mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-28 05:46:36 +08:00
ryan
232 lines
7.7 KiB
Go
232 lines
7.7 KiB
Go
package openresty
|
|
|
|
import (
|
|
"fmt"
|
|
"strconv"
|
|
"strings"
|
|
)
|
|
|
|
const (
|
|
// OriginErrorPageSupportPath is the SupportFile path for the origin error HTML template.
|
|
OriginErrorPageSupportPath = "error_pages/origin_error.html.tmpl"
|
|
|
|
// OriginErrorPageInternalLocation is the internal nginx location that serves the error body.
|
|
OriginErrorPageInternalLocation = "/__openflare_origin_error"
|
|
|
|
defaultOriginErrorPageStatusTag = "500-599"
|
|
)
|
|
|
|
// DefaultOriginErrorPageHTML is the built-in default (aligned with frontend minimalist).
|
|
// Placeholders {{status}} and {{host}} are substituted at request time by Lua.
|
|
const DefaultOriginErrorPageHTML = `<!DOCTYPE html>
|
|
<html lang="zh-CN">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>{{status}} | OpenFlare</title>
|
|
<style>
|
|
* { box-sizing: border-box; margin: 0; padding: 0; }
|
|
body {
|
|
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
|
|
background-color: #ffffff;
|
|
color: #333333;
|
|
height: 100vh;
|
|
display: flex;
|
|
flex-direction: column;
|
|
justify-content: center;
|
|
align-items: center;
|
|
text-align: center;
|
|
padding: 48px 24px;
|
|
-webkit-font-smoothing: antialiased;
|
|
}
|
|
.container {
|
|
max-width: 600px;
|
|
width: 100%;
|
|
display: flex;
|
|
flex-direction: column;
|
|
align-items: center;
|
|
gap: 24px;
|
|
}
|
|
.error-code {
|
|
font-size: 48px;
|
|
font-weight: 700;
|
|
color: #333333;
|
|
line-height: 1.2;
|
|
letter-spacing: -0.02em;
|
|
}
|
|
.error-description {
|
|
font-size: 20px;
|
|
line-height: 1.6;
|
|
color: #666666;
|
|
max-width: 480px;
|
|
}
|
|
.host {
|
|
font-size: 14px;
|
|
color: #999999;
|
|
font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
|
|
word-break: break-all;
|
|
}
|
|
.footer {
|
|
margin-top: 48px;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
gap: 8px;
|
|
color: #999999;
|
|
font-size: 14px;
|
|
font-weight: 500;
|
|
}
|
|
.brand-icon { width: 24px; height: 24px; fill: currentColor; display: block; }
|
|
@media (max-width: 480px) {
|
|
.error-code { font-size: 36px; }
|
|
.error-description { font-size: 18px; }
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="container">
|
|
<h1 class="error-code" aria-label="HTTP status">{{status}}</h1>
|
|
<p class="error-description">
|
|
The upstream server is unreachable. Please try again later or contact the site administrator if the problem persists.
|
|
</p>
|
|
<p class="host">{{host}}</p>
|
|
<div class="footer">
|
|
<svg class="brand-icon" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" aria-hidden="true">
|
|
<path d="M13 2L3 14H12L11 22L21 10H12L13 2Z" />
|
|
</svg>
|
|
<span>OpenFlare</span>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
`
|
|
|
|
// EffectiveOriginErrorPageHTML returns custom HTML when set, otherwise the built-in default.
|
|
func EffectiveOriginErrorPageHTML(cfg ConfigSnapshot) string {
|
|
if strings.TrimSpace(cfg.OriginErrorPageHTML) == "" {
|
|
return DefaultOriginErrorPageHTML
|
|
}
|
|
return cfg.OriginErrorPageHTML
|
|
}
|
|
|
|
func effectiveOriginErrorPageStatusTags(cfg ConfigSnapshot) []string {
|
|
if len(cfg.OriginErrorPageStatusCodes) == 0 {
|
|
return []string{defaultOriginErrorPageStatusTag}
|
|
}
|
|
return cfg.OriginErrorPageStatusCodes
|
|
}
|
|
|
|
func originErrorPageSupportFile(cfg ConfigSnapshot) SupportFile {
|
|
return SupportFile{
|
|
Path: OriginErrorPageSupportPath,
|
|
Content: EffectiveOriginErrorPageHTML(cfg),
|
|
}
|
|
}
|
|
|
|
func renderOriginErrorPageIntercept(cfg ConfigSnapshot) string {
|
|
if !cfg.OriginErrorPageEnabled {
|
|
return ""
|
|
}
|
|
if _, err := ExpandStatusCodeTags(effectiveOriginErrorPageStatusTags(cfg)); err != nil {
|
|
return ""
|
|
}
|
|
// Intercept at the proxy level for all methods. nginx does not allow
|
|
// proxy_intercept_errors inside limit_except (only allow/deny are valid
|
|
// there), so GET-only is enforced in the internal error location's Lua:
|
|
// non-GET requests exit with the original status and no custom HTML.
