_worker.js

'use strict'

/**
 * static files (404.html, sw.js, conf.js)
 */
const ASSET_URL = 'https://etherdream.github.io/jsproxy'

const JS_VER = 10
const MAX_RETRY = 1

// 增加密码保护
var password = '123456'
const passwordCookieName = '__PROXY_PWD__'
//const loginPath = '/_proxy_login_'

/** @type {RequestInit} */
const PREFLIGHT_INIT = {
  status: 204,
  headers: new Headers({
    'access-control-allow-origin': '*',
    'access-control-allow-methods': 'GET,POST,PUT,PATCH,TRACE,DELETE,HEAD,OPTIONS',
    'access-control-max-age': '1728000',
  }),
}

/**
 * @param {any} body
 * @param {number} status
 * @param {Object<string, string>} headers
 */
function makeRes(body, status = 200, headers = {}) {
  headers['--ver'] = JS_VER
  headers['access-control-allow-origin'] = '*'
  return new Response(body, { status, headers })
}


/**
 * @param {string} urlStr
 */
function newUrl(urlStr) {
  try {
    return new URL(urlStr)
  } catch (err) {
    return null
  }
}


export default {
  /**
   * @param {FetchEvent} e
   */
  async fetch(request, env, ctx) {
    if (env.key && /^\w+$/.test(env.key)) {     // 环境变量设置key可以覆盖默认密码
      password = env.key;
    }

    const req = new Request(request)
    const urlStr = req.url
    const urlObj = new URL(urlStr)
    const path = urlObj.href.slice(urlObj.origin.length)
    //console.log('!!!: ',urlStr)

    // 默认icon
    if (urlObj.pathname == "/favicon.ico") {
      return gen_icon();
    }

    // 判断密码
    var siteCookie = req.headers.get('Cookie');
    if (password && password != "") {
      let pwd = null;

      // 1. 没输入过密码，则弹出密码窗；密码不对，则返回403，需要清除缓存再输入
      if (siteCookie && siteCookie != "") {
        let pwd = getCook(passwordCookieName, siteCookie);
        if (!pwd || pwd == "") {
          return nginx(200, pwdPage);
        } else if (pwd != password) {
          return nginx(403);
        }
      } else {
        return nginx(200, pwdPage);
      }

      // 2. 必须访问登录页才能弹出密码窗，但是容易跳谷歌搜索
      /*let isloginPage = new RegExp('^' + loginPath + '\/?$').test(urlObj.pathname);
      if (siteCookie != null && siteCookie != "") {
        pwd = getCook(passwordCookieName, siteCookie);
      }
      if (isloginPage) {
        if (pwd == password) {
          return Response.redirect(`${urlObj.origin}/`, 301);
        }
        else if (!pwd) {
          return nginx(200, pwdPage);
        }
        else {
          return nginx(403);
        }
      } else if (!(pwd == password)) {
        return nginx(401);
      }*/

    }

    // 删除密码cookie
    //console.log('cookie: ', req.headers.get('Cookie'))
    let tmpcookie = siteCookie.replaceAll(new RegExp(`${passwordCookieName}=[^;\\s]+;? ?`, 'g'), "");
    req.headers.set("Cookie", tmpcookie);
    //console.log('cookie2: ', req.headers.get('Cookie'))

    if (/*false &&*/ urlObj.protocol === 'http:') {
      urlObj.protocol = 'https:'
      return makeRes('', 301, {
        'strict-transport-security': 'max-age=99999999; includeSubDomains; preload',
        'location': urlObj.href,
      })
    }

    if (path.startsWith('/http/')) {
      return httpHandler(req, path.slice(6))
    }

    switch (path) {
      case '/http':
        return makeRes('请更新 cfworker 到最新版本!')
      case '/ws':
        return makeRes('not support', 400)
      case '/works':
        return makeRes('it works')
      default:
        // static files
        return fetch(ASSET_URL + path)
    }
  }
}

/**
 * @param {Request} req
 * @param {string} pathname
 */
function httpHandler(req, pathname) {
  const reqHdrRaw = req.headers
  if (reqHdrRaw.has('x-jsproxy')) {
    return Response.error()
  }

