mirror of
https://github.com/bolucat/Archive.git
synced 2025-12-24 13:28:37 +08:00
895 lines
34 KiB
Swift
895 lines
34 KiB
Swift
//
|
||
// Created by yanue on 2021/6/5.
|
||
// Copyright (c) 2021 yanue. All rights reserved.
|
||
//
|
||
|
||
import Foundation
|
||
import SwiftyJSON
|
||
|
||
// see: https://github.com/v2ray/v2ray-core/issues/1139
|
||
class VmessUri {
|
||
var error: String = ""
|
||
var remark: String = ""
|
||
|
||
var address: String = ""
|
||
var port: Int = 8379
|
||
var id: String = ""
|
||
var alterId: Int = 0
|
||
var security: String = "auto" // 加密方式
|
||
|
||
var network: String = "tcp"
|
||
var netHost: String = ""
|
||
var netPath: String = ""
|
||
var tls: String = "" // none|tls|xlts
|
||
var type: String = "none" // 伪装类型
|
||
var uplinkCapacity: Int = 50
|
||
var downlinkCapacity: Int = 20
|
||
var allowInsecure: Bool = true
|
||
var alpn: String = ""
|
||
var sni: String = ""
|
||
var fp: String = ""
|
||
var grpcMode:String = ""
|
||
var kcpSeed:String = ""
|
||
|
||
/**
|
||
vmess://base64(security:uuid@host:port)?[urlencode(parameters)]
|
||
其中 base64、urlencode 为函数，security 为加密方式，parameters 是以 & 为分隔符的参数列表，例如：network=kcp&aid=32&remark=服务器1 经过 urlencode 后为 network=kcp&aid=32&remark=%E6%9C%8D%E5%8A%A1%E5%99%A81
|
||
可选参数（参数名称不区分大小写）：
|
||
network - 可选的值为 "tcp"、 "kcp"、"ws"、"h2" 等
|
||
wsPath - WebSocket 的协议路径
|
||
wsHost - WebSocket HTTP 头里面的 Host 字段值
|
||
kcpHeader - kcp 的伪装类型
|
||
uplinkCapacity - kcp 的上行容量
|
||
downlinkCapacity - kcp 的下行容量
|
||
h2Path - h2 的路径
|
||
h2Host - h2 的域名
|
||
aid - AlterId
|
||
tls - 是否启用 TLS，为 0 或 1
|
||
allowInsecure - TLS 的 AllowInsecure，为 0 或 1
|
||
tlsServer - TLS 的服务器端证书的域名
|
||
remark - 备注名称
|
||
导入配置时，不在列表中的参数一般会按照 Core 的默认值处理。
|
||
*/
|
||
func parseType1(url: URL) {
|
||
let urlStr = url.absoluteString
|
||
// vmess://
|
||
let base64Begin = urlStr.index(urlStr.startIndex, offsetBy: 8)
|
||
let base64End = urlStr.firstIndex(of: "?")
|
||
let encodedStr = String(urlStr[base64Begin..<(base64End ?? urlStr.endIndex)])
|
||
|
||
var paramsStr: String = ""
|
||
if base64End != nil {
|
||
let paramsAll = urlStr.components(separatedBy: "?")
