@rvanbaalen/roxyproxy 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +658 -0
- package/dist/cli/banner.d.ts +6 -0
- package/dist/cli/banner.js +30 -0
- package/dist/cli/banner.js.map +1 -0
- package/dist/cli/commands/clear.d.ts +2 -0
- package/dist/cli/commands/clear.js +35 -0
- package/dist/cli/commands/clear.js.map +1 -0
- package/dist/cli/commands/proxy-off.d.ts +2 -0
- package/dist/cli/commands/proxy-off.js +19 -0
- package/dist/cli/commands/proxy-off.js.map +1 -0
- package/dist/cli/commands/proxy-on.d.ts +2 -0
- package/dist/cli/commands/proxy-on.js +20 -0
- package/dist/cli/commands/proxy-on.js.map +1 -0
- package/dist/cli/commands/request.d.ts +2 -0
- package/dist/cli/commands/request.js +23 -0
- package/dist/cli/commands/request.js.map +1 -0
- package/dist/cli/commands/requests.d.ts +2 -0
- package/dist/cli/commands/requests.js +46 -0
- package/dist/cli/commands/requests.js.map +1 -0
- package/dist/cli/commands/start.d.ts +2 -0
- package/dist/cli/commands/start.js +41 -0
- package/dist/cli/commands/start.js.map +1 -0
- package/dist/cli/commands/status.d.ts +2 -0
- package/dist/cli/commands/status.js +44 -0
- package/dist/cli/commands/status.js.map +1 -0
- package/dist/cli/commands/stop.d.ts +2 -0
- package/dist/cli/commands/stop.js +52 -0
- package/dist/cli/commands/stop.js.map +1 -0
- package/dist/cli/commands/trust-ca.d.ts +2 -0
- package/dist/cli/commands/trust-ca.js +134 -0
- package/dist/cli/commands/trust-ca.js.map +1 -0
- package/dist/cli/format.d.ts +3 -0
- package/dist/cli/format.js +112 -0
- package/dist/cli/format.js.map +1 -0
- package/dist/cli/index.d.ts +2 -0
- package/dist/cli/index.js +35 -0
- package/dist/cli/index.js.map +1 -0
- package/dist/cli/interactive.d.ts +1 -0
- package/dist/cli/interactive.js +408 -0
- package/dist/cli/interactive.js.map +1 -0
- package/dist/cli/system-proxy.d.ts +14 -0
- package/dist/cli/system-proxy.js +115 -0
- package/dist/cli/system-proxy.js.map +1 -0
- package/dist/server/api.d.ts +10 -0
- package/dist/server/api.js +109 -0
- package/dist/server/api.js.map +1 -0
- package/dist/server/config.d.ts +6 -0
- package/dist/server/config.js +66 -0
- package/dist/server/config.js.map +1 -0
- package/dist/server/events.d.ts +20 -0
- package/dist/server/events.js +49 -0
- package/dist/server/events.js.map +1 -0
- package/dist/server/index.d.ts +20 -0
- package/dist/server/index.js +91 -0
- package/dist/server/index.js.map +1 -0
- package/dist/server/proxy.d.ts +27 -0
- package/dist/server/proxy.js +245 -0
- package/dist/server/proxy.js.map +1 -0
- package/dist/server/ssl.d.ts +17 -0
- package/dist/server/ssl.js +88 -0
- package/dist/server/ssl.js.map +1 -0
- package/dist/shared/types.d.ts +53 -0
- package/dist/shared/types.js +10 -0
- package/dist/shared/types.js.map +1 -0
- package/dist/storage/cleanup.d.ts +11 -0
- package/dist/storage/cleanup.js +32 -0
- package/dist/storage/cleanup.js.map +1 -0
- package/dist/storage/db.d.ts +17 -0
- package/dist/storage/db.js +152 -0
- package/dist/storage/db.js.map +1 -0
- package/dist/ui/assets/index-C8qts74N.js +9 -0
- package/dist/ui/assets/index-CrfXQK5U.css +2 -0
- package/dist/ui/index.html +13 -0
- package/package.json +59 -0
|
@@ -0,0 +1,245 @@
|
|
|
1
|
+
import http from 'node:http';
|
|
2
|
+
import https from 'node:https';
|
|
3
|
+
import tls from 'node:tls';
|
|
4
|
+
import { randomUUID } from 'node:crypto';
|
|
5
|
+
import { URL } from 'node:url';
|
|
6
|
+
export class ProxyServer {
|
|
7
|
+
db;
|
|
8
|
+
ca;
|
|
9
|
+
events;
|
|
10
|
+
config;
|
|
11
|
+
server = null;
|
|
12
|
+
sockets = new Set();
|
|
13
|
+
writeQueue = [];
|
|
14
|
+
writeTimer = null;
|
|
15
|
+
constructor(db, ca, events, config) {
|
|
16
|
+
this.db = db;
|
|
17
|
+
this.ca = ca;
|
|
18
|
+
this.events = events;
|
|
19
|
+
this.config = config;
|
|
20
|
+
}
|
|
21
|
+
async start() {
|
|
22
|
+
this.server = http.createServer((req, res) => this.handleRequest(req, res));
|
|
23
|
+
this.server.on('connect', (req, clientSocket, head) => this.handleConnect(req, clientSocket, head));
|
|
24
|
+
this.server.on('connection', (socket) => {
|
|
25
|
+
this.sockets.add(socket);
|
|
26
|
+
socket.on('close', () => this.sockets.delete(socket));
|
|
27
|
+
});
|
|
28
|
+
this.writeTimer = setInterval(() => this.flushWrites(), 100);
|
|
29
|
+
return new Promise((resolve) => {
|
|
30
|
+
this.server.listen(this.config.proxyPort, () => {
|
|
31
|
+
const addr = this.server.address();
|
|
32
|
+
resolve(addr.port);
|
|
33
|
+
});
|
|
34
|
+
});
|
|
35
|
+
}
|
|