  // preflight
  if (req.method === 'OPTIONS' &&
    reqHdrRaw.has('access-control-request-headers')
  ) {
    return new Response(null, PREFLIGHT_INIT)
  }

  let acehOld = false
  let rawSvr = ''
  let rawLen = ''
  let rawEtag = ''

  const reqHdrNew = new Headers(reqHdrRaw)
  reqHdrNew.set('x-jsproxy', '1')

  // 此处逻辑和 http-dec-req-hdr.lua 大致相同
  // https://github.com/EtherDream/jsproxy/blob/master/lua/http-dec-req-hdr.lua
  //console.log('--------header---------');
  //console.log('%o', reqHdrNew);
  const refer = reqHdrNew.get('referer')
  if (!refer) {
    return makeRes('missing params', 403)
  }
  const query = refer.slice(refer.indexOf('?') + 1)
  if (!query) {
    return makeRes('missing params', 403)
  }
  const param = new URLSearchParams(query)

  for (const [k, v] of Object.entries(param)) {
    if (k.slice(0, 2) === '--') {
      // 系统信息
      switch (k.slice(2)) {
        case 'aceh':
          acehOld = true
          break
        case 'raw-info':
          [rawSvr, rawLen, rawEtag] = v.split('|')
          break
      }
    } else {
      // 还原 HTTP 请求头
      if (v) {
        reqHdrNew.set(k, v)
      } else {
        reqHdrNew.delete(k)
      }
    }
  }
  if (!param.has('referer')) {
    reqHdrNew.delete('referer')
  }

  // cfworker 会把路径中的 `//` 合并成 `/`
  const urlStr = pathname.replace(/^(https?):\/+/, '$1://')
  const urlObj = newUrl(urlStr)
  if (!urlObj) {
    return makeRes('invalid proxy url: ' + urlStr, 403)
  }

  /** @type {RequestInit} */
  const reqInit = {
    method: req.method,
    headers: reqHdrNew,
    redirect: 'manual',
  }
  if (req.method === 'POST') {
    reqInit.body = req.body
  }
  return proxy(urlObj, reqInit, acehOld, rawLen, 0)
}


/**
 *
 * @param {URL} urlObj
 * @param {RequestInit} reqInit
 * @param {number} retryTimes
 */
async function proxy(urlObj, reqInit, acehOld, rawLen, retryTimes) {
  const res = await fetch(urlObj.href, reqInit)
  const resHdrOld = res.headers
  const resHdrNew = new Headers(resHdrOld)

  let expose = '*'

  for (const [k, v] of resHdrOld.entries()) {
    if (k === 'access-control-allow-origin' ||
      k === 'access-control-expose-headers' ||
      k === 'location' ||
      k === 'set-cookie'
    ) {
      const x = '--' + k
      resHdrNew.set(x, v)
      if (acehOld) {
        expose = expose + ',' + x
      }
      resHdrNew.delete(k)
    }
    else if (acehOld &&
      k !== 'cache-control' &&
      k !== 'content-language' &&
      k !== 'content-type' &&
      k !== 'expires' &&
      k !== 'last-modified' &&
      k !== 'pragma'
    ) {
      expose = expose + ',' + k
    }
  }

  if (acehOld) {
    expose = expose + ',--s'
    resHdrNew.set('--t', '1')
  }

  // verify
  if (rawLen) {
    const newLen = resHdrOld.get('content-length') || ''
    const badLen = (rawLen !== newLen)

    if (badLen) {
      if (retryTimes < MAX_RETRY) {
        urlObj = await parseYtVideoRedir(urlObj, newLen, res)
        if (urlObj) {
          return proxy(urlObj, reqInit, acehOld, rawLen, retryTimes + 1)
        }
      }
      return makeRes(res.body, 400, {
        '--error': `bad len: ${newLen}, except: ${rawLen}`,
        'access-control-expose-headers': '--error',
      })
    }

    if (retryTimes > 1) {
      resHdrNew.set('--retry', retryTimes)
    }
  }

  let status = res.status

  resHdrNew.set('access-control-expose-headers', expose)
  resHdrNew.set('access-control-allow-origin', '*')
  resHdrNew.set('--s', status)
  resHdrNew.set('--ver', JS_VER)

  resHdrNew.delete('content-security-policy')
  resHdrNew.delete('content-security-policy-report-only')
  resHdrNew.delete('clear-site-data')

  if (status === 301 ||
    status === 302 ||
    status === 303 ||
    status === 307 ||
    status === 308
  ) {
    status = status + 10
  }

  return new Response(res.body, {
    status,
    headers: resHdrNew,
  })
}


/**
 * @param {URL} urlObj
 */
function isYtUrl(urlObj) {
  return (
    urlObj.host.endsWith('.googlevideo.com') &&
    urlObj.pathname.startsWith('/videoplayback')
  )
}

