feat: 文件链接参数新增 fakeFile, 此时不再使用 name 查询

xream · xream · commit 3cf333f6822b · 2026-06-15T22:18:27.000+08:00
diff --git a/backend/package.json b/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "sub-store",
-  "version": "2.24.20",
+  "version": "2.24.21",
   "description": "Advanced Subscription Manager for QX, Loon, Surge, Stash and Shadowrocket.",
   "main": "src/main.js",
   "packageManager": "pnpm@11.0.9",
diff --git a/backend/src/restful/download.js b/backend/src/restful/download.js
@@ -5,7 +5,11 @@ import { findByName } from '@/utils/database';
 import { getFlowHeaders, normalizeFlowHeader } from '@/utils/flow';
 import $ from '@/core/app';
 import { failed } from '@/restful/response';
-import { InternalServerError, ResourceNotFoundError } from '@/restful/errors';
+import {
+    InternalServerError,
+    RequestInvalidError,
+    ResourceNotFoundError,
+} from '@/restful/errors';
 import { produceArtifact } from '@/restful/sync';
 // eslint-disable-next-line no-unused-vars
 import { isIPv4, isIPv6 } from '@/utils';
@@ -120,6 +124,7 @@ export default function register($app) {
 
 async function downloadSubscription(req, res) {
     let { name, nezhaIndex } = req.params;
+    const isShareRoute = req.path?.startsWith('/share/');
 
