39310d5b9a
- Node group CRUD operations with traffic-based filtering - Three grouping modes: average distribution, subscription-based, and traffic-based - Automatic and manual group recalculation with history tracking - Group assignment preview before applying changes - User subscription group locking to prevent automatic reassignment - Subscribe-to-group mapping configuration - Group calculation history and detailed reports - System configuration for group management (enabled/mode/auto_create) Database: - Add node_group table for group definitions - Add group_history and group_history_detail tables for tracking - Add node_group_ids (JSON) to nodes and subscribe tables - Add node_group_id and group_locked fields to user_subscribe table - Add migration files for schema changes
79 lines
2.0 KiB
Go
79 lines
2.0 KiB
Go
package turnstile
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"crypto/rand"
|
|
"encoding/json"
|
|
"fmt"
|
|
"mime/multipart"
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
type service struct {
|
|
timeout time.Duration
|
|
secret string
|
|
url string
|
|
}
|
|
|
|
func newService(config Config) Service {
|
|
if config.Timeout == 0 {
|
|
config.Timeout = 10 * time.Second
|
|
}
|
|
return &service{
|
|
secret: config.Secret,
|
|
timeout: config.Timeout,
|
|
url: "https://challenges.cloudflare.com/turnstile/v0/siteverify",
|
|
}
|
|
}
|
|
|
|
func (s *service) Verify(ctx context.Context, token string, ip string) (bool, error) {
|
|
return s.verify(ctx, s.secret, token, ip, "")
|
|
}
|
|
|
|
func (s *service) VerifyIdempotent(ctx context.Context, token string, ip string, key string) (bool, error) {
|
|
return s.verify(ctx, s.secret, token, ip, key)
|
|
}
|
|
|
|
func (s *service) RandomUUID() string {
|
|
uuid := make([]byte, 16)
|
|
_, _ = rand.Read(uuid)
|
|
uuid[6] = (uuid[6] & 0x0f) | 0x40
|
|
uuid[8] = (uuid[8] & 0x3f) | 0x80
|
|
return fmt.Sprintf("%x-%x-%x-%x-%x", uuid[0:4], uuid[4:6], uuid[6:8], uuid[8:10], uuid[10:])
|
|
}
|
|
|
|
func (s *service) verify(ctx context.Context, secret string, token string, ip string, key string) (bool, error) {
|
|
_, cancel := context.WithTimeout(ctx, s.timeout)
|
|
defer cancel()
|
|
body := &bytes.Buffer{}
|
|
writer := multipart.NewWriter(body)
|
|
_ = writer.WriteField("secret", secret)
|
|
_ = writer.WriteField("response", token)
|
|
_ = writer.WriteField("remoteip", ip)
|
|
if key != "" {
|
|
_ = writer.WriteField("idempotency_key", key)
|
|
}
|
|
_ = writer.Close()
|
|
client := &http.Client{
|
|
Timeout: 5 * time.Second,
|
|
}
|
|
req, _ := http.NewRequest("POST", s.url, body)
|
|
req.Header.Set("Content-Type", writer.FormDataContentType())
|
|
firstResult, err := client.Do(req)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
defer firstResult.Body.Close()
|
|
firstOutcome := make(map[string]interface{})
|
|
err = json.NewDecoder(firstResult.Body).Decode(&firstOutcome)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
if success, ok := firstOutcome["success"].(bool); ok && success {
|
|
return true, nil
|
|
}
|
|
return false, nil
|
|
}
|