/**
 * @param {URL} urlObj
 * @param {number} newLen
 * @param {Response} res
 */
async function parseYtVideoRedir(urlObj, newLen, res) {
  if (newLen > 2000) {
    return null
  }
  if (!isYtUrl(urlObj)) {
    return null
  }
  try {
    const data = await res.text()
    urlObj = new URL(data)
  } catch (err) {
    return null
  }
  if (!isYtUrl(urlObj)) {
    return null
  }
  return urlObj
}

//https://stackoverflow.com/questions/5142337/read-a-javascript-cookie-by-name
function getCook(cookiename, cookies) {
  // Get name followed by anything except a semicolon
  var cookiestring = RegExp(cookiename + "=[^;]+").exec(cookies);
  // Return everything after the equal sign, or an empty string if the cookie name not found

  // 这个正则表达式中的 ^ 表示字符串开头，一个字符串只有一个开头，所以这个正则最多只能匹配一次。因此 replace() 和 replaceAll() 的效果完全相同。
  return decodeURIComponent(!!cookiestring ? cookiestring.toString().replace(/^[^=]+./, "") : "");
}

const pwdPage = `
<!DOCTYPE html>
<html>
    <head><script>
            window.onload = function() {
                try {
                    var cookieDomain = window.location.hostname;
                    var password = prompt("Please enter your password:");
                    if (!(password && /^\\w+$/.test(password))) {
                        password = "_default_";
                    }
                    var oneWeekLater = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
                    document.cookie = "${passwordCookieName}" + "=" + password + "; expires=" + oneWeekLater.toUTCString() + "; path=/; domain=" + cookieDomain;
                    location.reload();
                } catch(e) {
                    alert(e.message);
                }
            }
    </script></head>
    <body></body>
</html>
`;

function nginx(code, body) {
  var title, text, bodyText;
  var doctype = "", bodyStyle = ""
  let is_body_vaild = (body && body != "");

  switch (code) {
    case 200:
      title = 'Welcome to nginx!'; break;
    case 403:
      title = '403 Forbidden'; break;
    case 404:
      title = '404 Not Found'; break;
    case 401:
      title = '401 Unauthorized'; break;
    case 400:
      title = '400 Bad Request'; break;
    default:
      code = 500; title = '500 Internal Server Error'; break;
  }

  if (code == 200) {
    bodyText = is_body_vaild ? body : `<h1>${title}</h1><p>If you see this page, the nginx web server is successfully installed and  working. Further configuration is required.</p><p>For online documentation and support please refer to  <a href="http://nginx.org/">nginx.org</a>.<br/>  Commercial support is available at <a href="http://nginx.com/">nginx.com</a>.</p><p><em>Thank you for using nginx.</em></p>`;
    bodyStyle = is_body_vaild ? '' : '<style>body{width: 35em;margin: 0 auto;font-family: Tahoma, Verdana, Arial, sans-serif;}</style>';
    doctype = is_body_vaild ? '' : "<!DOCTYPE html>";
  }
  else {
    bodyText = is_body_vaild ? body : `<center><h1>${title}</h1></center><hr><center>nginx/1.22.1</center>`;
  }

  text = `${doctype}<html><head><title>${title}</title>${bodyStyle}</head><body>${bodyText}</body></html>`;

  return new Response(text, { status: code, headers: new Headers({ "Server": "nginx/1.22.1 (Ubuntu)", "Date": Date(), "Content-Type": "text/html", 'access-control-allow-origin': '*' }) });
}

