feat: add token-protected web sharing

Author: zengyufei

Cargo.lock

@@ -4,7 +4,7 @@ exclude = ["vendor/iroh", "vendor/suppaftp"]
 resolver = "3"
 
 [workspace.package]
-version = "0.1.17"
+version = "0.1.18"
 edition = "2024"
 rust-version = "1.91"
 license = "MIT"

Cargo.toml

@@ -130,9 +130,10 @@ Open a temporary LAN download page:
 ```powershell
 ii send .\video.mp4 --web
 ii send .\my-folder --web
+ii send .\video.mp4 --web --token A1b2C3d4E5f6G7h8
 ```
 
-The command displays a QR code directly above the primary LAN URL for opening the download page, then lists the remaining physical and virtual adapter IPv4 URLs under `other:`. The QR code at the top of that page points directly to `/download` for phone downloads. Folders download as `.tar` archives. Press `Ctrl+C` to stop the server. This mode has no authentication and is intended only for short-lived, trusted LAN sharing.
+The command displays a QR code directly above the primary LAN URL for opening the download page, then lists the remaining physical and virtual adapter IPv4 URLs under `other:`. The QR code at the top of that page points directly to `/download` for phone downloads. The page can also upload multiple files into `./ii/` under the directory where the command started; directory uploads are not supported. Folders download as `.tar` archives. Press `Ctrl+C` to stop the server. Optional `--token <value>` adds a path access token to the page, download, and upload URLs; it must be 16 to 128 ASCII letters, digits, `-`, or `_`, and omitting it keeps the unprotected URLs. This mode has no account authentication and is intended only for short-lived, trusted LAN sharing.
 
 Prefer local network paths and avoid public relays:
 

README.en.md

@@ -133,9 +133,10 @@ ii recv ii1k7v...x9a --stdout > project.tar.gz
 ```powershell
 ii send .\video.mp4 --web
 ii send .\my-folder --web
+ii send .\video.mp4 --web --token A1b2C3d4E5f6G7h8
 ```
 
-命令行会在主局域网 URL 上方显示进入下载页的二维码，并在 `other:` 下列出其余物理和虚拟网卡的 IPv4 URL；下载页顶部的二维码则直达 `/download`，方便手机扫码下载。目录会下载为 `.tar`。按 `Ctrl+C` 关闭服务。该模式没有鉴权，只适合临时、可信的局域网。
+命令行会在主局域网 URL 上方显示进入下载页的二维码，并在 `other:` 下列出其余物理和虚拟网卡的 IPv4 URL；下载页顶部的二维码则直达 `/download`，方便手机扫码下载。网页也可以一次上传多个文件，接收文件写到启动命令当前目录的 `./ii/`，不支持上传目录。目录会下载为 `.tar`。按 `Ctrl+C` 关闭服务。可选 `--token <value>` 为网页、下载和上传加路径访问令牌，令牌只能是 16 到 128 个 ASCII 字母、数字、`-` 或 `_`；不带时保持无令牌 URL。该模式没有账号鉴权，只适合临时、可信的局域网。
 
 局域网优先，不走公网中继：
 

README.md

@@ -26,6 +26,8 @@ All measurements use `cargo build -p ii --release --locked` followed by UPX
 | LAN web-share QR SVG and terminal QR | 5,970,944 | 2,161,152 | +12,288 | `cargo test -p ii --locked` (76 tests), `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
 | Web download QR and responsive share page | 5,975,040 | 2,159,616 | -1,536 | `cargo test -p ii --locked` (76 tests), `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
 | Web-share other IPv4 URL list | 5,979,648 | 2,160,640 | +1,024 | `cargo test -p ii --locked` (77 tests), isolated `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
+| Web-share bidirectional file upload | 5,992,960 | 2,166,784 | +5,632 | `cargo test -p ii --locked` (78 tests), `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
+| Web-share path access token | 6,001,664 | 2,169,344 | +2,560 | `cargo test -p ii --locked` (83 tests), `cargo build -p ii --release --locked`, UPX `5.1.0 --best --lzma`, `upx -t` |
 
 Equivalent release rebuilds have varied by up to `1,536` UPX bytes; the latest
 measurement is recorded with the pinned `5.1.0` packer.

