], error: '请至少填写一个上游地址' };
|
|
}
|
|
|
|
let sharedScheme = '';
|
|
for (const originUrl of urls) {
|
|
let parsed: URL;
|
|
try {
|
|
parsed = new URL(originUrl);
|
|
} catch {
|
|
return { urls: [], error: `上游地址格式不合法：${originUrl}` };
|
|
}
|
|
|
|
if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
|
|
return {
|
|
urls: [],
|
|
error: `上游地址必须以 http:// 或 https:// 开头：${originUrl}`,
|
|
};
|
|
}
|
|
|
|
if (!parsed.hostname) {
|
|
return { urls: [], error: `上游地址缺少主机名：${originUrl}` };
|
|
}
|
|
|
|
if (urls.length > 1) {
|
|
if ((parsed.pathname && parsed.pathname !== '/') || parsed.search) {
|
|
return {
|
|
urls: [],
|
|
error: '多上游模式暂不支持带路径或查询参数的地址',
|
|
};
|
|
}
|
|
|
|
if (!sharedScheme) {
|
|
sharedScheme = parsed.protocol;
|
|
} else if (sharedScheme !== parsed.protocol) {
|
|
return {
|
|
urls: [],
|
|
error: '同一站点的多个上游必须使用相同协议',
|
|
};
|
|
}
|
|
}
|
|
}
|
|
|
|
return { urls, error: null };
|
|
}
|
|
|
|
export function validateOriginHost(value: string) {
|
|
const normalized = value.trim();
|
|
if (!normalized) {
|
|
return null;
|
|
}
|
|
if (
|
|
normalized.includes('://') ||
|
|
/[/\\\s]/.test(normalized) ||
|
|
!originHostPattern.test(normalized)
|
|
) {
|
|
return '回源 Host 格式不合法';
|
|
}
|
|
return null;
|
|
}
|
|
|
|
export function parseCustomHeadersText(value: string) {
|
|
const lines = linesFromTextarea(value);
|
|
const headers: ProxyRouteCustomHeader[] = [];
|
|
|
|
for (const line of lines) {
|
|
const separatorIndex = line.indexOf(':');
|
|
if (separatorIndex <= 0) {
|
|
return {
|
|
headers: [],
|
|
error: `自定义请求头格式不合法：${line}`,
|
|
};
|
|
}
|
|
|
|
const key = line.slice(0, separatorIndex).trim();
|
|
const headerValue = line.slice(separatorIndex + 1).trim();
|
|
|
|
if (!headerKeyPattern.test(key)) {
|
|
return {
|
|
headers: [],
|
|
error: `自定义请求头名称不合法：${key}`,
|
|
};
|
|
}
|
|
|
|
headers.push({ key, value: headerValue });
|
|
}
|
|
|
|
return { headers, error: null };
|
|
}
|
|
|
|
export function customHeadersToText(headers: ProxyRouteCustomHeader[]) {
|
|
return headers.map((header) => `${header.key}: ${header.value}`).join('\n');
|
|
}
|
|
|
|
export function validateLimitRate(value: string) {
|
|
const normalized = value.trim();
|
|
if (!normalized || normalized === '0') {
|
|
return null;
|
|
}
|
|
if (!limitRatePattern.test(normalized)) {
|
|
return '限速格式不合法，请使用 512k、1m 或纯数字';
|
|
}
|
|
return null;
|
|
}
|
|
|
|
export function normalizeLimitRate(value: string) {
|
|
const normalized = value.trim().toLowerCase();
|
|
return normalized === '0' ? '' : normalized;
|
|
}
|
|
|
|
export function validateCacheRules(
|
|
policy: 'url' | 'suffix' | 'path_prefix' | 'path_exact',
|
|
rules: string[],
|
|
) {
|
|
if (policy === 'url') {
|
|
return null;
|
|
}
|
|
|
|
if (rules.length === 0) {
|
|
return '当前缓存策略至少需要一条规则';
|
|
}
|
|
|
|
if (policy === 'suffix') {
|
|
for (const rule of rules) {
|
|
const normalized = rule.replace(/^\./, '');
|
|
if (!normalized || /[/\\\s]/.test(normalized)) {
|
|
return `缓存后缀格式不合法：${rule}`;
|
|
}
|
|
}
|
|
return null;
|
|
}
|
|
|
|
for (const rule of rules) {
|
|
if (!rule.startsWith('/') || rule.includes('://') || /[\s]/.test(rule)) {
|
|
return `缓存路径规则格式不合法：${rule}`;
|
|
}
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
export function buildPayloadFromRoute(
|
|
route: ProxyRouteItem,
|
|
overrides: Partial<ProxyRouteMutationPayload>,
|
|
): ProxyRouteMutationPayload {
|
|
const primaryOrigin =
|
|
route.upstream_type === 'pages'
|
|
? parseOriginUrl('http://127.0.0.1')
|
|
: parseOriginUrl(route.origin_url || 'http://127.0.0.1');
|
|
|
|
return {
|
|
site_name: route.site_name,
|
|
zone_domain_ids: route.zone_domain_ids ?? [],
|
|
origin_id: null,
|
|
origin_url: route.origin_url,
|
|
origin_scheme: primaryOrigin.scheme,
|
|
origin_address: primaryOrigin.address,
|
|
origin_port: primaryOrigin.port,
|
|
origin_uri: primaryOrigin.uri,
|
|
origin_host: route.origin_host || '',
|
|
upstreams: (route.upstream_list ?? []).slice(1),
|
|
enabled: route.enabled,
|
|
enable_https: route.enable_https,
|
|
redirect_http: route.redirect_http,
|
|
limit_conn_per_server: route.limit_conn_per_server,
|
|
limit_conn_per_ip: route.limit_conn_per_ip,
|
|
limit_rate: route.limit_rate,
|
|
cache_enabled: route.cache_enabled,
|
|
cache_policy: route.cache_policy || 'url',
|
|
cache_rules: route.cache_rule_list ?? [],
|
|
custom_headers: route.custom_header_list ?? [],
|
|
basic_auth_enabled: route.basic_auth_enabled,
|
|
basic_auth_username: route.basic_auth_username,
|
|
basic_auth_password: route.basic_auth_password,
|
|
upstream_type: route.upstream_type,
|
|
tunnel_node_id: route.tunnel_node_id ?? route.tunnel_id ?? null,
|
|
tunnel_target_addr: route.tunnel_target_addr || '',
|
|
tunnel_target_protocol: route.tunnel_target_protocol || '',
|
|
pages_project_id: route.pages_project_id ?? null,
|
|
...overrides,
|
|
};
|
|
}
|
|
|
|
/** Load all Zone domains across registered Zones for route binding selectors. */
|
|
export async function listAllZoneDomains(): Promise<ZoneDomainItem[]> {
|
|
const zones = await ZoneService.list();
|
|
const overviews = await Promise.all(
|
|
zones.map((zone) => ZoneService.getOverview(zone.id)),
|
|
);
|
|
return overviews.flatMap((overview) => overview.domains ?? []);
|
|
}
|