gh-proxy-pro

1740047543270.png
1740047610552.png
1740047649855.png

  • 复制以下.js 代码
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
'use strict'
/**
* static files (404.html, sw.js, conf.js)
*/
const ASSET_URL = 'https://xiaozhou26.github.io/gh-proxy-pro/'
// 前缀,如果自定义路由为example.com/gh/*,将PREFIX改为 '/gh/',注意,少一个杠都会错!
const PREFIX = '/'
const Config = {
jsdelivr: 1,
gitclone: 1
}

/** @type {RequestInit} */
const PREFLIGHT_INIT = {
status: 204,
headers: new Headers({
'access-control-allow-origin': '*',
'access-control-allow-methods': 'GET,POST,PUT,PATCH,TRACE,DELETE,HEAD,OPTIONS',
'access-control-max-age': '1728000',
}),
}


const exp1 = /^(?:https?:\/\/)?github\.com\/.+?\/.+?\/(?:releases|archive)\/.*$/i
const exp2 = /^(?:https?:\/\/)?github\.com\/.+?\/.+?\/(?:blob|raw)\/.*$/i
const exp3 = /^(?:https?:\/\/)?github\.com\/.+?\/.+?\/(?:info|git-).*$/i
const exp4 = /^(?:https?:\/\/)?raw\.(?:githubusercontent|github)\.com\/.+?\/.+?\/.+?\/.+$/i
const exp5 = /^(?:https?:\/\/)?gist\.(?:githubusercontent|github)\.com\/.+?\/.+?\/.+$/i
const exp6 = /^(?:https?:\/\/)?github\.com\/.+?\/.+?\/tags.*$/i

/**
* @param {any} body
* @param {number} status
* @param {Object<string, string>} headers
*/
function makeRes(body, status = 200, headers = {}) {
headers['access-control-allow-origin'] = '*'
return new Response(body, {status, headers})
}


/**
* @param {string} urlStr
*/
function newUrl(urlStr) {
try {
return new URL(urlStr)
} catch (err) {
return null
}
}


addEventListener('fetch', e => {
const ret = fetchHandler(e)
.catch(err => makeRes('cfworker error:\n' + err.stack, 502))
e.respondWith(ret)
})


function checkUrl(u) {
for (let i of [exp1, exp2, exp3, exp4, exp5, exp6 ]) {
if (u.search(i) === 0) {
return true
}
}
return false
}
// 创建一个生成器函数,用于生成随机的GitHub加速网站目标URL
const targetUrls = TARGET_URLS.split(',');

function* urlGenerator() {
while (true) {
const randomIndex = Math.floor(Math.random() * targetUrls.length);
yield targetUrls[randomIndex];
}
}



const getNextUrl = urlGenerator();

// 创建一个生成器函数,用于生成随机的GitHub URL

const GHUrls = GH_URLS.split(',');

function* urlgh() {
while (true) {
const randomIndex = Math.floor(Math.random() * GHUrls.length);
yield GHUrls[randomIndex];
}
}



const ghUrl = urlgh();
/**
* @param {FetchEvent} e
*/
async function fetchHandler(e) {
const req = e.request
const urlStr = req.url
const urlObj = new URL(urlStr)
let path = urlObj.searchParams.get('q')
if (path) {
return Response.redirect('https://' + urlObj.host + PREFIX + path, 301)
}
// cfworker 会把路径中的 `//` 合并成 `/`
path = urlObj.href.substr(urlObj.origin.length + PREFIX.length).replace(/^https?:\/+/, 'https://')
if (path.search(exp1) === 0 || path.search(exp5) === 0 || path.search(exp6) === 0 || !Config.gitclone && (path.search(exp3) === 0 || path.search(exp4) === 0)) {
const newUrl = `${getNextUrl.next().value}/${path}`;
return Response.redirect(newUrl, 302);
}else if (path.search(exp2) === 0) {
if (Config.jsdelivr) {
const newUrl = path.replace('/blob/', '@').replace(/^(?:https?:\/\/)?github\.com/, 'https://cdn.jsdmirror.com/gh')
return Response.redirect(newUrl, 302)
} else {
path = path.replace('/blob/', '/raw/')
return httpHandler(req, path)
}
} else if (path.search(exp3) === 0) {
const newUrl = path.replace(/^(?:https?:\/\/)?github\.com/, ghUrl.next().value);
return Response.redirect(newUrl, 302)
} else if (path.search(exp4) === 0) {
const newUrl = path.replace(/(?<=com\/.+?\/.+?)\/(.+?\/)/, '@$1').replace(/^(?:https?:\/\/)?raw\.(?:githubusercontent|github)\.com/, 'https://cdn.jsdmirror.com/gh')
return Response.redirect(newUrl, 302)
} else {
return fetch(ASSET_URL + path)
}
}


/**
* @param {Request} req
* @param {string} pathname
*/
function httpHandler(req, pathname) {
const reqHdrRaw = req.headers

