mirrors/hysteria
1
0
Fork 0
mirror of https://github.com/apernet/hysteria.git synced 2025-04-04 04:57:40 +03:00
Code Issues Projects Releases Packages Wiki Activity

feat: traffic stats API secret auth

Browse source
This commit is contained in:
Toby 2023-10-29 21:10:28 -07:00
parent a633d3e320
commit 9ff8020803
4 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app/cmd/server.go
View file

@ -177,6 +177,7 @@ type serverConfigOutboundEntry struct {
type serverConfigTrafficStats struct {
Listen string `mapstructure:"listen"`
Secret string `mapstructure:"secret"`
}
type serverConfigMasqueradeFile struct {
@ -596,7 +597,7 @@ func (c *serverConfig) fillEventLogger(hyConfig *server.Config) error {
func (c *serverConfig) fillTrafficLogger(hyConfig *server.Config) error {
if c.TrafficStats.Listen != "" {
tss := trafficlogger.NewTrafficStatsServer()
tss := trafficlogger.NewTrafficStatsServer(c.TrafficStats.Secret)
hyConfig.TrafficLogger = tss
go runTrafficStatsServer(c.TrafficStats.Listen, tss)
}

1
app/cmd/server_test.go
View file

@ -135,6 +135,7 @@ func TestServerConfig(t *testing.T) {
},
TrafficStats: serverConfigTrafficStats{
Listen: ":9999",
Secret: "its_me_mario",
},
Masquerade: serverConfigMasquerade{
Type: "proxy",

1
app/cmd/server_test.yaml
View file

@ -100,6 +100,7 @@ outbounds:
trafficStats:
listen: :9999
secret: its_me_mario
masquerade:
type: proxy

8
extras/trafficlogger/http.go
View file

@ -20,10 +20,11 @@ type TrafficStatsServer interface {
http.Handler
}
func NewTrafficStatsServer() TrafficStatsServer {
func NewTrafficStatsServer(secret string) TrafficStatsServer {
return &trafficStatsServerImpl{
StatsMap: make(map[string]*trafficStatsEntry),
KickMap: make(map[string]struct{}),
Secret: secret,
}
}
@ -31,6 +32,7 @@ type trafficStatsServerImpl struct {
Mutex sync.RWMutex
StatsMap map[string]*trafficStatsEntry
KickMap map[string]struct{}
Secret string
}
type trafficStatsEntry struct {
@ -60,6 +62,10 @@ func (s *trafficStatsServerImpl) Log(id string, tx, rx uint64) (ok bool) {
}
func (s *trafficStatsServerImpl) ServeHTTP(w http.ResponseWriter, r *http.Request) {
if s.Secret != "" && r.Header.Get("Authorization") != s.Secret {
http.Error(w, "unauthorized", http.StatusUnauthorized)
return
}
if r.Method == http.MethodGet && r.URL.Path == "/" {
_, _ = w.Write([]byte(indexHTML))
return