@lancewu602/mihomo-dash 0.6.3 → 0.7.0

package/server/tests/system-proxy.test.js

@@ -495,3 +495,238 @@ test('HTTP 端点：GET 读状态（含内核端口），PUT 开关，非法 bod
     fs.rmSync(cfgDir, { recursive: true, force: true });
   }
 });
+
+/** scutil 输出（协议开着 + 给定绕过列表），自定义项增删用例要知道写完之后的真实列表 */
+const scutilOnWith = (bypass) => `<dictionary> {
+  ExceptionsList : <array> {
+${bypass.map((b, i) => `    ${i} : ${b}`).join('\n')}
+  }
+  HTTPEnable : 1
+  HTTPPort : 7890
+  HTTPProxy : 127.0.0.1
+  HTTPSEnable : 1
+  HTTPSPort : 7890
+  HTTPSProxy : 127.0.0.1
+  ProxyAutoConfigEnable : 0
+  ProxyAutoDiscoveryEnable : 0
+  SOCKSEnable : 0
+  SOCKSPort : 0
+}`;
+
+/** 会记住 `-setproxybypassdomains` 的 macOS 桩：写完再读能读到新列表 */
+function macOSBypassStub(initial) {
+  let bypass = [...initial];
+  const run = stubRun((cmd, args) => {
+    if (cmd === 'scutil') return { stdout: scutilOnWith(bypass) };
+    if (cmd === 'route') return { stdout: ROUTE_GET };
+    if (cmd === 'networksetup') {
+      if (args[0] === '-listnetworkserviceorder') return { stdout: SERVICE_ORDER };
+      if (args[0] === '-listallnetworkservices') return { stdout: ALL_SERVICES };
+      if (args[0] === '-setproxybypassdomains') bypass = args.slice(2);
+      return { stdout: '' };
+    }
+    return { ok: false, stderr: `unexpected: ${cmd}` };
+  });
+  return { run, bypass: () => bypass };
+}
+
+test('normalizeBypassEntry：域名 / 通配 / IP / 网段都收，端口与乱写挡在写系统设置之前', () => {
+  const { normalizeBypassEntry } = mods.shared;
+  // 收：单标签主机名、带子域、通配三种写法（*. / +. / .）、FQDN 尾点、IPv4/IPv6、两种网段
+  for (const [raw, want] of [
+    ['example.com', 'example.com'],
+    ['  Sub.Corp.Example.  ', 'sub.corp.example'],
+    ['*.corp.example', '*.corp.example'],
+    ['+.corp.example', '+.corp.example'],
+    ['.corp.example', '.corp.example'],
+    ['myhost', 'myhost'],
+    ['192.168.1.5', '192.168.1.5'],
+    ['10.0.0.0/8', '10.0.0.0/8'],
+    ['192.168.1.5/32', '192.168.1.5/32'],
+    ['::1', '::1'],
+    ['fe80::/10', 'fe80::/10'],
+    ['FD00::1/8', 'fd00::1/8'],
+  ]) {
+    assert.equal(normalizeBypassEntry(raw), want, `${raw} 应该被接受`);
+  }
+
+  // 拒：空、协议 / 路径、端口、前导 -、空格、非法 IP、越界前缀、空标签、乱放通配、非 ASCII
+  for (const raw of [
+    '',
+    '   ',
+    '.',
+    'http://example.com',
+    'example.com/path',
+    'example.com:8080',
+    '-example.com',
+    '--setwebproxystate',
+    'a b.com',
+    '256.1.1.1',
+    '1.2.3.4.5.6.7.8',
+    '10.0.0.0/33',
+    '10.0.0.0/',
+    '/8',
+    'fe80::/129',
+    'fe80::1/8/8',
+    'a..b',
+    '*',
+    'a*b.com',
+    'foo.*.com',
+    '例子.com',
+    'example.com#x',
+    'example.com?x',
+    '[::1]:8080',
+    '-',
+    '*' + 'a'.repeat(300),
+  ]) {
+    assert.throws(
+      () => normalizeBypassEntry(raw),
+      /不合法|不能|只能|过长|网段|通配|要有|只有一个点/,
+      `${JSON.stringify(raw)} 应该被拒`,
+    );
+  }
+});
+
+test('mergeBypass：自定义项排在固定项前，与系统既有项大小写不敏感去重', () => {
+  const { mergeBypass, BYPASS_DEFAULTS } = mods.shared;
+  const { list, added } = mergeBypass(
+    ['LOCALHOST', 'old.example'],
+    ['*.Corp.Example', 'old.example', '*.local'],
+  );
+  assert.deepEqual(list.slice(0, 2), ['LOCALHOST', 'old.example'], '系统里已有的原样保留');
+  assert.deepEqual(added.slice(0, 1), ['*.Corp.Example'], '自定义项排在固定项前面');
+  assert.equal(
+    list.filter((v) => v.toLowerCase() === '*.local').length,
+    1,
+    '自定义项与固定项同名时只留一份',
+  );
+  assert.equal(
+    added.length,
+    1 + 1 + BYPASS_DEFAULTS.filter((d) => !['localhost', '*.local'].includes(d.value)).length,
+    '自定义项各一条 + 缺的固定项',
+  );
+});
+
+test('setBypass：把调用方算好的整套列表写进系统（macOS argv / GNOME ignore-hosts）', async () => {
+  const stub = macOSBypassStub(['localhost', '127.0.0.0/8']);
+  const mac = mods.shared.createSystemProxy({ run: stub.run, platform: 'darwin' });
+  const wrote = await mac.setBypass(['localhost', '127.0.0.0/8', '*.corp.example', '*.local']);
+  assert.equal(wrote.service, 'USB 10/100 LAN');
+  assert.deepEqual(stub.bypass(), ['localhost', '127.0.0.0/8', '*.corp.example', '*.local']);
+  await assert.rejects(() => mac.setBypass([]), /不能是空的/);
+
+  const linuxRun = stubRun((cmd, args) => {
+    assert.equal(cmd, 'gsettings');
+    if (args[0] === 'get') return { stdout: "'manual'" };
+    return { stdout: '' };
+  });
