bivashy/Blitz-Proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Modified the Go authentication server

Browse Source
This commit is contained in:
Whispering Wind
2025-09-07 23:39:58 +03:30
committed by GitHub
parent 8d657860aa
commit ed37def474
1 changed files with 42 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

80
core/scripts/auth/user_auth.go
View File

@ -1,6 +1,7 @@
package main package main
import ( import (
"context"
"crypto/subtle" "crypto/subtle"
"encoding/json" "encoding/json"
"io" "io"
@ -8,25 +9,30 @@ import (
"net/http" "net/http"
"os" "os"
"strings" "strings"
"sync"
"time" "time"
"go.mongodb.org/mongo-driver/bson"
"go.mongodb.org/mongo-driver/mongo"
"go.mongodb.org/mongo-driver/mongo/options"
) )
const ( const (
listenAddr = "127.0.0.1:28262" listenAddr = "127.0.0.1:28262"
usersFile = "/etc/hysteria/users.json" mongoURI = "mongodb://localhost:27017"
cacheTTL = 5 * time.Second dbName = "blitz_panel"
collectionName = "users"
) )
type User struct { type User struct {
Password string `json:"password"` ID string `bson:"_id"`
MaxDownloadBytes int64 `json:"max_download_bytes"` Password string `bson:"password"`
ExpirationDays int `json:"expiration_days"` MaxDownloadBytes int64 `bson:"max_download_bytes"`
AccountCreationDate string `json:"account_creation_date"` ExpirationDays int `bson:"expiration_days"`
Blocked bool `json:"blocked"` AccountCreationDate string `bson:"account_creation_date"`
UploadBytes int64 `json:"upload_bytes"` Blocked bool `bson:"blocked"`
DownloadBytes int64 `json:"download_bytes"` UploadBytes int64 `bson:"upload_bytes"`
UnlimitedUser bool `json:"unlimited_user"` DownloadBytes int64 `bson:"download_bytes"`
UnlimitedUser bool `bson:"unlimited_user"`
} }
type httpAuthRequest struct { type httpAuthRequest struct {
@ -40,24 +46,7 @@ type httpAuthResponse struct {
ID string `json:"id"` ID string `json:"id"`
} }
var ( var userCollection *mongo.Collection
userCache map[string]User
cacheMutex = &sync.RWMutex{}
)
func loadUsersToCache() {
data, err := os.ReadFile(usersFile)
if err != nil {
return
}
var users map[string]User
if err := json.Unmarshal(data, &users); err != nil {
return
}
cacheMutex.Lock()
userCache = users
cacheMutex.Unlock()
}
func authHandler(w http.ResponseWriter, r *http.Request) { func authHandler(w http.ResponseWriter, r *http.Request) {
if r.Method != http.MethodPost { if r.Method != http.MethodPost {
@ -77,11 +66,12 @@ func authHandler(w http.ResponseWriter, r *http.Request) {
return return
} }
cacheMutex.RLock() var user User
user, ok := userCache[username] ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
cacheMutex.RUnlock() defer cancel()
if !ok { err := userCollection.FindOne(ctx, bson.M{"_id": username}).Decode(&user)
if err != nil {
json.NewEncoder(w).Encode(httpAuthResponse{OK: false}) json.NewEncoder(w).Encode(httpAuthResponse{OK: false})
return return
} }
@ -92,7 +82,7 @@ func authHandler(w http.ResponseWriter, r *http.Request) {
} }
if subtle.ConstantTimeCompare([]byte(user.Password), []byte(password)) != 1 { if subtle.ConstantTimeCompare([]byte(user.Password), []byte(password)) != 1 {
time.Sleep(5 * time.Second) // Slow down brute-force attacks time.Sleep(5 * time.Second)
json.NewEncoder(w).Encode(httpAuthResponse{OK: false}) json.NewEncoder(w).Encode(httpAuthResponse{OK: false})
return return
} }
@ -122,18 +112,26 @@ func authHandler(w http.ResponseWriter, r *http.Request) {
func main() { func main() {
log.SetOutput(io.Discard) log.SetOutput(io.Discard)
loadUsersToCache()
ticker := time.NewTicker(cacheTTL) clientOptions := options.Client().ApplyURI(mongoURI)
go func() { client, err := mongo.Connect(context.TODO(), clientOptions)
for range ticker.C { if err != nil {
loadUsersToCache() log.SetOutput(os.Stderr)
log.Fatalf("Failed to connect to MongoDB: %v", err)
} }
}()
err = client.Ping(context.TODO(), nil)
if err != nil {
log.SetOutput(os.Stderr)
log.Fatalf("Failed to ping MongoDB: %v", err)
}
userCollection = client.Database(dbName).Collection(collectionName)
http.HandleFunc("/auth", authHandler) http.HandleFunc("/auth", authHandler)
if err := http.ListenAndServe(listenAddr, nil); err != nil {
log.SetOutput(os.Stderr) log.SetOutput(os.Stderr)
log.Printf("Auth server starting on %s", listenAddr)
if err := http.ListenAndServe(listenAddr, nil); err != nil {
log.Fatalf("Failed to start server: %v", err) log.Fatalf("Failed to start server: %v", err)
} }
} }