|
||
paramsStr = paramsAll[1]
|
||
}
|
||
|
||
guard let decodeStr = encodedStr.base64Decoded() else {
|
||
self.error = "error decode Str"
|
||
return
|
||
}
|
||
print("decodeStr", decodeStr)
|
||
// main
|
||
var uuid_ = ""
|
||
var host_ = ""
|
||
let mainArr = decodeStr.components(separatedBy: "@")
|
||
if mainArr.count > 1 {
|
||
uuid_ = mainArr[0]
|
||
host_ = mainArr[1]
|
||
}
|
||
|
||
let uuid_security = uuid_.components(separatedBy: ":")
|
||
if uuid_security.count > 1 {
|
||
self.security = uuid_security[0]
|
||
self.id = uuid_security[1]
|
||
}
|
||
|
||
let host_port = host_.components(separatedBy: ":")
|
||
if host_port.count > 1 {
|
||
self.address = host_port[0]
|
||
self.port = Int(host_port[1]) ?? 0
|
||
}
|
||
print("VmessUri self", self)
|
||
|
||
// params
|
||
let params = paramsStr.components(separatedBy: "&")
|
||
for item in params {
|
||
let param = item.components(separatedBy: "=")
|
||
if param.count < 2 {
|
||
continue
|
||
}
|
||
switch param[0] {
|
||
case "network":
|
||
self.network = param[1]
|
||
break
|
||
case "h2path":
|
||
self.netPath = param[1]
|
||
break
|
||
case "h2host":
|
||
self.netHost = param[1]
|
||
break
|
||
case "aid":
|
||
self.alterId = Int(param[1]) ?? 0
|
||
break
|
||
case "tls":
|
||
self.tls = param[1] == "1" ? "tls" : "none"
|
||
break
|
||
case "allowInsecure":
|
||
self.allowInsecure = param[1] == "1" ? true : false
|
||
break
|
||
case "tlsServer":
|
||
self.sni = param[1]
|
||
break
|
||
case "sni":
|
||
self.sni = param[1]
|
||
break
|
||
case "fp":
|
||
self.fp = param[1]
|
||
break
|
||
case "type":
|
||
self.type = param[1]
|
||
break
|
||
case "alpn":
|
||
self.alpn = param[1]
|
||
break
|
||
case "encryption":
|
||
self.security = param[1]
|
||
break
|
||
case "kcpHeader":
|
||
// type 是所有传输方式的伪装类型
|
||
self.type = param[1]
|
||
break
|
||
case "uplinkCapacity":
|
||
self.uplinkCapacity = Int(param[1]) ?? 50
|
||
break
|
||
case "downlinkCapacity":
|
||
self.downlinkCapacity = Int(param[1]) ?? 20
|
||
break
|
||
case "remark":
|
||
self.remark = param[1].urlDecoded()
|
||
break
|
||
case "serviceName":
|
||
self.netPath = param[1]
|
||
break
|
||
case "mode":
|
||
self.grpcMode = param[1]
|
||
break
|
||
case "seed":
|
||
self.kcpSeed = param[1]
|
||
break
|
||
// 以下是 shadowrocket 的分享参数:
|
||
// remarks=vmess_ws&obfsParam=ws.host.domain&path=/vmwss&obfs=websocket&tls=1&peer=ws.sni.domain&alterId=64
|
||
case "obfs":
|
||
// 这里是 ws 的
|
||
if param[1] == "websocket" || param[1] == "ws" {
|
||
self.network = "ws"
|
||
} else if param[1] == "h2" {
|
||
self.network = "h2"
|
||
} else if param[1] == "http" {
|
||
self.network = "tcp" //
|
||
self.type = "http" // headerType
|
||
} else if param[1] == "grpc" {
|
||
self.network = "grpc"
|
||
} else if param[1] == "domainsocket" {
|
||
self.network = "domainsocket"
|
||
} else if param[1] == "quic" {
|
||
self.network = "quic"
|
||
} else if param[1] == "kcp" || param[1] == "mkcp" {
|
||
self.network = "kcp"
|
||
} else {
|
||
self.network = "tcp"
|
||
self.type = param[1]
|
||
}
|
||
break
|
||
case "alterId":
|
||
// 这里是 alterId
|
||
self.alterId = Int(param[1]) ?? 0
|
||
break
|
||
case "obfsParam":
|
||
// 这里是 ws,h2 的 host
|
||
self.netHost = param[1]
|
||
// params的obfs=mkcp情况下, 获取 kcp seed: obfsParam=%7B%22seed%22:%22111%22,%22Host%22:%22xxx.xx%22%7D
|
||
if paramsStr.contains("obfs=mkcp") || paramsStr.contains("obfs=kcp") || paramsStr.contains("obfs=grpc") {
|
||
// 先 urldecode, 解析 kcp seed: {"seed":"111","Host":""}
|
||
if let decodedParam = param[1].removingPercentEncoding, let data = decodedParam.data(using: .utf8) {
|
||
if let json = try? JSON(data: data) {
|
||
self.kcpSeed = json["seed"].stringValue
|
||
self.netHost = json["Host"].stringValue
|
||
}
|
||
}
|
||
}
|
||
break
|
||
case "path":
|
||
// 这里是 ws,h2 的 path, tcp 的 header path
|
||
self.netPath = param[1]
|
||
break
|
||
case "remarks":
|
||
// 这里是备注
|
||
self.remark = param[1].urlDecoded()
|
||
break
|
||
case "peer":
|
||
// 这里是 sni
|
||
self.sni = param[1]
|
||
break
|
||
default:
|
||
break
|
||
}
|
||
}
|
||
}
|
||
|
||
/**s
|
||
分享的链接（二维码）格式：vmess://(Base64编码的json格式服务器数据
|
||
json数据如下
|
||
{
|
||
"v": "2",
|
||
"ps": "备注别名",
|
||
"add": "111.111.111.111",
|
||
"port": "32000",
|
||
"id": "1386f85e-657b-4d6e-9d56-78badb75e1fd",
|
||
"aid": "100",
|
||
"net": "tcp",
|
||
"type": "none",
|
||
"host": "www.bbb.com",
|
||
"path": "/",
|
||
"tls": "tls"
|
||
}
|
||
v:配置文件版本号,主要用来识别当前配置
|
||
net ：传输协议（tcp\kcp\ws\h2)
|
||
type:伪装类型（none\http\srtp\utp\wechat-video）
|
||
host：伪装的域名
|
||
1)http host中间逗号(,)隔开
|
||
2)ws host
|
||
3)h2 host
|
||
path:path(ws/h2)
|
||
tls：底层传输安全（tls)
|
||
*/
|
||
func parseType2(url: URL) {
|
||
let urlStr = url.absoluteString
|
||
// vmess://
|
||
let base64Begin = urlStr.index(urlStr.startIndex, offsetBy: 8)
|
||
let base64End = urlStr.firstIndex(of: "?")
