mirror of
https://github.com/Silentely/eSIM-Tools.git
synced 2026-09-03 06:24:20 +08:00
cc49daa993
- middleware withAuth 新增 requireAuth: false 跳过密钥校验 - CSP style-src 添加 fonts.googleapis.com (修复字体加载拦截) - CSP font-src 添加 fonts.gstatic.com (修复字体资源拦截) - CSP connect-src 添加 cdn.jsdelivr.net (修复 source map 加载) - server.js CSP 同步更新与 netlify.toml 保持一致
239 lines
9.4 KiB
JavaScript
239 lines
9.4 KiB
JavaScript
/**
|
||
* 本地开发服务器
|
||
* 提供静态文件服务和API代理功能
|
||
*/
|
||
|
||
const express = require('express');
|
||
const cors = require('cors');
|
||
const path = require('path');
|
||
const fs = require('fs');
|
||
const helmet = require('helmet');
|
||
const morgan = require('morgan');
|
||
const Logger = require('./src/js/modules/logger.js');
|
||
require('dotenv').config();
|
||
|
||
const app = express();
|
||
const PORT = process.env.PORT || 3000;
|
||
const STATIC_ROOT = path.join(__dirname, process.env.STATIC_ROOT || 'dist');
|
||
const INTERNAL_FUNCTION_KEY = process.env.ACCESS_KEY || '';
|
||
|
||
// 启动时环境检查
|
||
if (!INTERNAL_FUNCTION_KEY) {
|
||
console.error('❌ ACCESS_KEY 未配置');
|
||
console.error('💡 请在 .env 文件或环境变量中设置 ACCESS_KEY');
|
||
console.error('⚠️ Netlify Functions 将无法正常工作，请修复后重启');
|
||
}
|
||
|
||
if (!process.env.SIMYO_CLIENT_TOKEN) {
|
||
console.warn('⚠️ SIMYO_CLIENT_TOKEN 未配置，Simyo 代理请求可能失败');
|
||
console.warn('💡 请在 .env 文件中设置 SIMYO_CLIENT_TOKEN');
|
||
}
|
||
|
||
if (!fs.existsSync(STATIC_ROOT)) {
|
||
console.warn(`⚠️ 静态目录 ${STATIC_ROOT} 不存在，请先运行 npm run build`);
|
||
console.warn('💡 运行: npm run build');
|
||
}
|
||
|
||
// 中间件配置
|
||
app.use(helmet({
|
||
contentSecurityPolicy: {
|
||
directives: {
|
||
defaultSrc: ["'self'"],
|
||
scriptSrc: ["'self'", "'unsafe-inline'", "https://cdn.jsdelivr.net", "https://cdnjs.cloudflare.com"],
|
||
styleSrc: ["'self'", "'unsafe-inline'", "https://cdn.jsdelivr.net", "https://cdnjs.cloudflare.com", "https://fonts.googleapis.com"],
|
||
imgSrc: ["'self'", "data:", "https:", "http:"],
|
||
connectSrc: ["'self'", "https://qrcode.show", "https://api.qrserver.com", "https://appapi.simyo.nl", "https://api.giffgaff.com", "https://id.giffgaff.com", "https://publicapi.giffgaff.com", "https://cdn.jsdelivr.net", "https://*.sentry.io"],
|
||
fontSrc: ["'self'", "https://cdn.jsdelivr.net", "https://cdnjs.cloudflare.com", "https://fonts.gstatic.com"]
|
||
}
|
||
}
|
||
}));
|
||
|
||
// 仅允许特定来源访问本地API（前端文件本地打开时可能 Origin 为 undefined）
|
||
const ALLOWED_ORIGIN = process.env.ALLOWED_ORIGIN || 'https://esim.cosr.eu.org';
|
||
app.use(cors({
|
||
origin: function(origin, callback) {
|
||
if (!origin) return callback(null, true); // 非浏览器/本地文件放行
|
||
if (origin === ALLOWED_ORIGIN) return callback(null, true);
|
||
return callback(new Error('Not allowed by CORS'));
|
||
},
|
||
credentials: false
|
||
}));
|
||
app.use(morgan('combined'));
|
||
app.use(express.json());
|
||
app.use(express.urlencoded({ extended: true }));
|
||
|
||
const staticMiddleware = express.static(STATIC_ROOT, { fallthrough: true, index: false });
|
||
app.use((req, res, next) => {
|
||
if (!['GET', 'HEAD'].includes(req.method)) {
|
||
return next();
|
||
}
|
||
if (/\.html?$/i.test(req.path)) {
|
||
return next();
|
||