SIZE.md

@@ -1,6 +1,6 @@
 # ii 用户手册
 
-`ii` 是唯一对外品牌和唯一用户入口。用户只需要记 `ii`，不用记 `sendme`、`provide/get`、`iroh-relay`，也不用接触 `hash`、`peer id`、`token` 这些底层词。
+`ii` 是唯一对外品牌和唯一用户入口。用户只需要记 `ii`，不用记 `sendme`、`provide/get`、`iroh-relay`，也不用接触 `hash`、`peer id` 这些底层词。
 
 ## 一句话
 
@@ -9,7 +9,7 @@
 ## 命令总览
 
 ```text
-ii send [<path>] [--name <name>] [-t] [-c] [-o <path>] [--web | --s3 | --webdav | --ftp | --sftp] [--profile <name>] [-d] [-p] [--local] [--relay <https-url> [-k]] [--no-relay]
+ii send [<path>] [--name <name>] [-t] [-c] [-o <path>] [--web [--token <value>] | --s3 | --webdav | --ftp | --sftp] [--profile <name>] [-d] [-p] [--local] [--relay <https-url> [-k]] [--no-relay]
 ii recv <ticket> [-o <dir>] [--stdout] [--overwrite] [--resume] [--local] [--trace]
 ii relay (--public <https-url> | --tls <domain> --cert <path> --key <path>) [-H <bind-port>]
 ii doctor
@@ -78,7 +78,10 @@ tar czf - .\project | ii send --name project.tar.gz
   如果文件已存在，会覆盖。这个 `-o` 属于 `ii send`，不影响 `ii recv -o <dir>` 的保存目录语义。
 
 `--web`
-: 在局域网内临时开放一个无鉴权 HTTP 下载页。执行后会在主 URL 上方展示进入下载页的二维码，随后在 `other:` 下列出其余物理和虚拟网卡的 IPv4 URL；下载页顶部二维码直达 `/download`。按 `Ctrl+C` 停止服务。文件直接下载；文件夹会按原目录名打包为 `.tar` 下载。它不生成 ticket，不能和 `-c`、`-o`、`--s3`、`--webdav`、`--ftp`、`--sftp`、`--local`、`--relay`、`--no-relay` 同时使用。
+: 在局域网内临时开放一个无账号鉴权 HTTP 下载页。执行后会在主 URL 上方展示进入下载页的二维码，随后在 `other:` 下列出其余物理和虚拟网卡的 IPv4 URL；下载页顶部二维码直达 `/download`。网页可一次上传多个文件，接收文件写到启动命令当前目录的 `./ii/`，不支持上传目录。按 `Ctrl+C` 停止服务。文件直接下载；文件夹会按原目录名打包为 `.tar` 下载。它不生成 ticket，不能和 `-c`、`-o`、`--s3`、`--webdav`、`--ftp`、`--sftp`、`--local`、`--relay`、`--no-relay` 同时使用。
+
+`--token <value>`
+: 仅和 `--web` 同用，把网页、下载和上传 URL 固定到 `/<value>/` 路径下；遗漏或写错路径会返回 `404`。`value` 必须为 16 到 128 个 ASCII 字母、数字、`-` 或 `_`。不提供时仍使用原来的无令牌 URL。
 
 `--local`
 : 只走局域网优先路径，不走公网发现，不走公网 relay。

ii.md

@@ -30,6 +30,7 @@ pub struct SendArgs {
     pub webdav: bool,
     pub sftp: bool,
     pub web: bool,
+    pub web_token: Option<String>,
     pub portable_webdav: bool,
     pub local: bool,
     pub relay: Option<iroh::RelayUrl>,
@@ -156,6 +157,7 @@ fn parse_send(args: Vec<String>) -> Result<SendArgs, ParseAction> {
             Some(("output", value)) => out.output = Some(PathBuf::from(value)),
             Some(("profile", value)) => out.profile = Some(value.to_string()),
             Some(("relay", value)) => out.relay = Some(parse_relay_url(value)?),
+            Some(("token", value)) => out.web_token = Some(value.to_string()),
             Some((flag, _)) => {
                 return Err(ParseAction::error(format!("unknown option `--{flag}`")));
             }
@@ -172,6 +174,7 @@ fn parse_send(args: Vec<String>) -> Result<SendArgs, ParseAction> {
                 "--webdav" => out.webdav = true,
                 "--sftp" => out.sftp = true,
                 "--web" => out.web = true,
+                "--token" => out.web_token = Some(iter.value("--token")?),
                 "-p" => out.portable_webdav = true,
                 "--local" => out.local = true,
