7efa8b54c4
新增 DB/Redis 连接池配置与校验，并补充单测 网关请求体大小限制与 413 处理 HTTP/req 客户端池化并调整上游连接池默认值 并发槽位改为 ZSET+Lua 与指数退避 用量统计改 SQL 聚合并新增索引迁移 计费缓存写入改工作池并补测试/基准 测试: 在 backend/ 下运行 go test ./...
63 lines
1.6 KiB
Go
63 lines
1.6 KiB
Go
package repository
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
"net/url"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/Wei-Shaw/sub2api/internal/pkg/httpclient"
|
|
"github.com/Wei-Shaw/sub2api/internal/service"
|
|
)
|
|
|
|
const turnstileVerifyURL = "https://challenges.cloudflare.com/turnstile/v0/siteverify"
|
|
|
|
type turnstileVerifier struct {
|
|
httpClient *http.Client
|
|
verifyURL string
|
|
}
|
|
|
|
func NewTurnstileVerifier() service.TurnstileVerifier {
|
|
sharedClient, err := httpclient.GetClient(httpclient.Options{
|
|
Timeout: 10 * time.Second,
|
|
})
|
|
if err != nil {
|
|
sharedClient = &http.Client{Timeout: 10 * time.Second}
|
|
}
|
|
return &turnstileVerifier{
|
|
httpClient: sharedClient,
|
|
verifyURL: turnstileVerifyURL,
|
|
}
|
|
}
|
|
|
|
func (v *turnstileVerifier) VerifyToken(ctx context.Context, secretKey, token, remoteIP string) (*service.TurnstileVerifyResponse, error) {
|
|
formData := url.Values{}
|
|
formData.Set("secret", secretKey)
|
|
formData.Set("response", token)
|
|
if remoteIP != "" {
|
|
formData.Set("remoteip", remoteIP)
|
|
}
|
|
|
|
req, err := http.NewRequestWithContext(ctx, http.MethodPost, v.verifyURL, strings.NewReader(formData.Encode()))
|
|
if err != nil {
|
|
return nil, fmt.Errorf("create request: %w", err)
|
|
}
|
|
req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
|
|
|
resp, err := v.httpClient.Do(req)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("send request: %w", err)
|
|
}
|
|
defer func() { _ = resp.Body.Close() }()
|
|
|
|
var result service.TurnstileVerifyResponse
|
|
if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
|
|
return nil, fmt.Errorf("decode response: %w", err)
|
|
}
|
|
|
|
return &result, nil
|
|
}
|