36
|
+
async stop() {
|
|
37
|
+
if (this.writeTimer) {
|
|
38
|
+
clearInterval(this.writeTimer);
|
|
39
|
+
this.writeTimer = null;
|
|
40
|
+
}
|
|
41
|
+
this.flushWrites();
|
|
42
|
+
for (const socket of this.sockets) {
|
|
43
|
+
socket.destroy();
|
|
44
|
+
}
|
|
45
|
+
this.sockets.clear();
|
|
46
|
+
return new Promise((resolve) => {
|
|
47
|
+
if (this.server) {
|
|
48
|
+
this.server.close(() => resolve());
|
|
49
|
+
this.server = null;
|
|
50
|
+
}
|
|
51
|
+
else {
|
|
52
|
+
resolve();
|
|
53
|
+
}
|
|
54
|
+
});
|
|
55
|
+
}
|
|
56
|
+
get port() {
|
|
57
|
+
if (!this.server)
|
|
58
|
+
return 0;
|
|
59
|
+
const addr = this.server.address();
|
|
60
|
+
return addr?.port ?? 0;
|
|
61
|
+
}
|
|
62
|
+
flushWrites() {
|
|
63
|
+
if (this.writeQueue.length === 0)
|
|
64
|
+
return;
|
|
65
|
+
const batch = this.writeQueue;
|
|
66
|
+
this.writeQueue = [];
|
|
67
|
+
this.db.insertBatch(batch);
|
|
68
|
+
}
|
|
69
|
+
/**
|
|
70
|
+
* Strip accept-encoding from outgoing headers so the upstream server
|
|
71
|
+
* sends an uncompressed response. This avoids all decompression edge cases.
|
|
72
|
+
*/
|
|
73
|
+
stripEncoding(headers) {
|
|
74
|
+
delete headers['accept-encoding'];
|
|
75
|
+
}
|
|
76
|
+
handleRequest(clientReq, clientRes) {
|
|
77
|
+
const startTime = Date.now();
|
|
78
|
+
const id = randomUUID();
|
|
79
|
+
const url = clientReq.url || '/';
|
|
80
|
+
let parsed;
|
|
81
|
+
try {
|
|
82
|
+
parsed = new URL(url);
|
|
83
|
+
}
|
|
84
|
+
catch {
|
|
85
|
+
clientRes.writeHead(400);
|
|
86
|
+
clientRes.end('Bad Request');
|
|
87
|
+
return;
|
|
88
|
+
}
|
|
89
|
+
const requestBodyChunks = [];
|
|
90
|
+
clientReq.on('data', (chunk) => {
|
|
91
|
+
requestBodyChunks.push(chunk);
|
|
92
|
+
});
|
|
93
|
+
clientReq.on('end', () => {
|
|
94
|
+
const requestBody = Buffer.concat(requestBodyChunks);
|
|
95
|
+
const headers = { ...clientReq.headers };
|
|
96
|
+
delete headers['proxy-connection'];
|
|
97
|
+
this.stripEncoding(headers);
|
|
98
|
+
const options = {
|
|
99
|
+
hostname: parsed.hostname,
|
|
100
|
+
port: parsed.port || 80,
|
|
101
|
+
path: parsed.pathname + parsed.search,
|
|
102
|
+
method: clientReq.method,
|
|
103
|
+
headers,
|
|
104
|
+
};
|
|
105
|
+
const proxyReq = http.request(options, (proxyRes) => {
|
|
106
|
+
const responseBodyChunks = [];
|
|
107
|
+
proxyRes.on('data', (chunk) => {
|
|
108
|
+
responseBodyChunks.push(chunk);
|
|
109
|
+
});
|
|
110
|
+
proxyRes.on('end', () => {
|
|
111
|
+
const responseBody = Buffer.concat(responseBodyChunks);
|
|
112
|
+
const resHeaders = { ...proxyRes.headers };
|
|
113
|
+
delete resHeaders['transfer-encoding'];
|
|
114
|
+
resHeaders['content-length'] = responseBody.length.toString();
|
|
115
|
+
clientRes.writeHead(proxyRes.statusCode || 500, resHeaders);
|
|
116
|
+
clientRes.end(responseBody);
|
|
117
|
+
const truncated = requestBody.length > this.config.maxBodySize || responseBody.length > this.config.maxBodySize;
|
|
118
|
+
const contentType = (proxyRes.headers['content-type'] || '').split(';')[0].trim() || null;
|
|
119
|
+
const record = {
|
|
120
|
+
id,
|
|
121
|
+
timestamp: startTime,
|
|
122
|
+
method: clientReq.method || 'GET',
|
|
123
|
+
url,
|
|
124
|
+
host: parsed.hostname || '',
|
|
125
|
+
path: parsed.pathname || '/',
|
|
126
|
+
protocol: 'http',
|
|
127
|
+
request_headers: JSON.stringify(clientReq.headers),
|
|
128
|
+
request_body: requestBody.length > 0 ? requestBody.slice(0, this.config.maxBodySize) : null,
|
|
129
|
+
request_size: requestBody.length,
|
|
130
|
+
status: proxyRes.statusCode || 0,
|
|
131
|
+
response_headers: JSON.stringify(proxyRes.headers),
|
|
132
|
+
response_body: responseBody.length > 0 ? responseBody.slice(0, this.config.maxBodySize) : null,
|
|
133
|
+
response_size: responseBody.length,
|
|
134
|
+
duration: Date.now() - startTime,
|
|
135
|
+
content_type: contentType,
|
|
136
|
+
truncated: truncated ? 1 : 0,
|
|
137
|
+
};
|
|
138
|
+
this.writeQueue.push(record);
|
|
139
|
+
this.events.push(record);
|
|
140
|
+
});
|
|
141
|
+
});
|
|
142
|
+
proxyReq.on('error', () => {
|
|
143
|
+
clientRes.writeHead(502);
|
|
144
|
+
clientRes.end('Bad Gateway');
|
|
145
|
+
});
|
|
146
|
+
if (requestBody.length > 0) {
|
|
147
|
+
proxyReq.write(requestBody);
|
|
148
|
+
}
|
|
149
|
+
proxyReq.end();
|
|
150
|
+
});
|
|
151
|
+
}
|
|
152
|
+
handleConnect(req, clientSocket, _head) {
|
|
153
|
+
const [hostname, portStr] = (req.url || '').split(':');
|
|
154
|
+
const port = parseInt(portStr || '443', 10);