}
|
||
return staticMiddleware(req, res, next);
|
||
});
|
||
|
||
// API路由 - 模拟Netlify Functions
|
||
const giffgaffMfaChallenge = require('./netlify/functions/giffgaff-mfa-challenge');
|
||
const giffgaffMfaValidation = require('./netlify/functions/giffgaff-mfa-validation');
|
||
const giffgaffGraphql = require('./netlify/functions/giffgaff-graphql');
|
||
const giffgaffTokenExchange = require('./netlify/functions/giffgaff-token-exchange');
|
||
const verifyCookie = require('./netlify/functions/verify-cookie');
|
||
const giffgaffSmsActivate = require('./netlify/functions/giffgaff-sms-activate');
|
||
const publicConfig = require('./netlify/functions/public-config');
|
||
|
||
// 包装Netlify Functions为Express路由
|
||
function wrapNetlifyFunction(handler) {
|
||
return async (req, res) => {
|
||
try {
|
||
const headers = Object.assign({}, req.headers);
|
||
// 仅在客户端未提供密钥时注入内部密钥（避免覆盖）
|
||
if (INTERNAL_FUNCTION_KEY && !headers['x-esim-key'] && !headers['x-app-key']) {
|
||
headers['x-esim-key'] = INTERNAL_FUNCTION_KEY;
|
||
}
|
||
const event = {
|
||
httpMethod: req.method,
|
||
headers,
|
||
body: JSON.stringify(req.body),
|
||
queryStringParameters: req.query
|
||
};
|
||
|
||
const context = {};
|
||
const result = await handler.handler(event, context);
|
||
|
||
res.status(result.statusCode);
|
||
|
||
if (result.headers) {
|
||
Object.entries(result.headers).forEach(([key, value]) => {
|
||
res.set(key, value);
|
||
});
|
||
}
|
||
|
||
if (result.body) {
|
||
const body = typeof result.body === 'string' ? result.body : JSON.stringify(result.body);
|
||
res.send(body);
|
||
} else {
|
||
res.end();
|
||
}
|
||
} catch (error) {
|
||
console.error('API Error:', error);
|
||
res.status(500).json({
|
||
error: 'Internal Server Error',
|
||
message: error.message
|
||
});
|
||
}
|
||
};
|
||
}
|
||
|
||
// API端点
|
||
app.use('/.netlify/functions/giffgaff-mfa-challenge', wrapNetlifyFunction(giffgaffMfaChallenge));
|
||
app.use('/.netlify/functions/giffgaff-mfa-validation', wrapNetlifyFunction(giffgaffMfaValidation));
|
||
app.use('/.netlify/functions/giffgaff-graphql', wrapNetlifyFunction(giffgaffGraphql));
|
||
app.use('/.netlify/functions/giffgaff-token-exchange', wrapNetlifyFunction(giffgaffTokenExchange));
|
||
app.use('/.netlify/functions/verify-cookie', wrapNetlifyFunction(verifyCookie));
|
||
app.use('/.netlify/functions/giffgaff-sms-activate', wrapNetlifyFunction(giffgaffSmsActivate));
|
||
app.use('/.netlify/functions/public-config', wrapNetlifyFunction(publicConfig));
|
||
|
||
// Simyo API代理路由
|
||
app.use('/api/simyo/*', (req, res) => {
|
||
const targetUrl = `https://appapi.simyo.nl/simyoapi/api/v1${req.path.replace('/api/simyo', '')}`;
|
||
Logger.log(`[Simyo Proxy] ${req.method} ${req.path} -> ${targetUrl}`);
|
||
|
||
// 设置CORS头（仅允许指定域）
|
||
res.header('Access-Control-Allow-Origin', ALLOWED_ORIGIN);
|
||
res.header('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
|
||
res.header('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-Client-Token, X-Client-Platform, X-Client-Version');
|
||
res.header('Vary', 'Origin');
|
||
|
||
if (req.method === 'OPTIONS') {
|
||
return res.status(200).end();
|
||
}
