chenchenandClaude Opus 4.6
bda36c44be
- OAuth: safe type assertions for session state and affiliate code (oauth.go, github.go, discord.go, linuxdo.go, oidc.go) - Model: Scan() methods handle string values from DB drivers, not just []byte (channel.go ChannelInfo, task.go Properties/TaskPrivateData) - Model: safe type assertion in CleanupChannelPollingLocks sync.Map iteration - Relay: safe type assertions in audio_handler, AWS InvokeModel, ollama ConvertClaudeRequest, claude stop sequences, zhipu token cache - Service: fix slice bounds panic in Gemini->OpenAI stop sequences conversion - Service: safe type assertion in CleanupFileSources middleware - Middleware: add missing c.Abort() in turnstile session save failure - Middleware: safe type assertion in distributor channelId - Middleware: safe int comparison in auth helper Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
82 lines
1.7 KiB
Go
82 lines
1.7 KiB
Go
package middleware
|
|
|
|
import (
|
|
"net/http"
|
|
"net/url"
|
|
|
|
"github.com/heicode/manager/common"
|
|
"github.com/gin-contrib/sessions"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
type turnstileCheckResponse struct {
|
|
Success bool `json:"success"`
|
|
}
|
|
|
|
func TurnstileCheck() gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
if common.TurnstileCheckEnabled {
|
|
session := sessions.Default(c)
|
|
turnstileChecked := session.Get("turnstile")
|
|
if turnstileChecked != nil {
|
|
c.Next()
|
|
return
|
|
}
|
|
response := c.Query("turnstile")
|
|
if response == "" {
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": false,
|
|
"message": "Turnstile token 为空",
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
rawRes, err := http.PostForm("https://challenges.cloudflare.com/turnstile/v0/siteverify", url.Values{
|
|
"secret": {common.TurnstileSecretKey},
|
|
"response": {response},
|
|
"remoteip": {c.ClientIP()},
|
|
})
|
|
if err != nil {
|
|
common.SysLog(err.Error())
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": false,
|
|
"message": err.Error(),
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
defer rawRes.Body.Close()
|
|
var res turnstileCheckResponse
|
|
err = common.DecodeJson(rawRes.Body, &res)
|
|
if err != nil {
|
|
common.SysLog(err.Error())
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": false,
|
|
"message": err.Error(),
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
if !res.Success {
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": false,
|
|
"message": "Turnstile 校验失败，请刷新重试！",
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
session.Set("turnstile", true)
|
|
err = session.Save()
|
|
if err != nil {
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"message": "无法保存会话信息，请重试",
|
|
"success": false,
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
}
|
|
c.Next()
|
|
}
|
|
}
|