|
|
155
|
+
clientSocket.write('HTTP/1.1 200 Connection Established\r\n\r\n');
|
|
156
|
+
try {
|
|
157
|
+
const { cert, key } = this.ca.getCertForHost(hostname);
|
|
158
|
+
const tlsSocket = new tls.TLSSocket(clientSocket, {
|
|
159
|
+
isServer: true,
|
|
160
|
+
cert,
|
|
161
|
+
key,
|
|
162
|
+
ALPNProtocols: ['http/1.1'],
|
|
163
|
+
});
|
|
164
|
+
tlsSocket.on('error', () => {
|
|
165
|
+
clientSocket.destroy();
|
|
166
|
+
});
|
|
167
|
+
const virtualServer = http.createServer((clientReq, clientRes) => {
|
|
168
|
+
this.handleMitmRequest(hostname, port, clientReq, clientRes);
|
|
169
|
+
});
|
|
170
|
+
virtualServer.emit('connection', tlsSocket);
|
|
171
|
+
}
|
|
172
|
+
catch {
|
|
173
|
+
clientSocket.end();
|
|
174
|
+
}
|
|
175
|
+
}
|
|
176
|
+
handleMitmRequest(hostname, port, clientReq, clientRes) {
|
|
177
|
+
const startTime = Date.now();
|
|
178
|
+
const id = randomUUID();
|
|
179
|
+
const urlPath = clientReq.url || '/';
|
|
180
|
+
const fullUrl = `https://${hostname}${urlPath}`;
|
|
181
|
+
const requestBodyChunks = [];
|
|
182
|
+
clientReq.on('data', (chunk) => {
|
|
183
|
+
requestBodyChunks.push(chunk);
|
|
184
|
+
});
|
|
185
|
+
clientReq.on('end', () => {
|
|
186
|
+
const requestBody = Buffer.concat(requestBodyChunks);
|
|
187
|
+
const headers = { ...clientReq.headers, host: hostname };
|
|
188
|
+
this.stripEncoding(headers);
|
|
189
|
+
const options = {
|
|
190
|
+
hostname,
|
|
191
|
+
port,
|
|
192
|
+
path: urlPath,
|
|
193
|
+
method: clientReq.method,
|
|
194
|
+
headers,
|
|
195
|
+
rejectUnauthorized: false,
|
|
196
|
+
};
|
|
197
|
+
const proxyReq = https.request(options, (proxyRes) => {
|
|
198
|
+
const responseBodyChunks = [];
|
|
199
|
+
proxyRes.on('data', (chunk) => {
|
|
200
|
+
responseBodyChunks.push(chunk);
|
|
201
|
+
});
|
|
202
|
+
proxyRes.on('end', () => {
|
|
203
|
+
const responseBody = Buffer.concat(responseBodyChunks);
|
|
204
|
+
const resHeaders = { ...proxyRes.headers };
|
|
205
|
+
delete resHeaders['transfer-encoding'];
|
|
206
|
+
resHeaders['content-length'] = responseBody.length.toString();
|
|
207
|
+
clientRes.writeHead(proxyRes.statusCode || 500, resHeaders);
|
|
208
|
+
clientRes.end(responseBody);
|
|
209
|
+
const truncated = requestBody.length > this.config.maxBodySize || responseBody.length > this.config.maxBodySize;
|
|
210
|
+
const contentType = (proxyRes.headers['content-type'] || '').split(';')[0].trim() || null;
|
|
211
|
+
const record = {
|
|
212
|
+
id,
|
|
213
|
+
timestamp: startTime,
|
|
214
|
+
method: clientReq.method || 'GET',
|
|
215
|
+
url: fullUrl,
|
|
216
|
+
host: hostname,
|
|
217
|
+
path: urlPath,
|
|
218
|
+
protocol: 'https',
|
|
219
|
+
request_headers: JSON.stringify(clientReq.headers),
|
|
220
|
+
request_body: requestBody.length > 0 ? requestBody.slice(0, this.config.maxBodySize) : null,
|
|
221
|
+
request_size: requestBody.length,
|
|
222
|
+
status: proxyRes.statusCode || 0,
|
|
223
|
+
response_headers: JSON.stringify(proxyRes.headers),
|
|
224
|
+
response_body: responseBody.length > 0 ? responseBody.slice(0, this.config.maxBodySize) : null,
|
|
225
|
+
response_size: responseBody.length,
|
|
226
|
+
duration: Date.now() - startTime,
|
|
227
|
+
content_type: contentType,
|
|
228
|
+
truncated: truncated ? 1 : 0,
|
|
229
|
+
};
|
|
230
|
+
this.writeQueue.push(record);
|
|
231
|
+
this.events.push(record);
|
|
232
|
+
});
|
|
233
|
+
});
|
|
234
|
+
proxyReq.on('error', () => {
|
|
235
|
+
clientRes.writeHead(502);
|
|
236
|
+
clientRes.end('Bad Gateway');
|
|
237
|
+
});
|
|
238
|
+
if (requestBody.length > 0) {
|
|
239
|
+
proxyReq.write(requestBody);
|
|
240
|
+
}
|
|
241
|
+
proxyReq.end();
|
|
242
|
+
});
|
|
243
|
+
}
|
|
244
|
+
}
|
|
245
|
+
//# sourceMappingURL=proxy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/server/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAE/B,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAM/B,MAAM,OAAO,WAAW;IAOZ;IACA;IACA;IACA;IATF,MAAM,GAAuB,IAAI,CAAC;IAClC,OAAO,GAAoB,IAAI,GAAG,EAAE,CAAC;IACrC,UAAU,GAAoB,EAAE,CAAC;IACjC,UAAU,GAA0C,IAAI,CAAC;IAEjE,YACU,EAAY,EACZ,EAAwB,EACxB,MAAoB,EACpB,MAAc;QAHd,OAAE,GAAF,EAAE,CAAU;QACZ,OAAE,GAAF,EAAE,CAAsB;QACxB,WAAM,GAAN,MAAM,CAAc;QACpB,WAAM,GAAN,MAAM,CAAQ;IACrB,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,YAAwB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;QAChH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAE7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAO,CAAC,OAAO,EAAqB,