// preflight
if (req.method === 'OPTIONS' &&
reqHdrRaw.has('access-control-request-headers')
) {
return new Response(null, PREFLIGHT_INIT)
}

const reqHdrNew = new Headers(reqHdrRaw)

let urlStr = pathname
if (urlStr.startsWith('github')) {
urlStr = 'https://' + urlStr
}
const urlObj = newUrl(urlStr)

/** @type {RequestInit} */
const reqInit = {
method: req.method,
headers: reqHdrNew,
redirect: 'manual',
body: req.body
}
return proxy(urlObj, reqInit)
}


/**
*
* @param {URL} urlObj
* @param {RequestInit} reqInit
*/
async function proxy(urlObj, reqInit) {
const res = await fetch(urlObj.href, reqInit)
const resHdrOld = res.headers
const resHdrNew = new Headers(resHdrOld)

const status = res.status

if (resHdrNew.has('location')) {
let _location = resHdrNew.get('location')
if (checkUrl(_location))
resHdrNew.set('location', PREFIX + _location)
else {
reqInit.redirect = 'follow'
return proxy(newUrl(_location), reqInit)
}
}
resHdrNew.set('access-control-expose-headers', '*')
resHdrNew.set('access-control-allow-origin', '*')

resHdrNew.delete('content-security-policy')
resHdrNew.delete('content-security-policy-report-only')
resHdrNew.delete('clear-site-data')

return new Response(res.body, {
status,
headers: resHdrNew,
})
}
  • 复制项目地址里的GH_URLS TARGET_URLS 内容
  • GH_URLS:这个变量应该包含一系列网络上公开的、可以用来反代 GitHub 的网站地址。
  • TARGET_URLS:这个变量则应包括一些网上公开的、部署 GH-Proxy 服务的网站地址。

1740047838411.png

  • 添加变量

1740047758150.png

  • 右上角访问代码 如果正常会显示以下

1740047994372.png

Flie-proxy

  • file-proxy 基于 gh-proxy 修改,理论上支持任意http协议的链接加速,支持下载文件、支持 git bash 终端直接 git clone 项目。
  • 创建 Worker
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
'use strict'

/**
* static files (404.html, sw.js, conf.js)
*/
const ASSET_URL = 'https://xxx.xxx.xyz/'
// 前缀,如果自定义路由为example.com/gh/*,将PREFIX改为 '/gh/',注意,少一个杠都会错!
const PREFIX = '/token/'
// git使用cnpmjs镜像、分支文件使用jsDelivr镜像的开关,0为关闭,默认关闭
// 此处不要开启,否则将导致下载问题
const Config = {
jsdelivr: 0,
cnpmjs: 0
}

/** @type {RequestInit} */
const PREFLIGHT_INIT = {
status: 204,
headers: new Headers({
'access-control-allow-origin': '*',
'access-control-allow-credentials': true,
'access-control-allow-methods': 'GET,POST,PUT,PATCH,TRACE,DELETE,HEAD,OPTIONS',
'access-control-max-age': '1728000',
}),
}

/**
* @param {any} body
* @param {number} status
* @param {Object<string, string>} headers
*/
function makeRes(body, status = 200, headers = {}) {
headers['access-control-allow-origin'] = '*'
return new Response(body, {status, headers})
}


/**
* @param {string} urlStr
*/
function newUrl(urlStr) {
try {
return new URL(urlStr)
} catch (err) {
return null
}
}


addEventListener('fetch', e => {
const ret = fetchHandler(e)
.catch(err => makeRes('cfworker error:\n' + err.stack, 502))
e.respondWith(ret)
})


/**
* @param {FetchEvent} e
*/
async function fetchHandler(e) {
console.log("new request enter")
const req = e.request
const urlStr = req.url
const urlObj = new URL(urlStr)
// let path = urlObj.searchParams.get('q')
// if (path) {
// return Response.redirect('https://' + urlObj.host + PREFIX + path, 301)
// }
// cfworker 会把路径中的 `//` 合并成 `/`
let path = urlObj.href.substr(urlObj.origin.length + PREFIX.length)
if (path.startsWith('https')){
path = path.replace(/^https?:\/+/, 'https://')
}else{
path = path.replace(/^http?:\/+/, 'http://')
}
const exp1 = /^(?:https?:\/\/)?github\.com\/.+?\/.+?\/(?:releases|archive)\/.*$/i
const exp2 = /^(?:https?:\/\/)?github\.com\/.+?\/.+?\/(?:blob)\/.*$/i
const exp3 = /^(?:https?:\/\/)?github\.com\/.+?\/.+?\/(?:info|git-).*$/i
const exp4 = /^(?:https?:\/\/)?raw\.githubusercontent\.com\/.+?\/.+?\/.+?\/.+$/i