+  const linux = mods.shared.createSystemProxy({ run: linuxRun, platform: 'linux' });
+  const gnome = await linux.setBypass(['127.0.0.1', '*.corp.example']);
+  assert.equal(gnome.service, 'GNOME');
+  assert.ok(
+    linuxRun
+      .commands()
+      .includes(
+        `gsettings set org.gnome.system.proxy ignore-hosts ['127.0.0.1', '*.corp.example']`,
+      ),
+    `GVariant 写法不对：${linuxRun.commands().join(' | ')}`,
+  );
+
+  const win = mods.shared.createSystemProxy({ run: stubRun(() => ({})), platform: 'win32' });
+  await assert.rejects(() => win.setBypass(['a.example']), /Internet 选项/);
+});
+
+test('HTTP 端点：自定义绕过项能加能删，只动自己那一条，非法值 400', async () => {
+  const kernel = http.createServer((_req, res) => {
+    res.writeHead(200, { 'content-type': 'application/json' });
+    res.end(JSON.stringify({ 'mixed-port': 7890, mode: 'direct' }));
+  });
+  await new Promise((resolve) => kernel.listen(0, '127.0.0.1', resolve));
+  const cfgDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mihomo-dash-sysproxy-cfg-'));
+  fs.writeFileSync(
+    path.join(cfgDir, 'config.yaml'),
+    `mixed-port: 7890\nexternal-controller: 127.0.0.1:${kernel.address().port}\n`,
+  );
+  process.env.MIHOMO_DIR = cfgDir;
+  mods.paths.resetMihomoDirCache();
+  mods.kernel.resetControllerCache();
+
+  const stub = macOSBypassStub(['localhost', '127.0.0.0/8', '*.local']);
+  const app = express();
+  app.use(express.json());
+  mods.routes.registerSystemProxyRoutes(app, { run: stub.run, platform: 'darwin' });
+  const server = app.listen(0, '127.0.0.1');
+  await new Promise((resolve) => server.once('listening', resolve));
+  const base = `http://127.0.0.1:${server.address().port}`;
+  const storeFile = path.join(mods.paths.CLI_DIR, 'system-proxy.json');
+  const post = (value) =>
+    fetch(`${base}/api/system-proxy/bypass`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ value }),
+    });
+  const del = (value) =>
+    fetch(`${base}/api/system-proxy/bypass?value=${encodeURIComponent(value)}`, {
+      method: 'DELETE',
+    });
+
+  try {
+    // 加一条：规范化后落盘，并立刻写进系统绕过列表（现有 + 自定义 + 缺的固定项）
+    const added = await post('Corp.Example.');
+    assert.equal(added.status, 200);
+    const addedBody = await added.json();
+    assert.equal(addedBody.added, 'corp.example');
+    assert.deepEqual(addedBody.bypassCustom, ['corp.example']);
+    assert.ok(addedBody.applied.includes('corp.example'));
+    assert.deepEqual(
+      JSON.parse(fs.readFileSync(storeFile, 'utf8')),
+      { custom: ['corp.example'] },
+      '自定义项要落进状态目录',
+    );
+    assert.deepEqual(stub.bypass().slice(0, 4), [
+      'localhost',
+      '127.0.0.0/8',
+      '*.local',
+      'corp.example',
+    ]);
+    assert.ok(addedBody.bypass.includes('corp.example'), '写完之后 GET 状态里能看到它');
+
+    // 重复 / 非法：都是 400，且不改系统设置、不落盘
+    assert.equal((await post('corp.example')).status, 400);
+    const badBody = await (await post('example.com:8080')).json();
+    assert.match(badBody.error, /不合法|只能|不支持/);
+    assert.deepEqual(stub.bypass().slice(0, 4), [
+      'localhost',
+      '127.0.0.0/8',
+      '*.local',
+      'corp.example',
+    ]);
+
+    // Python 式大礼包也进不去（不会变成系统命令的参数）
+    assert.equal((await post('-setwebproxystate')).status, 400);
+
+    // 删掉：从列表与系统里都移除，其它条目一条不动
+    const removed = await del('CORP.example');
+    assert.equal(removed.status, 200);
+    const removedBody = await removed.json();
+    assert.equal(removedBody.removed, 'corp.example');
+    assert.deepEqual(removedBody.bypassCustom, []);
+    assert.deepEqual(JSON.parse(fs.readFileSync(storeFile, 'utf8')), { custom: [] });
+    assert.deepEqual(stub.bypass().slice(0, 3), ['localhost', '127.0.0.0/8', '*.local']);
+    assert.ok(!stub.bypass().includes('corp.example'), '系统列表里也要没了');
+
+    // 删不存在的：400（页面据此提示刷新）
+    const missing = await del('corp.example');
+    assert.equal(missing.status, 400);
+    assert.match((await missing.json()).error, /没有这一条/);
+
+    // 空 value：400
+    assert.equal((await del('  ')).status, 400);
+  } finally {
+    server.close();
+    kernel.close();
+    delete process.env.MIHOMO_DIR;
+    fs.rmSync(cfgDir, { recursive: true, force: true });
+    fs.rmSync(storeFile, { force: true });
+  }
+});