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAA4B,CAAC;QAC7D,OAAO,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;IACzB,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,OAAsD;QAC1E,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpC,CAAC;IAEO,aAAa,CAAC,SAA+B,EAAE,SAA8B;QACnF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAExB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,GAAG,CAAC;QACjC,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACzB,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACrC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACvB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAErD,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;YACzC,OAAQ,OAAkC,CAAC,kBAAkB,CAAC,CAAC;YAC/D,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAE5B,MAAM,OAAO,GAAwB;gBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;gBACvB,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;gBACrC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,OAAO;aACR,CAAC;YAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAClD,MAAM,kBAAkB,GAAa,EAAE,CAAC;gBAExC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACpC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACtB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBAEvD,MAAM,UAAU,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;oBAC3C,OAAO,UAAU,CAAC,mBAAmB,CAAC,CAAC;oBACvC,UAAU,CAAC,gBAAgB,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAC9D,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;oBAC5D,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBAE5B,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAChH,MAAM,WAAW,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;oBAE1F,MAAM,MAAM,GAAkB;wBAC5B,EAAE;wBACF,SAAS,EAAE,SAAS;wBACpB,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,KAAK;wBACjC,GAAG;wBACH,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;wBAC3B,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,GAAG;wBAC5B,QAAQ,EAAE,MAAM;wBAChB,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;wBAClD,YAAY,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC3F,YAAY,EAAE,WAAW,CAAC,MAAM;wBAChC,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC;wBAChC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAClD,aAAa,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC9F,aAAa,EAAE,YAAY,CAAC,MAAM;wBAClC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAChC,YAAY,EAAE,WAAW;wBACzB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC7B,CAAC;oBAEF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACxB,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACzB,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9B,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAAyB,EAAE,YAAwB,EAAE,KAAa;QACtF,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC;QAE5C,YAAY,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAEvD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE;gBAChD,QAAQ,EAAE,IAAI;gBACd,IAAI;gBACJ,GAAG;gBACH,aAAa,EAAE,CAAC,UAAU,CAAC;aAC5B,CAAC,CAAC;YAEH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzB,YAAY,CAAC,OAAO,EAAE,CAAC;YACzB,CAAC,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE;gBAC/D,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;YAEH,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,SAA+B,EAAE,SAA8B;QACvH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,IAAI,GAAG,CAAC;QACrC,MAAM,OAAO,GAAG,WAAW,QAAQ,GAAG,OAAO,EAAE,CAAC;QAEhD,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACrC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACvB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAErD,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACzD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAE5B,MAAM,OAAO,GAAyB;gBACpC,QAAQ;gBACR,IAAI;gBACJ,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,OAAO;gBACP,kBAAkB,EAAE,KAAK;aAC1B,CAAC;YAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;gBACnD,MAAM,kBAAkB,GAAa,EAAE,CAAC;gBAExC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACpC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;gBAEH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACtB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBAEvD,MAAM,UAAU,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;oBAC3C,OAAO,UAAU,CAAC,mBAAmB,CAAC,CAAC;oBACvC,UAAU,CAAC,gBAAgB,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAC9D,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC;oBAC5D,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBAE5B,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAChH,MAAM,WAAW,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;oBAE1F,MAAM,MAAM,GAAkB;wBAC5B,EAAE;wBACF,SAAS,EAAE,SAAS;wBACpB,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,KAAK;wBACjC,GAAG,EAAE,OAAO;wBACZ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,OAAO;wBACjB,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;wBAClD,YAAY,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC3F,YAAY,EAAE,WAAW,CAAC,MAAM;wBAChC,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC;wBAChC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAClD,aAAa,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC9F,aAAa,EAAE,YAAY,CAAC,MAAM;wBAClC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAChC,YAAY,EAAE,WAAW;wBACzB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC7B,CAAC;oBAEF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACxB,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACzB,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9B,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
interface CertKeyPair {
|
|
2
|
+
cert: string;
|
|
3
|
+
key: string;
|
|
4
|
+
}
|
|
5
|
+
export declare class CertificateAuthority {
|
|
6
|
+
private caDir;
|
|
7
|
+
private cacheSize;
|
|
8
|
+
private caCert;
|
|
9
|
+
private caKey;
|
|
10
|
+
private cache;
|
|
11
|
+
private cacheOrder;
|
|
12
|
+
constructor(caDir: string, cacheSize?: number);
|
|
13
|
+
init(): void;
|
|
14
|
+
getCertForHost(hostname: string): CertKeyPair;
|
|
15
|
+
getCaCertPath(): string;
|
|
16
|
+
}
|
|
17
|
+
export {};
|
|
@@ -0,0 +1,88 @@
|
|
|
1
|
+
import forge from 'node-forge';
|
|
2
|
+
import fs from 'node:fs';
|
|
3
|
+
import path from 'node:path';
|
|
4
|
+
export class CertificateAuthority {
|
|
5
|
+
caDir;
|
|
6
|
+
cacheSize;
|
|
7
|
+
caCert = null;
|
|
8
|
+
caKey = null;
|
|
9
|
+
cache = new Map();
|
|
10
|
+
cacheOrder = [];
|
|
11
|
+
constructor(caDir, cacheSize = 500) {
|
|
12
|
+
this.caDir = caDir;
|
|
13
|
+
this.cacheSize = cacheSize;
|
|
14
|
+
}
|
|
15
|
+
init() {
|
|
16
|
+
fs.mkdirSync(this.caDir, { recursive: true });
|
|
17
|
+
const certPath = path.join(this.caDir, 'ca.crt');
|
|
18
|
+
const keyPath = path.join(this.caDir, 'ca.key');
|
|
19
|
+
if (fs.existsSync(certPath) && fs.existsSync(keyPath)) {
|
|
20
|
+
const certPem = fs.readFileSync(certPath, 'utf-8');
|
|
21
|
+
const keyPem = fs.readFileSync(keyPath, 'utf-8');
|
|
22
|
+
this.caCert = forge.pki.certificateFromPem(certPem);
|
|
23
|
+
this.caKey = forge.pki.privateKeyFromPem(keyPem);
|
|
24
|
+
return;
|
|
25
|
+
}
|
|
26
|
+
const keys = forge.pki.rsa.generateKeyPair(2048);
|
|
27
|
+
const cert = forge.pki.createCertificate();
|
|
28
|
+
cert.publicKey = keys.publicKey;
|
|
29
|
+
cert.serialNumber = '01';
|
|
30
|
+
cert.validity.notBefore = new Date();
|
|
31
|
+
cert.validity.notAfter = new Date();
|
|
32
|
+
cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 10);
|
|
33
|
+
const attrs = [
|
|
34
|
+
{ name: 'commonName', value: 'RoxyProxy CA' },
|
|
35
|
+
{ name: 'organizationName', value: 'RoxyProxy' },
|
|
36
|
+
];
|
|
37
|
+
cert.setSubject(attrs);
|
|
38
|
+
cert.setIssuer(attrs);
|
|
39
|
+
cert.setExtensions([
|
|
40
|
+
{ name: 'basicConstraints', cA: true },
|
|
41
|
+
{ name: 'keyUsage', keyCertSign: true, cRLSign: true },
|
|
42
|
+
]);
|
|
43
|
+
cert.sign(keys.privateKey, forge.md.sha256.create());
|
|
44
|
+
fs.writeFileSync(certPath, forge.pki.certificateToPem(cert));
|
|
45
|
+
fs.writeFileSync(keyPath, forge.pki.privateKeyToPem(keys.privateKey));
|
|
46
|
+
this.caCert = cert;
|
|
47
|
+
this.caKey = keys.privateKey;
|
|
48
|
+
}
|
|
49
|
+
getCertForHost(hostname) {
|
|
50
|
+
if (!this.caCert || !this.caKey) {
|
|
51
|
+
throw new Error('CA not initialized. Call init() first.');
|
|
52
|
+
}
|
|
53
|
+
const cached = this.cache.get(hostname);
|
|
54
|
+
if (cached) {
|
|
55
|
+
this.cacheOrder = this.cacheOrder.filter(h => h !== hostname);
|
|
56
|
+
this.cacheOrder.push(hostname);
|
|
57
|
+
return cached;
|
|
58
|
+
}
|
|
59
|
+
const keys = forge.pki.rsa.generateKeyPair(2048);
|
|
60
|
+
const cert = forge.pki.createCertificate();
|
|
61
|
+
cert.publicKey = keys.publicKey;
|
|
62
|
+
cert.serialNumber = Date.now().toString(16);
|
|
63
|
+
cert.validity.notBefore = new Date();
|
|
64
|
+
cert.validity.notAfter = new Date();
|
|
65
|
+
cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 1);
|
|
66
|
+
cert.setSubject([{ name: 'commonName', value: hostname }]);