|
||
let encodedStr = String(urlStr[base64Begin..<(base64End ?? urlStr.endIndex)])
|
||
guard let decodeStr = encodedStr.base64Decoded() else {
|
||
self.error = "decode vmess error"
|
||
return
|
||
}
|
||
|
||
guard let json = try? JSON(data: decodeStr.data(using: String.Encoding.utf8, allowLossyConversion: false)!) else {
|
||
self.error = "invalid json"
|
||
return
|
||
}
|
||
|
||
if !json.exists() {
|
||
self.error = "invalid json"
|
||
return
|
||
}
|
||
|
||
self.remark = json["ps"].stringValue.urlDecoded()
|
||
self.address = json["add"].stringValue
|
||
self.port = json["port"].intValue
|
||
self.id = json["id"].stringValue
|
||
self.alterId = json["aid"].intValue
|
||
self.security = json["security"].stringValue
|
||
if self.security.count == 0 {
|
||
self.security = json["scy"].stringValue
|
||
}
|
||
if self.security.count == 0 {
|
||
self.security = "auto"
|
||
}
|
||
self.alpn = json["alpn"].stringValue
|
||
self.sni = json["sni"].stringValue
|
||
self.network = json["net"].stringValue
|
||
self.netHost = json["host"].stringValue
|
||
self.netPath = json["path"].stringValue
|
||
self.tls = json["tls"].stringValue
|
||
self.fp = json["fp"].stringValue
|
||
// type:伪装类型（none\http\srtp\utp\wechat-video）
|
||
self.type = json["type"].stringValue
|
||
self.kcpSeed = json["seed"].stringValue
|
||
self.grpcMode = json["mode"].stringValue
|
||
}
|
||
}
|
||
|
||
// link: https://github.com/shadowsocks/ShadowsocksX-NG
|
||
// file: ServerProfile.swift
|
||
class ShadowsockUri {
|
||
var host: String = ""
|
||
var port: Int = 8379
|
||
var method: String = "aes-128-gcm"
|
||
var password: String = ""
|
||
var remark: String = ""
|
||
|
||
var error: String = ""
|
||
|
||
// ss://bf-cfb:test@192.168.100.1:8888#remark
|
||
func encode() -> String {
|
||
let base64 = self.method + ":" + self.password + "@" + self.host + ":" + String(self.port)
|
||
let ss = base64.base64Encoded()
|
||
if ss != nil {
|
||
return "ss://" + ss! + "#" + self.remark
|
||
}
|
||
self.error = "encode base64 fail"
|
||
return ""
|
||
}
|
||
|
||
func Init(url: URL) {
|
||
let (_decodedUrl, _tag) = self.decodeUrl(url: url)
|
||
guard let decodedUrl = _decodedUrl else {
|
||
self.error = "error: decodeUrl"
|
||
return
|
||
}
|
||
guard let parsedUrl = URLComponents(string: decodedUrl) else {
|
||
self.error = "error: parsedUrl"
|
||
return
|
||
}
|
||
guard let host = parsedUrl.host else {
|
||
self.error = "error:missing host"
|
||
return
|
||
}
|
||
guard let port = parsedUrl.port else {
|
||
self.error = "error:missing port"
|
||
return
|
||
}
|
||
guard let user = parsedUrl.user else {
|
||
self.error = "error:missing user"
|
||
return
|
||
}
|
||
|
||
self.host = host
|
||
self.port = Int(port)
|
||
|
||
// This can be overriden by the fragment part of SIP002 URL
|
||
self.remark = (parsedUrl.queryItems?.filter({ $0.name == "Remark" }).first?.value ?? _tag ?? "").urlDecoded()
|
||
|
||
if let password = parsedUrl.password {
|
||
self.method = user.lowercased()
|
||
self.password = password
|
||
if let tag = _tag {
|
||
remark = tag
|
||
}
|
||
} else {
|
||