if (path.search(exp1) === 0 || !Config.cnpmjs && (path.search(exp3) === 0 || path.search(exp4) === 0)) {
return httpHandler(req, urlObj, path)
} else if (path.search(exp2) === 0) {
if (Config.jsdelivr){
const newUrl = path.replace('/blob/', '@').replace(/^(?:https?:\/\/)?github\.com/, 'https://cdn.jsdelivr.net/gh')
return Response.redirect(newUrl, 302)
}else{
path = path.replace('/blob/', '/raw/')
return httpHandler(req, urlObj, path)
}
} else if (path.search(exp3) === 0) {
const newUrl = path.replace(/^(?:https?:\/\/)?github\.com/, 'https://github.com.cnpmjs.org')
return Response.redirect(newUrl, 302)
} else if (path.search(exp4) === 0) {
const newUrl = path.replace(/(?<=com\/.+?\/.+?)\/(.+?\/)/, '@$1').replace(/^(?:https?:\/\/)?raw\.githubusercontent\.com/, 'https://cdn.jsdelivr.net/gh')
return Response.redirect(newUrl, 302)
} else {
if (path === '' || path === '/') {
return new Response("success", {status: 200})
}
return httpHandler(req, urlObj, path)
}
}


/**
* @param {Request} req
* @param {string} pathname
*/
function httpHandler(req, reqUrlObj, pathname) {
console.log("http handler")
const reqHdrRaw = req.headers

PREFLIGHT_INIT.headers.set("access-control-allow-origin", reqUrlObj.origin)
// preflight
if (req.method === 'OPTIONS' &&
reqHdrRaw.has('access-control-request-headers')
) {
return new Response(null, PREFLIGHT_INIT)
}

let rawLen = ''

const reqHdrNew = new Headers(reqHdrRaw)

const fullReqUrl = reqUrlObj.origin + PREFIX
if (reqHdrNew.get('Referer') && reqHdrNew.get('Referer').indexOf(fullReqUrl) == 0){
reqHdrNew.set('Referer', reqHdrNew.get('Referer').substr(fullReqUrl.length))
}

let urlStr = pathname
if (urlStr.startsWith('github')) {
urlStr = 'https://' + urlStr
}
// const urlObj = newUrl('http://online.dun.ornglad.com/download/QQ%E9%82%AE%E7%AE%B1_010273872.exe')
const urlObj = newUrl(urlStr)
/** @type {RequestInit} */
const reqInit = {
method: req.method,
headers: reqHdrNew,
redirect: 'manual',
body: req.body
}
return proxy(req, reqUrlObj, urlObj, reqInit, rawLen, 0)
}


/**
*
* @param {URL} urlObj
* @param {RequestInit} reqInit
*/
async function proxy(cfReq, cfReqUrlObj, urlObj, reqInit, rawLen) {
console.log(urlObj)
const res = await fetch(urlObj.href, reqInit)
const resHdrOld = res.headers
const resHdrNew = new Headers(resHdrOld)

// verify
if (rawLen) {
const newLen = resHdrOld.get('content-length') || ''
const badLen = (rawLen !== newLen)

if (badLen) {
return makeRes(res.body, 400, {
'--error': `bad len: ${newLen}, except: ${rawLen}`,
'access-control-expose-headers': '--error',
})
}
}
var status = res.status
if (status == 301 || status == 302 || status == 303 || status == 307 || status == 308) {
var nextLocation = resHdrOld.get('location')
if ( ! nextLocation.startsWith('https') && ! nextLocation.startsWith('http')){
if (nextLocation.startsWith('//') && ! nextLocation.startsWith('///')){
nextLocation = PREFIX + urlObj.protocol + nextLocation
} else if (urlObj.origin.endsWith('/') || nextLocation.startsWith('/')){
nextLocation = PREFIX + urlObj.origin + nextLocation
} else {
nextLocation = PREFIX + urlObj.origin + '/' + nextLocation
}
} else {
nextLocation = PREFIX + nextLocation
}
status = 302
resHdrNew.set('location', nextLocation)
}
if (cfReq.headers.has('origin')){
resHdrNew.set('access-control-allow-origin', cfReq.headers.get('origin'))
} else if(cfReq.headers.has('Referer') && newUrl(cfReq.headers.get('Referer'))){
resHdrNew.set('access-control-allow-origin', newUrl(cfReq.headers.get('Referer')).origin)
} else {
resHdrNew.set('access-control-allow-origin', cfReqUrlObj.origin)
}
resHdrNew.set('access-control-expose-headers', '*')
resHdrNew.set('access-control-allow-methods', 'GET,POST,PUT,PATCH,TRACE,DELETE,HEAD,OPTIONS')
resHdrNew.set('access-control-allow-credentials', true)

resHdrNew.delete('content-security-policy')
resHdrNew.delete('content-security-policy-report-only')
resHdrNew.delete('clear-site-data')
resHdrNew.delete('cross-origin-resource-policy')
return new Response(res.body, {
status,
headers: resHdrNew,
})
}
  • 添加路由

1740044208178.png

  • 设置 WAF 白名单

1740044553036.png

使用方法

私有仓库:
git clone https://user:[email protected]/token/https://github.com/hunshcn/gh-proxy.git