|
|
return " proxy_intercept_errors on;\n"
|
|
}
|
|
|
|
// renderOriginErrorPageServerBits emits server-level error_page + internal location.
|
|
// Returns empty string when disabled, expand fails, or no codes remain.
|
|
//
|
|
// IMPORTANT: do NOT use `error_page CODE = /uri` (equals without response code).
|
|
// That form adopts the status returned by the error URI; content_by_lua defaults
|
|
// to 200 and ngx.status is often 0, so clients saw 200 with body "{{status}}"→"0".
|
|
// Without `=`, nginx keeps the original error status for the internal redirect.
|
|
func renderOriginErrorPageServerBits(cfg ConfigSnapshot) string {
|
|
if !cfg.OriginErrorPageEnabled {
|
|
return ""
|
|
}
|
|
codes, err := ExpandStatusCodeTags(effectiveOriginErrorPageStatusTags(cfg))
|
|
if err != nil || len(codes) == 0 {
|
|
return ""
|
|
}
|
|
parts := make([]string, len(codes))
|
|
for i, code := range codes {
|
|
parts[i] = strconv.Itoa(code)
|
|
}
|
|
var builder strings.Builder
|
|
// No `=` — preserve original error status (502 stays 502).
|
|
fmt.Fprintf(&builder, " error_page %s %s;\n", strings.Join(parts, " "), OriginErrorPageInternalLocation)
|
|
builder.WriteString(renderOriginErrorPageInternalLocation(cfg.OriginErrorPageGetOnly))
|
|
return builder.String()
|
|
}
|
|
|
|
func renderOriginErrorPageInternalLocation(getOnly bool) string {
|
|
// Resolve status from $status (set by error_page internal redirect), then
|
|
// upstream_status, then ngx.status. Force ngx.status so the client receives
|
|
// the real error code. Use function replacers so host/status with `%` are safe.
|
|
//
|
|
// Note: fmt.Sprintf is used only for the path placeholders; Lua `%` must be
|
|
// written as `%%` so Sprintf does not treat them as format verbs.
|
|
//
|
|
// When getOnly is true, non-GET that still hit this location (e.g. nginx-local
|
|
// 502 without upstream body) exit with the original status and no HTML body.
|
|
getOnlyLua := "false"
|
|
if getOnly {
|
|
getOnlyLua = "true"
|
|
}
|
|
return fmt.Sprintf(` location = %s {
|
|
internal;
|
|
default_type text/html;
|
|
charset utf-8;
|
|
content_by_lua_block {
|
|
local get_only = %s
|
|
local function resolve_error_status()
|
|
local code = tonumber(ngx.var.status)
|
|
if code and code >= 400 then
|
|
return code
|
|
end
|
|
local upstream = ngx.var.upstream_status or ""
|
|
-- multi-upstream: "502, 502" or failed connect "0"
|
|
local first = upstream:match("(%%d+)")
|
|
code = tonumber(first)
|
|
if code and code >= 400 then
|
|
return code
|
|
end
|
|
code = tonumber(ngx.status)
|
|
if code and code >= 400 then
|
|
return code
|
|
end
|
|
return 502
|
|
end
|
|
|
|
local code = resolve_error_status()
|
|
ngx.status = code
|
|
|
|
if get_only and ngx.req.get_method() ~= "GET" then
|
|
-- Non-GET: do not replace with HTML; exit with status only.
|
|
return ngx.exit(code)
|
|
end
|
|
|
|
local f = io.open("%s", "r")
|
|
if not f then
|
|
ngx.header["Content-Type"] = "text/html; charset=utf-8"
|
|
ngx.say("Error ", tostring(code))
|
|
return
|
|
end
|
|
local body = f:read("*a")
|
|
f:close()
|
|
local status = tostring(code)
|
|
local host = ngx.var.host or ""
|
|
-- function replacer: plain insert, no percent pattern side effects
|
|
body = body:gsub("{{status}}", function() return status end)
|
|
body = body:gsub("{{host}}", function() return host end)
|
|
ngx.header["Content-Type"] = "text/html; charset=utf-8"
|
|
ngx.say(body)
|
|
}
|
|
}
|
|
`, OriginErrorPageInternalLocation, getOnlyLua, ErrorPageTmplPlaceholder)
|
|
}
|