|
|
67
|
+
cert.setIssuer(this.caCert.subject.attributes);
|
|
68
|
+
cert.setExtensions([
|
|
69
|
+
{ name: 'subjectAltName', altNames: [{ type: 2, value: hostname }] },
|
|
70
|
+
]);
|
|
71
|
+
cert.sign(this.caKey, forge.md.sha256.create());
|
|
72
|
+
const pair = {
|
|
73
|
+
cert: forge.pki.certificateToPem(cert),
|
|
74
|
+
key: forge.pki.privateKeyToPem(keys.privateKey),
|
|
75
|
+
};
|
|
76
|
+
if (this.cacheOrder.length >= this.cacheSize) {
|
|
77
|
+
const evicted = this.cacheOrder.shift();
|
|
78
|
+
this.cache.delete(evicted);
|
|
79
|
+
}
|
|
80
|
+
this.cache.set(hostname, pair);
|
|
81
|
+
this.cacheOrder.push(hostname);
|
|
82
|
+
return pair;
|
|
83
|
+
}
|
|
84
|
+
getCaCertPath() {
|
|
85
|
+
return path.join(this.caDir, 'ca.crt');
|
|
86
|
+
}
|
|
87
|
+
}
|
|
88
|
+
//# sourceMappingURL=ssl.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ssl.js","sourceRoot":"","sources":["../../src/server/ssl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B,MAAM,OAAO,oBAAoB;IAOrB;IACA;IAPF,MAAM,GAAiC,IAAI,CAAC;IAC5C,KAAK,GAAoC,IAAI,CAAC;IAC9C,KAAK,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC5C,UAAU,GAAa,EAAE,CAAC;IAElC,YACU,KAAa,EACb,YAAoB,GAAG;QADvB,UAAK,GAAL,KAAK,CAAQ;QACb,cAAS,GAAT,SAAS,CAAc;IAC9B,CAAC;IAEJ,IAAI;QACF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEhD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAE/E,MAAM,KAAK,GAAG;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE;YAC7C,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,WAAW,EAAE;SACjD,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,aAAa,CAAC;YACjB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE;YACtC,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SACvD,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAErD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAE9E,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC;YACjB,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE;SACrE,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAgB;YACxB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC;YACtC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;SAChD,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAG,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;CACF"}
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
export interface RequestRecord {
|
|
2
|
+
id: string;
|
|
3
|
+
timestamp: number;
|
|
4
|
+
method: string;
|
|
5
|
+
url: string;
|
|
6
|
+
host: string;
|
|
7
|
+
path: string;
|
|
8
|
+
protocol: 'http' | 'https';
|
|
9
|
+
request_headers: string;
|
|
10
|
+
request_body: Buffer | null;
|
|
11
|
+
request_size: number;
|
|
12
|
+
status: number | null;
|
|
13
|
+
response_headers: string | null;
|
|
14
|
+
response_body: Buffer | null;
|
|
15
|
+
response_size: number;
|
|
16
|
+
duration: number | null;
|
|
17
|
+
content_type: string | null;
|
|
18
|
+
truncated: number;
|
|
19
|
+
}
|
|
20
|
+
export interface Config {
|
|
21
|
+
proxyPort: number;
|
|
22
|
+
uiPort: number;
|
|
23
|
+
dbPath: string;
|
|
24
|
+
maxAge: number;
|
|
25
|
+
maxDbSize: number;
|
|
26
|
+
maxBodySize: number;
|
|
27
|
+
certCacheSize: number;
|
|
28
|
+
}
|
|
29
|
+
export declare const DEFAULT_CONFIG: Config;
|
|
30
|
+
export interface PaginatedResponse<T> {
|
|
31
|
+
data: T[];
|
|
32
|
+
total: number;
|
|
33
|
+
limit: number;
|
|
34
|
+
offset: number;
|
|
35
|
+
}
|
|
36
|
+
export interface ProxyStatus {
|
|
37
|
+
running: boolean;
|
|
38
|
+
proxyPort: number;
|
|
39
|
+
uiPort: number;
|
|
40
|
+
requestCount: number;
|
|
41
|
+
dbSizeBytes: number;
|
|
42
|
+
}
|
|
43
|
+
export interface RequestFilter {
|
|
44
|
+
host?: string;
|
|
45
|
+
status?: number;
|
|
46
|
+
method?: string;
|
|
47
|
+
content_type?: string;
|
|
48
|
+
search?: string;
|
|
49
|
+
since?: number;
|
|
50
|
+
until?: number;
|
|
51
|
+
limit?: number;
|
|
52
|
+
offset?: number;
|
|
53
|
+
}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
export const DEFAULT_CONFIG = {
|
|
2
|
+
proxyPort: 8080,
|
|
3
|
+
uiPort: 8081,
|
|
4
|
+
dbPath: '~/.roxyproxy/data.db',
|
|
5
|
+
maxAge: 7 * 24 * 60 * 60 * 1000,
|
|
6
|
+
maxDbSize: 500 * 1024 * 1024,
|
|
7
|
+
maxBodySize: 1 * 1024 * 1024,
|
|
8
|
+
certCacheSize: 500,
|
|
9
|
+
};
|
|
10
|
+
//# sourceMappingURL=types.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AA8BA,MAAM,CAAC,MAAM,cAAc,GAAW;IACpC,SAAS,EAAE,IAAI;IACf,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,sBAAsB;IAC9B,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAC/B,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IAC5B,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC5B,aAAa,EAAE,GAAG;CACnB,CAAC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import type { Database } from './db.js';
