72 lines
1.8 KiB
TypeScript
72 lines
1.8 KiB
TypeScript
import express from "express";
|
||
import cors from "cors";
|
||
import { DEFAULT_CONFIG } from "../app/env";
|
||
import { readEnvFile, writeEnvFile } from "./env";
|
||
|
||
const app = express();
|
||
const address = process.env.VITE_ADDRESS ?? DEFAULT_CONFIG.VITE_ADDRESS;
|
||
const port = Number(process.env.VITE_PORT ?? DEFAULT_CONFIG.VITE_PORT);
|
||
|
||
const ALLOWED_ORIGIN = `http://${address}:${port}`;
|
||
// 配置 CORS，只允许来自 Vite 服务器的请求
|
||
app.use(
|
||
cors({
|
||
origin: (origin, callback) => {
|
||
if (!origin || origin === ALLOWED_ORIGIN) {
|
||
callback(null, true);
|
||
} else {
|
||
callback(new Error("不允许的来源"));
|
||
}
|
||
},
|
||
credentials: true,
|
||
}),
|
||
);
|
||
|
||
// 添加 IP 和端口检查中间件
|
||
const checkAccessMiddleware = (
|
||
req: express.Request,
|
||
res: express.Response,
|
||
next: express.NextFunction,
|
||
) => {
|
||
const clientIp = req.ip === "::1" ? "localhost" : req.ip;
|
||
const clientPort = Number(req.get("origin")?.split(":").pop() ?? 0);
|
||
|
||
const isLocalIp = clientIp === "localhost" || clientIp === "127.0.0.1";
|
||
const isAllowedPort = clientPort === port;
|
||
|
||
if (isLocalIp && isAllowedPort) {
|
||
next();
|
||
} else {
|
||
res.status(403).json({
|
||
error: "禁止访问",
|
||
detail: `仅允许 ${address}:${port} 访问`,
|
||
});
|
||
}
|
||
};
|
||
|
||
app.use(checkAccessMiddleware);
|
||
app.use(express.json());
|
||
|
||
app.get("/env", async (req, res) => {
|
||
try {
|
||
const envData = await readEnvFile();
|
||
res.json(envData);
|
||
} catch (error) {
|
||
res.status(500).json({ error: "读取环境变量失败" });
|
||
}
|
||
});
|
||
|
||
app.post("/env", async (req, res) => {
|
||
try {
|
||
const newEnv = req.body;
|
||
await writeEnvFile(newEnv);
|
||
res.json({ success: true });
|
||
} catch (error) {
|
||
res.status(500).json({ error: "更新环境变量失败" });
|
||
}
|
||
});
|
||
|
||
app.listen(port + 1, address, () => {
|
||
console.log(`内部服务器运行在 http://${address}:${port + 1}`);
|
||
});
|