function gen_icon() {
  var A = function (a = 0) { return 'A'.repeat(a); };
  const b64data = "AAABAAEAICAAAAEAIACoEAAAFgAAACgAAAAgAAAAQAAAAAEAIAAAAAAAgBAAAMMOAADDDg" + A(60) + "Dg4dY7y8zK/8zLzv/MzM3/0M/Q/9DRyP+prLr/v8DH/9jY1//09PUE" + A(112) + "293hMGVnvf+kpsD/2trJ/8rLxv/KzMH/dnjB/1BN2f+Vmbj/0dDI/97e4Cs" + A(106) + "PP08wR8fNThW1fl/2Rotf94ecb/b2/M/2hqxP9nYuz/c2v8/2dnyv/f4Nf/6eruFra34HOXl92pi4rfwoyK4MKgoOKaztDmS" + A(75) + "sbLafp+b8v+Pjej/hH/v/4qE+P+Aefj/gXr4/3t28P9wau//a2Xw/4eKzv9vbd//Ylzq/3Js8f9zbfP/bmj0/2hi8f9uZe3/kqDbtOvw8BI" + A(63) + "Cjo92YqqX4/8fE+f/r6vv/7+75/8nI9P9/ee//eXTw/3Br7v9ya/P/XFvT/3Bq7v+opPv/nZnz/5CM8v+FgfD/enbw/21k7P9HmuH/c7Xc6ern7Rk" + A(53) + "6OrvGqGf45/Oyvv/9PX8/7O1/P+rqvn/7u74/7e28v9xa/D/dG7v/29o9P9qaNr/qazU/6yq6v+emvX/mZX0/46J8v+FgfP/fWzx/1yM3f9FtOj/ibbbwg" + A(15) + "LW1/3M" + A(31) + "Dn6e4ap6Xo/+Lf/f+1t/v/m539/4+O+v+YlPP/0dXz/3Zw8P90b+//bWby/3Bt4f/y9PT/7/Dy/66u3/+emvX/mZX0/4uJ7v97heb/YqTj/1Ky5v9SruX/wdDjXQAAAAAAAAAAmJj/qQ" + A(31) + "PDx8wupqOeQ0s/7/7Gz+/+kpvv/mZn5/5yY9P/MzvP/d3Lw/3Vw7v9xafb/Y2LU/9nc5P8AAAAA9PXzBK2s4padnvH/gb7k/3bE6f9rvun/YLPm/0uv6P+Ju+DCAAAAAAAAAADGxv9W" + A(37) + "K6u3YW8uPn/7e37//X0/v/s7Pv/9vj4/6+u8f92cO//eXPu/3Jr8P9VVc7/cnHS/+7w8RAAAAAA2dnoOaGi56qQy+7/hMbu/3i/6v9uu+j/V7Po/2iw4Pvt6/ES" + A(48) + "wMTXZIyL4P/Szvv//f38///////U1Pr/iIL3/395+P9wavf/amTy/2xo4/9jXPD/lpfWwgAAAAAAAAAAqMHfnpvV8/+Qyu3/g8Xs/3rA6v9nuur/Xa3f/97h6ys" + A(47) + "B/f9LaVlbO/4eC9/+Sjvn/hoTl/21p4/9oZtj/ZWTL/25uwP9oabr/a2bt/4iB+/9tad7/0tXjSQAAAADd5Owxocvm/5rU8/+PzvL/h8ju/3XA7P9crN//4eTsJ" + A(43) + "u73ea2Jc5/95cfz/VlXW/1latv96eqn/iIiv/5uYsP+kn6//p6Gw/6ehrf9qaqz/enfp/5eS/P9xc7D/o6K2qq+vx47U2eT/tMzid53G456Lxem+fMnz/2Gp2//y7/ML" + A(42) + "CXl9qugnv5/2Nh4v94eaf/ysbI/+Pg4v/p5uf/4d/k/9zZ4v/W097/09Dd/9zZ2/+MjLP/bW3H/3l5sf+8tcP/oJu3/5GRsf/KydhPAAAAANbZ5Dljp9j/ea3W3w" + A(47) + "JWT4LWAfer/e3yn/9/b3f/w7vX/3d3q/9fW4v/q6Oz/5+Xq/+rp7f/r6u7/8O/z/9/c4P+9vMj/3dzk/+Tj5v+vp7f/jY2u/+jq8BkAAAAAAAAAAMjQ4FPI0OFT" + A(48) + "qqzbjHZ2qf/Z1df/+Pb6/5mZqf9IRH//cG+s/9rb4f/t7O//6unt/+rp7//q6e7/7u7z//39+v/7+/j/qqXK/358sv+mqcOQ8vP3Bw" + A(68) + "DAwtBktrLD//Hw8v/h4ev/oqOr/7Kysv/q