     const { useMihomoExternal, mihomoMerge, mihomoMergeName, mihomoExternal } =
         getMihomoExternalOptions(req.query);
@@ -182,6 +187,45 @@ async function downloadSubscription(req, res) {
         $.info(`传入 $options: ${JSON.stringify(options)}`);
         Object.assign($options, options);
     }
+    if (isShareRoute && _fakeSub) {
+        $.warn(`分享链接禁止使用 fakeSub: ${name}`);
+        failed(
+            res,
+            new RequestInvalidError(
+                'UNSUPPORTED_SHARE_FAKE_SUB',
+                'share/sub 不支持 fakeSub 参数',
+            ),
+            400,
+        );
+        return;
+    }
+    if (
+        isShareRoute &&
+        ((url != null && url !== '') || (content != null && content !== ''))
+    ) {
+        $.warn(`分享链接禁止使用 url/content: ${name}`);
+        failed(
+            res,
+            new RequestInvalidError(
+                'UNSUPPORTED_SHARE_SUB_SOURCE_OVERRIDE',
+                'share/sub 不支持 url 或 content 参数',
+            ),
+            400,
+        );
+        return;
+    }
+    if (isShareRoute && mergeSources) {
+        $.warn(`分享链接禁止使用 mergeSources: ${name}`);
+        failed(
+            res,
+            new RequestInvalidError(
+                'UNSUPPORTED_SHARE_SUB_MERGE_SOURCES',
+                'share/sub 不支持 mergeSources 参数',
+            ),
+            400,
+        );
+        return;
+    }
     if (url) {
         $.info(`指定远程订阅 URL: ${maskAgeSecretInUrl(url)}`);
         if (!/^https?:\/\//.test(url)) {
diff --git a/backend/src/restful/file.js b/backend/src/restful/file.js
@@ -54,6 +54,7 @@ function createFile(req, res) {
 async function getFile(req, res, next) {
     let { name } = req.params;
     const reqUA = req.headers['user-agent'] || req.headers['User-Agent'];
+    const isShareRoute = req.path?.startsWith('/share/');
     $.info(`正在下载文件：${name}\n请求 User-Agent: ${reqUA}`);
     let {
         url,
@@ -66,6 +67,7 @@ async function getFile(req, res, next) {
         proxy,
         noCache,
         produceType,
+        fakeFile: _fakeFile,
     } = req.query;
     let $options = {
         _req: {
@@ -100,9 +102,79 @@ async function getFile(req, res, next) {
         $.info(`传入 $options: ${JSON.stringify(options)}`);
         Object.assign($options, options);
     }
+    if (isShareRoute && _fakeFile) {
+        $.warn(`分享链接禁止使用 fakeFile: ${name}`);
+        failed(
+            res,
+            new RequestInvalidError(
+                'UNSUPPORTED_SHARE_FAKE_FILE',
+                'share/file 不支持 fakeFile 参数',
+            ),
+            400,
+        );
+        return;
+    }
+    if (
+        _fakeFile &&
+        (content == null || content === '') &&
+        (url == null || url === '')
+    ) {
+        $.warn(`fakeFile 缺少 content/url: ${name}`);
+        failed(
+            res,
+            new RequestInvalidError(
+                'INVALID_FAKE_FILE_SOURCE',
+                'fakeFile 需要提供 content 或 url 参数',
+            ),
+            400,
+        );
+        return;
+    }
+    if (
+        isShareRoute &&
+        ((url != null && url !== '') || (content != null && content !== ''))
+    ) {
+        $.warn(`分享链接禁止使用 url/content: ${name}`);
+        failed(
+            res,
+            new RequestInvalidError(
+                'UNSUPPORTED_SHARE_FILE_SOURCE_OVERRIDE',
+                'share/file 不支持 url 或 content 参数',
+            ),
+            400,
+        );
+        return;
+    }
+    if (isShareRoute && subInfoUrl != null && subInfoUrl !== '') {
+        $.warn(`分享链接禁止使用 subInfoUrl: ${name}`);
+        failed(
+            res,
+            new RequestInvalidError(
+                'UNSUPPORTED_SHARE_FILE_SUB_INFO_URL',
+                'share/file 不支持 subInfoUrl 参数',
+            ),
+            400,
+        );
+        return;
+    }
+    if (isShareRoute && mergeSources) {
+        $.warn(`分享链接禁止使用 mergeSources: ${name}`);
+        failed(
+            res,
+            new RequestInvalidError(
+                'UNSUPPORTED_SHARE_FILE_MERGE_SOURCES',
+                'share/file 不支持 mergeSources 参数',
+            ),
+            400,
+        );
+        return;
+    }
     if (url) {
         $.info(`指定远程文件 URL: ${maskAgeSecretInUrl(url)}`);
     }
+    if (_fakeFile) {
+        $.info(`使用假文件, 不再通过单个文件名称 ${name} 查询`);
+    }
     if (proxy) {
         $.info(`指定远程订阅使用代理/策略 proxy: ${proxy}`);
     }
@@ -132,7 +204,12 @@ async function getFile(req, res, next) {
     }
 
     const allFiles = $.read(FILES_KEY);
-    const file = findByName(allFiles, name);
+    const fakeFile = {
+        name: 'fakeFile',
+        source: 'remote',
+        url: '',
+    };
+    const file = _fakeFile ? fakeFile : findByName(allFiles, name);
     if (file) {
         try {
             const output = await produceArtifact({
@@ -148,6 +225,7 @@ async function getFile(req, res, next) {
                 noCache,
                 produceType,
                 all: true,
+                file: _fakeFile ? fakeFile : undefined,
             });
 
             try {
diff --git a/backend/src/restful/sync.js b/backend/src/restful/sync.js
@@ -58,6 +58,7 @@ async function produceArtifact({
     produceType,
     produceOpts = {},
     subscription,
+    file: sourceFile,
     awaitCustomCache,
     $options,
     proxy,
@@ -579,7 +580,7 @@ async function produceArtifact({
         return RuleUtils.produce(rules, platform);
     } else if (type === 'file') {
         const allFiles = $.read(FILES_KEY);
-        const file = findByName(allFiles, name);
+        const file = sourceFile || findByName(allFiles, name);
         if (!file) throw new Error(`找不到文件 ${name}`);
         let raw = '';
         if (file.type !== 'mihomoProfile') {
diff --git a/backend/src/test/restful/download.spec.js b/backend/src/test/restful/download.spec.js
@@ -56,6 +56,10 @@ function createResponse(routePath) {
             this.sent = payload;
             return this;
         },
+        json(payload) {
+            this.sent = payload;
+            return this;
+        },
         set(key, value) {
             this.headers[key] = value;
             return this;
@@ -327,6 +331,98 @@ describe('download routes', function () {
         expect(res.sent).to.equal('local-vless');
     });
 