|
||
|
||
// 代理请求
|
||
const axios = require('axios');
|
||
const config = {
|
||
method: req.method.toLowerCase(),
|
||
url: targetUrl,
|
||
headers: {
|
||
'Content-Type': 'application/json',
|
||
'User-Agent': req.headers['user-agent'] || 'MijnSimyoFT/4.23.5 (iOS 26.3; iPhone16,1)',
|
||
'X-Client-Token': req.headers['x-client-token'] || process.env.SIMYO_CLIENT_TOKEN || '',
|
||
'X-Client-Platform': req.headers['x-client-platform'] || 'ios',
|
||
'X-Client-Version': req.headers['x-client-version'] || '4.23.5'
|
||
},
|
||
timeout: 30000
|
||
};
|
||
|
||
if (req.body && Object.keys(req.body).length > 0) {
|
||
config.data = req.body;
|
||
}
|
||
|
||
axios(config)
|
||
.then(response => {
|
||
res.status(response.status).json(response.data);
|
||
})
|
||
.catch(error => {
|
||
console.error('[Simyo Proxy Error]:', error.message);
|
||
const status = error.response?.status || 500;
|
||
const data = error.response?.data || { error: 'Proxy Error', message: error.message };
|
||
res.status(status).json(data);
|
||
});
|
||
});
|
||
|
||
// 路由配置
|
||
const htmlRoutes = [
|
||
{ url: '/giffgaff', file: 'src/giffgaff/giffgaff_modular.html' },
|
||
{ url: '/giffgaff-legacy', file: 'src/giffgaff/giffgaff_complete_esim.html' },
|
||
{ url: '/simyo', file: 'src/simyo/simyo_modular.html' },
|
||
{ url: '/simyo-legacy', file: 'src/simyo/simyo_complete_esim.html' },
|
||
{ url: '/simyo-static', file: 'src/simyo/simyo_static.html' },
|
||
// 兼容静态路径访问（与 Netlify 重写保持一致）
|
||
{ url: '/src/giffgaff/giffgaff_modular.html', file: 'src/giffgaff/giffgaff_modular.html' },
|
||
{ url: '/src/giffgaff/giffgaff_complete_esim.html', file: 'src/giffgaff/giffgaff_complete_esim.html' },
|
||
{ url: '/src/simyo/simyo_modular.html', file: 'src/simyo/simyo_modular.html' },
|
||
{ url: '/src/simyo/simyo_complete_esim.html', file: 'src/simyo/simyo_complete_esim.html' },
|
||
{ url: '/src/simyo/simyo_static.html', file: 'src/simyo/simyo_static.html' },
|
||
{ url: '/', file: 'index.html' }
|
||
];
|
||
|
||
htmlRoutes.forEach(({ url, file }) => {
|
||
app.get(url, (req, res) => {
|
||
res.sendFile(path.join(STATIC_ROOT, file));
|
||
});
|
||
});
|
||
|
||
// 错误处理
|
||
app.use((err, req, res, next) => {
|
||
console.error('Server Error:', err);
|
||
res.status(500).json({
|
||
error: 'Internal Server Error',
|
||
message: process.env.NODE_ENV === 'development' ? err.message : '服务器内部错误'
|
||
});
|
||
});
|
||
|
||
// 404处理
|
||
app.use((req, res) => {
|
||
// 优先返回 HTML 404 页面（如果存在）
|
||
const html404Path = path.join(STATIC_ROOT, '404.html');
|
||
if (fs.existsSync(html404Path) && req.accepts('html')) {
|
||
return res.status(404).sendFile(html404Path);
|
||
}
|
||
|
||
// API 请求或无 404 页面时返回 JSON
|
||
res.status(404).json({
|
||
error: 'Not Found',
|
||
message: '请求的资源不存在'
|
||
});
|
||
});
|
||
|
||
// 启动服务器
|
||
app.listen(PORT, () => {
|
||
Logger.log(`🚀 eSIM工具服务器已启动`);
|
||
Logger.log(`📍 本地地址: http://localhost:${PORT}`);
|
||
Logger.log(`🔧 Giffgaff工具: http://localhost:${PORT}/giffgaff`);
|
||
Logger.log(`📱 Simyo工具: http://localhost:${PORT}/simyo`);
|
||
Logger.log(`🌐 环境: ${process.env.NODE_ENV || 'development'}`);
|
||
});
|
||
|
||
module.exports = app;
|