6e3/1tbi/+no7v/x8PL/+fjz//v69P/5+PT/5OPz/5OR5v9UUeH/TEvX/9fZ6DY" + A(74) + "J6duaO+uMn/4+Ho/+np7f+rrNn/kJDR/97d5P/+/fj/+fj0//b19//S0fH/w8L1/7e29v93deX/YF3g/2Ng4P9RTd3/k5bPsPX39AQ" + A(63) + "Dj5e0hko+svLeyxP/6+fj/ycre/yoroP8AAJ3/bW60/+rq+P/T0vb/urnu/7+/8f+Ghsz/IiGf/1hesP9xcOH/ZGHg/1tY4v9ERMj/amzI+Onr7hY" + A(58) + "Ly+0mufnLb/9PP2/////v/ExOT/hITR/6mo6v+vruz/trTz/5CUx/+XmMb/9ff2/21uWf8qKnH/LDCb/3Z14v9mY+H/Wlff/1ZU2v9JRt3/hIXTzQ" + A(58) + "1tjkO56euf/z8/T/1NPx/6ak8/+sqPb/j5LT/7698//Pzfr/pqjS/2Vppf8ZF4z/CglS/62tyf9ZWqv/dnPo/2dl4P9bWN//VFLa/3Jx3v9RT9v/xcfgVg" + A(52) + "DMzd1Ora/Ehba513ZVWb3/i4vi/36ByP96f8D/w8H4/8TD8v/Fw/f/io/B/0JImf8LDpP/GyCI/3d32f93dej/ZmTf/1tY4v9OTsr/Y2PN/2Ng3v99fdfX" + A(53) + "OXn7h7k5u8hAAAAAJWZybFiZ8H/foHN/6+t8f+0svD/uLjx/7e28f+ysPP/lpjb/4WI0P+Pjun/hIHr/3Bv4f9oZOb/V1bT/1RT0f9STt//cHDV/1pZ1P/Z2+Yy" + A(64) + "6uzxFo6N4sCin/f/o6Hr/6qo7v+urO//rKru/6ak7P+hnvD/l5Xw/4eF6P97eeP/dHHp/15e0v9QUMr/WFXj/1NQ3/9jYdf/WFfS/6iszIw" + A(69) + "vsDeZ4B/4NqcmfD/n53s/6Gf6/+gnuv/m5nq/5KR6P+JiOb/goDn/3Jv6P9aWdP/TU/D/1JR0v9WVNr/VFHh/2FizP9UVsH/m57Hog" + A(74) + "wMPgZIaH28+Xlur/m5nv/5mX7v+Vk+3/j43t/4iG6f9zceDth4jXxqGlz5dvbtvxWFfV/1BQzP9KSNb/ZWfE/7y8y/+qq8qI" + A(80) + "oqbSm09SwP9wc8z/dHbR/3N00v9vcMz/VljH/4mNyMIAAAAAAAAAAO7w8Q7CxOVdnZ3hnoCB09TDxtha5uXsHbe4zm/z9PgE" + A(74) + "Df4PApUFDN/0tLz/9VUt3/TEvW/19gzf9QTdv/srTfeg" + A(36) + "Dy8vQH8PDzCw" + A(84) + "CLjdbEQUHM/05N2f9WU97/Z2bb/1xa2v/g4uoo" + A(133) + "NbY6Tt0eMXtiYu+/1layf9XVs//iIzBxg" + A(143) + "Ofp6Rrb2eA0tLPR/5mbvqXi5Ock" + A(149) + "NbY5DvGxtdW3N7nLw" + A(154) + "8vP2B+Xn7h0" + A(256) + "=";

  function base64ToUint8Array(base64) {
    let binaryString = atob(base64);
    let len = binaryString.length;
    let bytes = new Uint8Array(len);
    for (let i = 0; i < len; i++) {
      bytes[i] = binaryString.charCodeAt(i);
    }
    return bytes;
  }

  let faviconData = (typeof Buffer !== 'undefined') ? new Uint8Array(Buffer.from(b64data, 'base64')) : base64ToUint8Array(b64data);
  return new Response(faviconData, { headers: { 'Content-Type': 'image/x-icon', 'Cache-Control': 'public, max-age=31536000' } });
}