                 "--relay" => out.relay = Some(parse_relay_url(&iter.value("--relay")?)?),
@@ -344,10 +347,27 @@ fn validate_send(args: &SendArgs) -> Result<(), ParseAction> {
     if args.web && (args.copy || args.output.is_some()) {
         return Err(ParseAction::error("--web cannot be used with -c or -o"));
     }
+    if args.web_token.is_some() && !args.web {
+        return Err(ParseAction::error("--token requires --web"));
+    }
+    if let Some(token) = args.web_token.as_deref()
+        && !is_valid_web_token(token)
+    {
+        return Err(ParseAction::error(
+            "--token must contain 16 to 128 ASCII letters, digits, '-' or '_'",
+        ));
+    }
 
     Ok(())
 }
 
+fn is_valid_web_token(token: &str) -> bool {
+    (16..=128).contains(&token.len())
+        && token
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_'))
+}
+
 fn reject_extra(command: &str, args: Vec<String>) -> Result<(), ParseAction> {
     if args.iter().any(|arg| is_help(arg)) {
         return Err(ParseAction::help(match command {
@@ -473,6 +493,7 @@ Options:
   --ftp
   --sftp
   --web
+  --token <value>
   -p
   -d
   --profile <name>
@@ -604,6 +625,62 @@ mod tests {
         ));
     }
 
+    #[test]
+    fn send_accepts_web_token() {
+        let token = "A1b2C3d4E5f6G7h8";
+        for args in [
+            vec!["ii", "send", "file.txt", "--web", "--token", token],
+            vec![
+                "ii",
+                "send",
+                "file.txt",
+                "--web",
+                "--token=A1b2C3d4E5f6G7h8",
+            ],
+        ] {
+            let cli = Cli::parse_from(args);
+            match cli.command {
+                Command::Send(args) => assert_eq!(args.web_token.as_deref(), Some(token)),
+                _ => panic!("expected send command"),
+            }
+        }
+    }
+
+    #[test]
+    fn web_token_accepts_hyphen_and_underscore() {
+        assert!(is_valid_web_token("A1b2C3d4E5f6G_-h"));
+    }
+
+    #[test]
+    fn send_rejects_invalid_web_tokens() {
+        for args in [
+            vec!["ii", "send", "file.txt", "--token", "A1b2C3d4E5f6G7h8"],
+            vec!["ii", "send", "file.txt", "--web", "--token"],
+            vec!["ii", "send", "file.txt", "--web", "--token", "too-short"],
+            vec![
+                "ii",
+                "send",
+                "file.txt",
+                "--web",
+                "--token",
+                "A1b2C3d4E5f6G7h!",
+            ],
+            vec![
+                "ii",
+                "send",
+                "file.txt",
+                "--web",
+                "--token",
+                &"a".repeat(129),
+            ],
+        ] {
+            assert!(matches!(
+                parse_args(args),
+                Err(ParseAction::Print { code: 2, .. })
+            ));
+        }
+    }
+
     #[test]
     fn send_accepts_ftp_and_sftp_storage_options() {
         let ftp = Cli::parse_from(["ii", "send", "--ftp", "-p", "-d", "file.txt"]);