+    it('rejects fakeSub on share routes', async function () {
+        const res = await requestShareSubscription({
+            query: {
+                fakeSub: '1',
+                content: VLESS_WS,
+            },
+            shareToken: {
+                type: 'sub',
+                name: 'local-vless',
+            },
+        });
+
+        expect(res.statusCode).to.equal(400);
+        expect(res.sent.status).to.equal('failed');
+        expect(res.sent.error.code).to.equal('UNSUPPORTED_SHARE_FAKE_SUB');
+        expect(res.sent.error.type).to.equal('RequestInvalidError');
+    });
+
+    it('allows _fakeNode on share routes for invalid-share fallback', async function () {
+        const res = await requestShareSubscription({
+            query: {
+                _fakeNode: '1',
+                target: 'JSON',
+            },
+            shareToken: {
+                type: 'sub',
+                name: 'local-vless',
+            },
+        });
+
+        expect(res.statusCode).to.equal(200);
+        expect(res.sent).to.be.a('string');
+        expect(res.sent).to.include('fakeNodeInfo');
+    });
+
+    it('rejects url on share routes', async function () {
+        const res = await requestShareSubscription({
+            query: {
+                url: 'https://example.com/sub.txt',
+            },
+            shareToken: {
+                type: 'sub',
+                name: 'local-vless',
+            },
+        });
+
+        expect(res.statusCode).to.equal(400);
+        expect(res.sent.status).to.equal('failed');
+        expect(res.sent.error.code).to.equal(
+            'UNSUPPORTED_SHARE_SUB_SOURCE_OVERRIDE',
+        );
+        expect(res.sent.error.type).to.equal('RequestInvalidError');
+    });
+
+    it('rejects content on share routes', async function () {
+        const res = await requestShareSubscription({
+            query: {
+                content: VLESS_WS,
+            },
+            shareToken: {
+                type: 'sub',
+                name: 'local-vless',
+            },
+        });
+
+        expect(res.statusCode).to.equal(400);
+        expect(res.sent.status).to.equal('failed');
+        expect(res.sent.error.code).to.equal(
+            'UNSUPPORTED_SHARE_SUB_SOURCE_OVERRIDE',
+        );
+        expect(res.sent.error.type).to.equal('RequestInvalidError');
+    });
+
+    it('rejects mergeSources on share routes', async function () {
+        const res = await requestShareSubscription({
+            query: {
+                mergeSources: 'remoteFirst',
+            },
+            shareToken: {
+                type: 'sub',
+                name: 'local-vless',
+            },
+        });
+
+        expect(res.statusCode).to.equal(400);
+        expect(res.sent.status).to.equal('failed');
+        expect(res.sent.error.code).to.equal(
+            'UNSUPPORTED_SHARE_SUB_MERGE_SOURCES',
+        );
+        expect(res.sent.error.type).to.equal('RequestInvalidError');
+    });
+
     it('encrypts transformed subscription output with source age-public-key', async function () {
         const pair = await ageUtils.generateKeyPair();
         state[SUBS_KEY][0]['age-public-key'] = pair['age-public-key'];
diff --git a/backend/src/test/restful/file.spec.js b/backend/src/test/restful/file.spec.js

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "sub-store",`
`3`		`- "version": "2.24.20",`
	`3`	`+ "version": "2.24.21",`
`4`	`4`	`"description": "Advanced Subscription Manager for QX, Loon, Surge, Stash and Shadowrocket.",`
`5`	`5`	`"main": "src/main.js",`
`6`	`6`	`"packageManager": "pnpm@11.0.9",`