|
|
2
|
+
import type { Config } from '../shared/types.js';
|
|
3
|
+
export declare class Cleanup {
|
|
4
|
+
private db;
|
|
5
|
+
private config;
|
|
6
|
+
private timer;
|
|
7
|
+
constructor(db: Database, config: Config);
|
|
8
|
+
start(): void;
|
|
9
|
+
stop(): void;
|
|
10
|
+
run(): void;
|
|
11
|
+
}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
export class Cleanup {
|
|
2
|
+
db;
|
|
3
|
+
config;
|
|
4
|
+
timer = null;
|
|
5
|
+
constructor(db, config) {
|
|
6
|
+
this.db = db;
|
|
7
|
+
this.config = config;
|
|
8
|
+
}
|
|
9
|
+
start() {
|
|
10
|
+
this.timer = setInterval(() => this.run(), 5 * 60 * 1000);
|
|
11
|
+
}
|
|
12
|
+
stop() {
|
|
13
|
+
if (this.timer) {
|
|
14
|
+
clearInterval(this.timer);
|
|
15
|
+
this.timer = null;
|
|
16
|
+
}
|
|
17
|
+
}
|
|
18
|
+
run() {
|
|
19
|
+
// Delete by age
|
|
20
|
+
const cutoff = Date.now() - this.config.maxAge;
|
|
21
|
+
this.db.deleteOlderThan(cutoff);
|
|
22
|
+
// Delete oldest in batches until under size limit
|
|
23
|
+
while (this.db.getDbSize() > this.config.maxDbSize) {
|
|
24
|
+
const deleted = this.db.deleteOldest(100);
|
|
25
|
+
if (deleted === 0)
|
|
26
|
+
break;
|
|
27
|
+
}
|
|
28
|
+
// Reclaim disk space
|
|
29
|
+
this.db.incrementalVacuum();
|
|
30
|
+
}
|
|
31
|
+
}
|
|
32
|
+
//# sourceMappingURL=cleanup.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/storage/cleanup.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,OAAO;IAIR;IACA;IAJF,KAAK,GAA0C,IAAI,CAAC;IAE5D,YACU,EAAY,EACZ,MAAc;QADd,OAAE,GAAF,EAAE,CAAU;QACZ,WAAM,GAAN,MAAM,CAAQ;IACrB,CAAC;IAEJ,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,GAAG;QACD,gBAAgB;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAEhC,kDAAkD;QAClD,OAAO,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,OAAO,KAAK,CAAC;gBAAE,MAAM;QAC3B,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC;IAC9B,CAAC;CACF"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import type { RequestRecord, RequestFilter, PaginatedResponse } from '../shared/types.js';
|
|
2
|
+
export declare class Database {
|
|
3
|
+
private db;
|
|
4
|
+
constructor(dbPath: string);
|
|
5
|
+
private init;
|
|
6
|
+
insert(record: RequestRecord): void;
|
|
7
|
+
insertBatch(records: RequestRecord[]): void;
|
|
8
|
+
getById(id: string): RequestRecord | null;
|
|
9
|
+
query(filter: RequestFilter): PaginatedResponse<RequestRecord>;
|
|
10
|
+
deleteAll(): void;
|
|
11
|
+
deleteOlderThan(timestampMs: number): number;
|
|
12
|
+
deleteOldest(limit: number): number;
|
|
13
|
+
incrementalVacuum(): void;
|
|
14
|
+
getRequestCount(): number;
|
|
15
|
+
getDbSize(): number;
|
|
16
|
+
close(): void;
|
|
17
|
+
}
|
|
@@ -0,0 +1,152 @@
|
|
|
1
|
+
import BetterSqlite3 from 'better-sqlite3';
|
|
2
|
+
import fs from 'node:fs';
|
|
3
|
+
export class Database {
|
|
4
|
+
db;
|
|
5
|
+
constructor(dbPath) {
|
|
6
|
+
const dir = dbPath.substring(0, dbPath.lastIndexOf('/'));
|
|
7
|
+
if (dir)
|
|
8
|
+
fs.mkdirSync(dir, { recursive: true });
|
|
9
|
+
this.db = new BetterSqlite3(dbPath);
|
|
10
|
+
this.db.pragma('journal_mode = WAL');
|
|
11
|
+
this.db.pragma('auto_vacuum = INCREMENTAL');
|
|
12
|
+
this.init();
|
|
13
|
+
}
|
|
14
|
+
init() {
|
|
15
|
+
this.db.exec(`
|
|
16
|
+
CREATE TABLE IF NOT EXISTS requests (
|
|
17
|
+
id TEXT PRIMARY KEY,
|
|
18
|
+
timestamp INTEGER NOT NULL,
|
|
19
|
+
method TEXT NOT NULL,
|
|
20
|
+
url TEXT NOT NULL,
|
|
21
|
+
host TEXT NOT NULL,
|
|
22
|
+
path TEXT NOT NULL,
|
|
23
|
+
protocol TEXT NOT NULL,
|
|
24
|
+
request_headers TEXT,
|
|
25
|
+
request_body BLOB,
|
|
26
|
+
request_size INTEGER,
|
|
27
|
+
status INTEGER,
|
|
28
|
+
response_headers TEXT,
|
|
29
|
+
response_body BLOB,
|
|
30
|
+
response_size INTEGER,
|
|
31
|
+
duration INTEGER,
|
|
32
|
+
content_type TEXT,
|
|
33
|
+
truncated INTEGER DEFAULT 0
|
|
34
|
+
);
|
|
35
|
+
CREATE INDEX IF NOT EXISTS idx_timestamp ON requests(timestamp);
|
|
36
|
+
CREATE INDEX IF NOT EXISTS idx_host ON requests(host);
|
|
37
|
+
CREATE INDEX IF NOT EXISTS idx_status ON requests(status);
|
|
38
|
+
CREATE INDEX IF NOT EXISTS idx_path ON requests(path);
|
|
39
|
+
CREATE INDEX IF NOT EXISTS idx_content_type ON requests(content_type);
|
|
40
|
+
`);
|
|
41
|
+
}
|
|
42
|
+
insert(record) {
|
|
43
|
+
