From 91c9e12c3cb1820fe19d6c5fb598809f1ef89a72 Mon Sep 17 00:00:00 2001 From: kevin Date: Thu, 2 Jul 2026 20:30:11 +0800 Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=20WebSocket=20VPN=20?= =?UTF-8?q?=E6=8E=A5=E5=8F=A3=E5=8F=8A=E7=94=A8=E6=88=B7=E8=AE=A4=E8=AF=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 移动 config 包到 internal/config，新增 DatabaseConfig - 使用 GORM + SQLite 管理用户数据，预留 MySQL 支持 - 新增 internal/model/user.go GORM 用户模型 - 新增 internal/db/db.go 数据库初始化及默认管理员 - 新增 internal/vpn/ WebSocket 鉴权与隧道骨架 - /ws 路径支持用户名+密码鉴权 (bcrypt) - 心跳保活 + echo 隧道模式 --- go.mod | 24 +++++++-- go.sum | 41 +++++++++++++++ {config => internal/config}/config.go | 14 ++++- internal/db/db.go | 76 +++++++++++++++++++++++++++ internal/model/user.go | 17 ++++++ internal/vpn/auth.go | 65 +++++++++++++++++++++++ internal/vpn/handler.go | 39 ++++++++++++++ internal/vpn/tunnel.go | 53 +++++++++++++++++++ main.go | 18 +++++-- 9 files changed, 337 insertions(+), 10 deletions(-) rename {config => internal/config}/config.go (77%) create mode 100644 internal/db/db.go create mode 100644 internal/model/user.go create mode 100644 internal/vpn/auth.go create mode 100644 internal/vpn/handler.go create mode 100644 internal/vpn/tunnel.go diff --git a/go.mod b/go.mod index 652bc17..44c1f67 100644 --- a/go.mod +++ b/go.mod @@ -8,16 +8,25 @@ require ( ) require ( + filippo.io/edwards25519 v1.1.0 // indirect github.com/bytedance/gopkg v0.1.3 // indirect github.com/bytedance/sonic v1.15.0 // indirect github.com/bytedance/sonic/loader v0.5.0 // indirect github.com/cloudwego/base64x v0.1.6 // indirect + github.com/dustin/go-humanize v1.0.1 // indirect github.com/gabriel-vasile/mimetype v1.4.12 // indirect github.com/gin-contrib/sse v1.1.0 // indirect + github.com/glebarez/go-sqlite v1.21.2 // indirect + github.com/glebarez/sqlite v1.11.0 // indirect github.com/go-playground/locales v0.14.1 // indirect github.com/go-playground/universal-translator v0.18.1 // indirect github.com/go-playground/validator/v10 v10.30.1 // indirect + github.com/go-sql-driver/mysql v1.8.1 // indirect github.com/goccy/go-json v0.10.5 // indirect + github.com/google/uuid v1.3.0 // indirect + github.com/gorilla/websocket v1.5.3 // indirect + github.com/jinzhu/inflection v1.0.0 // indirect + github.com/jinzhu/now v1.1.5 // indirect github.com/json-iterator/go v1.1.12 // indirect github.com/klauspost/cpuid/v2 v2.3.0 // indirect github.com/leodido/go-urn v1.4.0 // indirect @@ -27,13 +36,20 @@ require ( github.com/pelletier/go-toml/v2 v2.2.4 // indirect github.com/quic-go/qpack v0.6.0 // indirect github.com/quic-go/quic-go v0.59.0 // indirect + github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect github.com/twitchyliquid64/golang-asm v0.15.1 // indirect github.com/ugorji/go/codec v1.3.1 // indirect go.mongodb.org/mongo-driver/v2 v2.5.0 // indirect golang.org/x/arch v0.22.0 // indirect - golang.org/x/crypto v0.48.0 // indirect - golang.org/x/net v0.51.0 // indirect - golang.org/x/sys v0.41.0 // indirect - golang.org/x/text v0.34.0 // indirect + golang.org/x/crypto v0.53.0 // indirect + golang.org/x/net v0.55.0 // indirect + golang.org/x/sys v0.46.0 // indirect + golang.org/x/text v0.38.0 // indirect google.golang.org/protobuf v1.36.10 // indirect + gorm.io/driver/mysql v1.6.0 // indirect + gorm.io/gorm v1.31.2 // indirect + modernc.org/libc v1.22.5 // indirect + modernc.org/mathutil v1.5.0 // indirect + modernc.org/memory v1.5.0 // indirect + modernc.org/sqlite v1.23.1 // indirect ) diff --git a/go.sum b/go.sum index 3a33231..911c9ca 100644 --- a/go.sum +++ b/go.sum @@ -1,3 +1,5 @@ +filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= +filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4= github.com/bytedance/gopkg v0.1.3 h1:TPBSwH8RsouGCBcMBktLt1AymVo2TVsBVCY4b6TnZ/M= github.com/bytedance/gopkg v0.1.3/go.mod h1:576VvJ+eJgyCzdjS+c4+77QF3p7ubbtiKARP3TxducM= github.com/bytedance/sonic v1.15.0 h1:/PXeWFaR5ElNcVE84U0dOHjiMHQOwNIx3K4ymzh/uSE= @@ -9,12 +11,18 @@ github.com/cloudwego/base64x v0.1.6/go.mod h1:OFcloc187FXDaYHvrNIjxSe8ncn0OOM8gE github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= github.com/gabriel-vasile/mimetype v1.4.12 h1:e9hWvmLYvtp846tLHam2o++qitpguFiYCKbn0w9jyqw= github.com/gabriel-vasile/mimetype v1.4.12/go.mod h1:d+9Oxyo1wTzWdyVUPMmXFvp4F9tea18J8ufA774AB3s= github.com/gin-contrib/sse v1.1.0 h1:n0w2GMuUpWDVp7qSpvze6fAu9iRxJY4Hmj6AmBOU05w= github.com/gin-contrib/sse v1.1.0/go.mod h1:hxRZ5gVpWMT7Z0B0gSNYqqsSCNIJMjzvm6fqCz9vjwM= github.com/gin-gonic/gin v1.12.0 h1:b3YAbrZtnf8N//yjKeU2+MQsh2mY5htkZidOM7O0wG8= github.com/gin-gonic/gin v1.12.0/go.mod h1:VxccKfsSllpKshkBWgVgRniFFAzFb9csfngsqANjnLc= +github.com/glebarez/go-sqlite v1.21.2 h1:3a6LFC4sKahUunAmynQKLZceZCOzUthkRkEAl9gAXWo= +github.com/glebarez/go-sqlite v1.21.2/go.mod h1:sfxdZyhQjTM2Wry3gVYWaW072Ri1WMdWJi0k6+3382k= +github.com/glebarez/sqlite v1.11.0 h1:wSG0irqzP6VurnMEpFGer5Li19RpIRi2qvQz++w0GMw= +github.com/glebarez/sqlite v1.11.0/go.mod h1:h8/o8j5wiAsqSPoWELDUdJXhjAhsVliSn7bWZjOhrgQ= github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s= github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4= github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA= @@ -23,6 +31,8 @@ github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJn github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY= github.com/go-playground/validator/v10 v10.30.1 h1:f3zDSN/zOma+w6+1Wswgd9fLkdwy06ntQJp0BBvFG0w= github.com/go-playground/validator/v10 v10.30.1/go.mod h1:oSuBIQzuJxL//3MelwSLD5hc2Tu889bF0Idm9Dg26cM= +github.com/go-sql-driver/mysql v1.8.1 h1:LedoTUt/eveggdHS9qUFC1EFSa8bU2+1pZjSRpvNJ1Y= +github.com/go-sql-driver/mysql v1.8.1/go.mod h1:wEBSXgmK//2ZFJyE+qWnIsVGmvmEKlqwuVSjsCm7DZg= github.com/goccy/go-json v0.10.5 h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4= github.com/goccy/go-json v0.10.5/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M= github.com/goccy/go-yaml v1.19.2 h1:PmFC1S6h8ljIz6gMRBopkjP1TVT7xuwrButHID66PoM= @@ -30,6 +40,14 @@ github.com/goccy/go-yaml v1.19.2/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7Lk github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I= +github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg= +github.com/gorilla/websocket v1.5.3/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE= +github.com/jinzhu/inflection v1.0.0 h1:K317FqzuhWc8YvSVlFMCCUb36O/S9MCKRDI7QkRKD/E= +github.com/jinzhu/inflection v1.0.0/go.mod h1:h+uFLlag+Qp1Va5pdKtLDYj+kHp5pxUVkryuEj+Srlc= +github.com/jinzhu/now v1.1.5 h1:/o9tlHleP7gOFmsnYNz3RGnqzefHA47wQpKrrdTIwXQ= +github.com/jinzhu/now v1.1.5/go.mod h1:d3SSVoowX0Lcu0IBviAWJpolVfI5UJVZZ7cO71lE/z8= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo= github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y= @@ -51,6 +69,9 @@ github.com/quic-go/qpack v0.6.0 h1:g7W+BMYynC1LbYLSqRt8PBg5Tgwxn214ZZR34VIOjz8= github.com/quic-go/qpack v0.6.0/go.mod h1:lUpLKChi8njB4ty2bFLX2x4gzDqXwUpaO1DP9qMDZII= github.com/quic-go/quic-go v0.59.0 h1:OLJkp1Mlm/aS7dpKgTc6cnpynnD2Xg7C1pwL6vy/SAw= github.com/quic-go/quic-go v0.59.0/go.mod h1:upnsH4Ju1YkqpLXC305eW3yDZ4NfnNbmQRCMWS58IKU= +github.com/remyoudompheng/bigfft v0.0.0-20200410134404-eec4a21b6bb0/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo= +github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE= +github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= @@ -74,16 +95,36 @@ golang.org/x/arch v0.22.0 h1:c/Zle32i5ttqRXjdLyyHZESLD/bB90DCU1g9l/0YBDI= golang.org/x/arch v0.22.0/go.mod h1:dNHoOeKiyja7GTvF9NJS1l3Z2yntpQNzgrjh1cU103A= golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts= golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos= +golang.org/x/crypto v0.53.0 h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto= +golang.org/x/crypto v0.53.0/go.mod h1:DNLU434OwVakk9PzuwV8w62mAJpRJL3vsgcfp4Qnsio= golang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo= golang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y= +golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8= +golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k= golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= +golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw= +golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk= golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA= +golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE= +golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4= google.golang.org/protobuf v1.36.10 h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE= google.golang.org/protobuf v1.36.10/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +gorm.io/driver/mysql v1.6.0 h1:eNbLmNTpPpTOVZi8MMxCi2aaIm0ZpInbORNXDwyLGvg= +gorm.io/driver/mysql v1.6.0/go.mod h1:D/oCC2GWK3M/dqoLxnOlaNKmXz8WNTfcS9y5ovaSqKo= +gorm.io/gorm v1.31.2 h1:3o8FXNo9v9S858gil+3LlZA1LkCOzgb4g5BL64FgaCo= +gorm.io/gorm v1.31.2/go.mod h1:XyQVbO2k6YkOis7C2437jSit3SsDK72s7n7rsSHd+Gs= +modernc.org/libc v1.22.5 h1:91BNch/e5B0uPbJFgqbxXuOnxBQjlS//icfQEGmvyjE= +modernc.org/libc v1.22.5/go.mod h1:jj+Z7dTNX8fBScMVNRAYZ/jF91K8fdT2hYMThc3YjBY= +modernc.org/mathutil v1.5.0 h1:rV0Ko/6SfM+8G+yKiyI830l3Wuz1zRutdslNoQ0kfiQ= +modernc.org/mathutil v1.5.0/go.mod h1:mZW8CKdRPY1v87qxC/wUdX5O1qDzXMP5TH3wjfpga6E= +modernc.org/memory v1.5.0 h1:N+/8c5rE6EqugZwHii4IFsaJ7MUhoWX07J5tC/iI5Ds= +modernc.org/memory v1.5.0/go.mod h1:PkUhL0Mugw21sHPeskwZW4D6VscE/GQJOnIpCnW6pSU= +modernc.org/sqlite v1.23.1 h1:nrSBg4aRQQwq59JpvGEQ15tNxoO5pX/kUjcRNwSAGQM= +modernc.org/sqlite v1.23.1/go.mod h1:OrDj17Mggn6MhE+iPbBNf7RGKODDE9NFT0f3EwDzJqk= diff --git a/config/config.go b/internal/config/config.go similarity index 77% rename from config/config.go rename to internal/config/config.go index 87e3e2f..495136b 100644 --- a/config/config.go +++ b/internal/config/config.go @@ -12,8 +12,15 @@ type WebConfig struct { Sock string `yaml:"sock"` } +type DatabaseConfig struct { + Type string `yaml:"type"` + Path string `yaml:"path"` + DSN string `yaml:"dsn"` +} + type Config struct { - Web WebConfig `yaml:"web"` + Web WebConfig `yaml:"web"` + Database DatabaseConfig `yaml:"database"` } func defaultConfig() *Config { @@ -22,6 +29,11 @@ func defaultConfig() *Config { Port: 8080, Sock: "/run/lmvpnweb.sock", }, + Database: DatabaseConfig{ + Type: "sqlite", + Path: "data/lmvpn.db", + DSN: "", + }, } } diff --git a/internal/db/db.go b/internal/db/db.go new file mode 100644 index 0000000..a41dffa --- /dev/null +++ b/internal/db/db.go @@ -0,0 +1,76 @@ +package db + +import ( + "fmt" + "log" + + "lmvpn/internal/config" + "lmvpn/internal/model" + + "github.com/glebarez/sqlite" + "golang.org/x/crypto/bcrypt" + "gorm.io/driver/mysql" + "gorm.io/gorm" +) + +var DB *gorm.DB + +func Init(cfg *config.DatabaseConfig) error { + var d gorm.Dialector + + switch cfg.Type { + case "sqlite": + d = sqlite.Open(cfg.Path) + case "mysql": + if cfg.DSN == "" { + return fmt.Errorf("mysql DSN 不能为空") + } + d = mysql.Open(cfg.DSN) + default: + return fmt.Errorf("不支持的数据库类型: %s", cfg.Type) + } + + var err error + DB, err = gorm.Open(d, &gorm.Config{}) + if err != nil { + return fmt.Errorf("数据库连接失败: %w", err) + } + + if err := DB.AutoMigrate(&model.User{}); err != nil { + return fmt.Errorf("数据库迁移失败: %w", err) + } + + if err := seedDefaultAdmin(); err != nil { + return fmt.Errorf("创建默认管理员失败: %w", err) + } + + log.Printf("数据库初始化完成: %s", cfg.Type) + return nil +} + +func seedDefaultAdmin() error { + var count int64 + DB.Model(&model.User{}).Count(&count) + if count > 0 { + return nil + } + + hash, err := bcrypt.GenerateFromPassword([]byte("admin123"), bcrypt.DefaultCost) + if err != nil { + return err + } + + admin := &model.User{ + Username: "admin", + Password: string(hash), + Role: "admin", + Status: 1, + } + + if err := DB.Create(admin).Error; err != nil { + return err + } + + log.Println("已创建默认管理员: admin / admin123") + return nil +} diff --git a/internal/model/user.go b/internal/model/user.go new file mode 100644 index 0000000..488f2a5 --- /dev/null +++ b/internal/model/user.go @@ -0,0 +1,17 @@ +package model + +import "time" + +type User struct { + ID uint `gorm:"primaryKey;autoIncrement"` + Username string `gorm:"uniqueIndex;size:64;not null"` + Password string `gorm:"size:128;not null"` + Role string `gorm:"size:16;default:user"` + Status int `gorm:"default:1"` + CreatedAt time.Time `gorm:"autoCreateTime"` + UpdatedAt time.Time `gorm:"autoUpdateTime"` +} + +func (User) TableName() string { + return "users" +} diff --git a/internal/vpn/auth.go b/internal/vpn/auth.go new file mode 100644 index 0000000..8851996 --- /dev/null +++ b/internal/vpn/auth.go @@ -0,0 +1,65 @@ +package vpn + +import ( + "encoding/json" + + "lmvpn/internal/model" + + "github.com/gorilla/websocket" + "golang.org/x/crypto/bcrypt" + "gorm.io/gorm" +) + +type authMessage struct { + Type string `json:"type"` + Username string `json:"username"` + Password string `json:"password"` +} + +type authResponse struct { + Type string `json:"type"` + Message string `json:"message,omitempty"` +} + +func authenticate(conn *websocket.Conn, db *gorm.DB) (*model.User, error) { + _, msgBytes, err := conn.ReadMessage() + if err != nil { + return nil, err + } + + var msg authMessage + if err := json.Unmarshal(msgBytes, &msg); err != nil || msg.Type != "auth" { + resp := authResponse{Type: "auth_err", Message: "消息格式错误"} + sendJSON(conn, resp) + conn.Close() + return nil, nil + } + + var user model.User + if err := db.Where("username = ? AND status = 1", msg.Username).First(&user).Error; err != nil { + resp := authResponse{Type: "auth_err", Message: "用户名或密码错误"} + sendJSON(conn, resp) + conn.Close() + return nil, nil + } + + if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(msg.Password)); err != nil { + resp := authResponse{Type: "auth_err", Message: "用户名或密码错误"} + sendJSON(conn, resp) + conn.Close() + return nil, nil + } + + resp := authResponse{Type: "auth_ok"} + if err := sendJSON(conn, resp); err != nil { + conn.Close() + return nil, nil + } + + return &user, nil +} + +func sendJSON(conn *websocket.Conn, v interface{}) error { + data, _ := json.Marshal(v) + return conn.WriteMessage(websocket.TextMessage, data) +} diff --git a/internal/vpn/handler.go b/internal/vpn/handler.go new file mode 100644 index 0000000..04961c2 --- /dev/null +++ b/internal/vpn/handler.go @@ -0,0 +1,39 @@ +package vpn + +import ( + "log" + "net/http" + + "lmvpn/internal/db" + + "github.com/gin-gonic/gin" + "github.com/gorilla/websocket" +) + +var upgrader = websocket.Upgrader{ + ReadBufferSize: 4096, + WriteBufferSize: 4096, + CheckOrigin: func(r *http.Request) bool { + return true + }, +} + +func HandleWS(c *gin.Context) { + conn, err := upgrader.Upgrade(c.Writer, c.Request, nil) + if err != nil { + log.Printf("WebSocket 升级失败: %v", err) + return + } + + user, err := authenticate(conn, db.DB) + if err != nil { + log.Printf("认证读取失败: %v", err) + conn.Close() + return + } + if user == nil { + return + } + + runTunnel(conn, user) +} diff --git a/internal/vpn/tunnel.go b/internal/vpn/tunnel.go new file mode 100644 index 0000000..4e88ade --- /dev/null +++ b/internal/vpn/tunnel.go @@ -0,0 +1,53 @@ +package vpn + +import ( + "log" + "time" + + "lmvpn/internal/model" + + "github.com/gorilla/websocket" +) + +const ( + readTimeout = 60 * time.Second + writeTimeout = 10 * time.Second + pingPeriod = 30 * time.Second +) + +func runTunnel(conn *websocket.Conn, user *model.User) { + defer conn.Close() + + log.Printf("用户 %s 已连接", user.Username) + + go func() { + ticker := time.NewTicker(pingPeriod) + defer ticker.Stop() + for range ticker.C { + conn.SetWriteDeadline(time.Now().Add(writeTimeout)) + if err := conn.WriteMessage(websocket.PingMessage, nil); err != nil { + return + } + } + }() + + conn.SetPongHandler(func(string) error { + conn.SetReadDeadline(time.Now().Add(readTimeout)) + return nil + }) + + for { + conn.SetReadDeadline(time.Now().Add(readTimeout)) + messageType, data, err := conn.ReadMessage() + if err != nil { + log.Printf("用户 %s 断开连接: %v", user.Username, err) + return + } + + conn.SetWriteDeadline(time.Now().Add(writeTimeout)) + if err := conn.WriteMessage(messageType, data); err != nil { + log.Printf("用户 %s 发送失败: %v", user.Username, err) + return + } + } +} diff --git a/main.go b/main.go index 6abf8d1..60b3cfd 100644 --- a/main.go +++ b/main.go @@ -9,7 +9,9 @@ import ( "path/filepath" "strings" - "lmvpn/config" + "lmvpn/internal/config" + "lmvpn/internal/db" + "lmvpn/internal/vpn" "github.com/gin-gonic/gin" ) @@ -20,18 +22,24 @@ func main() { log.Fatalf("加载配置失败: %v", err) } + if err := db.Init(&cfg.Database); err != nil { + log.Fatalf("数据库初始化失败: %v", err) + } + r := gin.Default() - // 静态文件服务 + r.GET("/ws", vpn.HandleWS) + fs := http.FileServer(http.Dir("./dist")) - // 中间件处理路由 r.Use(func(c *gin.Context) { + if strings.HasPrefix(c.Request.URL.Path, "/ws") { + return + } if strings.HasPrefix(c.Request.URL.Path, "/api") { - c.Next() // 继续处理API请求 + c.Next() return } - // 处理静态文件 fs.ServeHTTP(c.Writer, c.Request) c.Abort() })