08dd1c7f75
功能特性： - 用户端充值记录页面，从使用日志中分离 - 充值记录中的去开发票功能 - 管理员发票管理页面 - 发票申请、处理、邮件通知功能 - 侧边栏菜单更新 - UI优化和控制台清理 - Docker部署配置 - 生产环境安全配置
81 lines
1.7 KiB
Go
81 lines
1.7 KiB
Go
package middleware
|
|
|
|
import (
|
|
"encoding/json"
|
|
"github.com/gin-contrib/sessions"
|
|
"github.com/gin-gonic/gin"
|
|
"net/http"
|
|
"net/url"
|
|
"one-api/common"
|
|
)
|
|
|
|
type turnstileCheckResponse struct {
|
|
Success bool `json:"success"`
|
|
}
|
|
|
|
func TurnstileCheck() gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
if common.TurnstileCheckEnabled {
|
|
session := sessions.Default(c)
|
|
turnstileChecked := session.Get("turnstile")
|
|
if turnstileChecked != nil {
|
|
c.Next()
|
|
return
|
|
}
|
|
response := c.Query("turnstile")
|
|
if response == "" {
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": false,
|
|
"message": "Turnstile token 为空",
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
rawRes, err := http.PostForm("https://challenges.cloudflare.com/turnstile/v0/siteverify", url.Values{
|
|
"secret": {common.TurnstileSecretKey},
|
|
"response": {response},
|
|
"remoteip": {c.ClientIP()},
|
|
})
|
|
if err != nil {
|
|
common.SysError(err.Error())
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": false,
|
|
"message": err.Error(),
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
defer rawRes.Body.Close()
|
|
var res turnstileCheckResponse
|
|
err = json.NewDecoder(rawRes.Body).Decode(&res)
|
|
if err != nil {
|
|
common.SysError(err.Error())
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": false,
|
|
"message": err.Error(),
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
if !res.Success {
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"success": false,
|
|
"message": "Turnstile 校验失败，请刷新重试！",
|
|
})
|
|
c.Abort()
|
|
return
|
|
}
|
|
session.Set("turnstile", true)
|
|
err = session.Save()
|
|
if err != nil {
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"message": "无法保存会话信息，请重试",
|
|
"success": false,
|
|
})
|
|
return
|
|
}
|
|
}
|
|
c.Next()
|
|
}
|
|
}
|