const stmt = this.db.prepare(`
|
|
44
|
+
INSERT INTO requests (
|
|
45
|
+
id, timestamp, method, url, host, path, protocol,
|
|
46
|
+
request_headers, request_body, request_size,
|
|
47
|
+
status, response_headers, response_body, response_size,
|
|
48
|
+
duration, content_type, truncated
|
|
49
|
+
) VALUES (
|
|
50
|
+
@id, @timestamp, @method, @url, @host, @path, @protocol,
|
|
51
|
+
@request_headers, @request_body, @request_size,
|
|
52
|
+
@status, @response_headers, @response_body, @response_size,
|
|
53
|
+
@duration, @content_type, @truncated
|
|
54
|
+
)
|
|
55
|
+
`);
|
|
56
|
+
stmt.run(record);
|
|
57
|
+
}
|
|
58
|
+
insertBatch(records) {
|
|
59
|
+
const stmt = this.db.prepare(`
|
|
60
|
+
INSERT INTO requests (
|
|
61
|
+
id, timestamp, method, url, host, path, protocol,
|
|
62
|
+
request_headers, request_body, request_size,
|
|
63
|
+
status, response_headers, response_body, response_size,
|
|
64
|
+
duration, content_type, truncated
|
|
65
|
+
) VALUES (
|
|
66
|
+
@id, @timestamp, @method, @url, @host, @path, @protocol,
|
|
67
|
+
@request_headers, @request_body, @request_size,
|
|
68
|
+
@status, @response_headers, @response_body, @response_size,
|
|
69
|
+
@duration, @content_type, @truncated
|
|
70
|
+
)
|
|
71
|
+
`);
|
|
72
|
+
const insertMany = this.db.transaction((records) => {
|
|
73
|
+
for (const record of records) {
|
|
74
|
+
stmt.run(record);
|
|
75
|
+
}
|
|
76
|
+
});
|
|
77
|
+
insertMany(records);
|
|
78
|
+
}
|
|
79
|
+
getById(id) {
|
|
80
|
+
const stmt = this.db.prepare('SELECT * FROM requests WHERE id = ?');
|
|
81
|
+
return stmt.get(id) ?? null;
|
|
82
|
+
}
|
|
83
|
+
query(filter) {
|
|
84
|
+
const conditions = [];
|
|
85
|
+
const params = {};
|
|
86
|
+
if (filter.host) {
|
|
87
|
+
conditions.push('host LIKE @host');
|
|
88
|
+
params.host = `%${filter.host}%`;
|
|
89
|
+
}
|
|
90
|
+
if (filter.status !== undefined) {
|
|
91
|
+
conditions.push('status = @status');
|
|
92
|
+
params.status = filter.status;
|
|
93
|
+
}
|
|
94
|
+
if (filter.method) {
|
|
95
|
+
conditions.push('method = @method');
|
|
96
|
+
params.method = filter.method.toUpperCase();
|
|
97
|
+
}
|
|
98
|
+
if (filter.content_type) {
|
|
99
|
+
conditions.push('content_type LIKE @content_type');
|
|
100
|
+
params.content_type = `%${filter.content_type}%`;
|
|
101
|
+
}
|
|
102
|
+
if (filter.search) {
|
|
103
|
+
conditions.push('url LIKE @search');
|
|
104
|
+
params.search = `%${filter.search}%`;
|
|
105
|
+
}
|
|
106
|
+
if (filter.since) {
|
|
107
|
+
conditions.push('timestamp >= @since');
|
|
108
|
+
params.since = filter.since;
|
|
109
|
+
}
|
|
110
|
+
if (filter.until) {
|
|
111
|
+
conditions.push('timestamp <= @until');
|
|
112
|
+
params.until = filter.until;
|
|
113
|
+
}
|
|
114
|
+
const where = conditions.length > 0
|
|
115
|
+
? `WHERE ${conditions.join(' AND ')}`
|
|
116
|
+
: '';
|
|
117
|
+
const limit = filter.limit ?? 100;
|
|
118
|
+
const offset = filter.offset ?? 0;
|
|
119
|
+
const countStmt = this.db.prepare(`SELECT COUNT(*) as count FROM requests ${where}`);
|
|
120
|
+
const total = countStmt.get(params).count;
|
|
121
|
+
const dataStmt = this.db.prepare(`SELECT * FROM requests ${where} ORDER BY timestamp DESC LIMIT @limit OFFSET @offset`);
|
|
122
|
+
const data = dataStmt.all({ ...params, limit, offset });
|
|
123
|
+
return { data, total, limit, offset };
|
|
124
|
+
}
|
|
125
|
+
deleteAll() {
|
|
126
|
+
this.db.exec('DELETE FROM requests');
|
|
127
|
+
}
|
|
128
|
+
deleteOlderThan(timestampMs) {
|
|
129
|
+
const stmt = this.db.prepare('DELETE FROM requests WHERE timestamp < ?');
|
|
130
|
+
return stmt.run(timestampMs).changes;
|
|
131
|
+
}
|
|
132
|
+
deleteOldest(limit) {
|
|
133
|
+
const stmt = this.db.prepare('DELETE FROM requests WHERE id IN (SELECT id FROM requests ORDER BY timestamp ASC LIMIT ?)');
|
|
134
|
+
return stmt.run(limit).changes;
|
|
135
|
+
}
|
|
136
|
+
incrementalVacuum() {
|
|
137
|
+
this.db.pragma('incremental_vacuum');
|
|
138
|
+
}
|
|
139
|
+
getRequestCount() {
|
|
140
|
+
const stmt = this.db.prepare('SELECT COUNT(*) as count FROM requests');
|
|
141
|
+
return stmt.get().count;
|
|
142
|
+
}
|
|
143
|
+
getDbSize() {
|
|
144
|
+
const pageCount = this.db.pragma('page_count', { simple: true });
|
|
145
|
+
const pageSize = this.db.pragma('page_size', { simple: true });
|
|
146
|
+
return pageCount * pageSize;
|
|
147
|
+
}
|
|
148
|
+
close() {
|
|
149
|
+
this.db.close();
|
|
150
|
+
}
|
|
151
|
+
}
|
|
152
|
+
//# sourceMappingURL=db.js.map
|