// SIP002 URL have no password section
|
||
guard let data = Data(base64Encoded: self.padBase64(string: user)), let userInfo = String(data: data, encoding: .utf8) else {
|
||
self.error = "URL: have no password section"
|
||
return
|
||
}
|
||
|
||
let parts = userInfo.split(separator: ":", maxSplits: 1, omittingEmptySubsequences: false)
|
||
if parts.count != 2 {
|
||
self.error = "error:url userInfo"
|
||
return
|
||
}
|
||
|
||
self.method = String(parts[0]).lowercased()
|
||
self.password = String(parts[1])
|
||
|
||
// SIP002 defines where to put the profile name
|
||
if let profileName = parsedUrl.fragment {
|
||
self.remark = profileName.urlDecoded()
|
||
}
|
||
}
|
||
}
|
||
|
||
func decodeUrl(url: URL) -> (String?, String?) {
|
||
let urlStr = url.absoluteString
|
||
let base64Begin = urlStr.index(urlStr.startIndex, offsetBy: 5)
|
||
let base64End = urlStr.firstIndex(of: "#")
|
||
let encodedStr = String(urlStr[base64Begin..<(base64End ?? urlStr.endIndex)])
|
||
|
||
guard let decoded = encodedStr.base64Decoded() else {
|
||
self.error = "decode ss error"
|
||
return (url.absoluteString, nil)
|
||
}
|
||
|
||
let s = decoded.trimmingCharacters(in: .whitespacesAndNewlines)
|
||
|
||
if let index = base64End {
|
||
let i = urlStr.index(index, offsetBy: 1)
|
||
let fragment = String(urlStr[i...]).removingPercentEncoding
|
||
return ("ss://\(s)", fragment)
|
||
}
|
||
return ("ss://\(s)", nil)
|
||
}
|
||
|
||
func padBase64(string: String) -> String {
|
||
var length = string.utf8.count
|
||
if length % 4 == 0 {
|
||
return string
|
||
} else {
|
||
length = 4 - length % 4 + length
|
||
return string.padding(toLength: length, withPad: "=", startingAt: 0)
|
||
}
|
||
}
|
||
}
|
||
|
||
// link: https://coderschool.cn/2498.html
|
||
// ssr://server:port:protocol:method:obfs:password_base64/?params_base64
|
||
// 上面的链接的不同之处在于 password_base64 和 params_base64 ，顾名思义，password_base64 就是密码被 base64编码 后的字符串，而 params_base64 则是协议参数、混淆参数、备注及Group对应的参数值被 base64编码 后拼接而成的字符串。
|
||
|
||
class ShadowsockRUri: ShadowsockUri {
|
||
|
||
override func Init(url: URL) {
|
||
let (_decodedUrl, _tag) = self.decodeUrl(url: url)
|
||
guard let decodedUrl = _decodedUrl else {
|
||
self.error = "error: decodeUrl"
|
||
return
|
||
}
|
||
|
||
let parts: Array<Substring> = decodedUrl.split(separator: ":")
|
||
if parts.count != 6 {
|
||
self.error = "error:url"
|
||
return
|
||
}
|
||
|
||
let host: String = String(parts[0])
|
||
let port = String(parts[1])
|
||
let method = String(parts[3])
|
||
let passwordBase64 = String(parts[5])
|
||
|
||
self.host = host
|
||
if let aPort = Int(port) {
|
||
self.port = aPort
|
||
}
|
||
|
||
self.method = method.lowercased()
|
||
if let tag = _tag {
|
||
self.remark = tag.urlDecoded()
|
||
}
|
||
|
||
guard let data = Data(base64Encoded: self.padBase64(string: passwordBase64)), let password = String(data: data, encoding: .utf8) else {
|
||
self.error = "URL: password decode error"
|
||
return
|
||
}
|
||
self.password = password
|
||
}
|
||
|
||
override func decodeUrl(url: URL) -> (String?, String?) {
|
||
let urlStr = url.absoluteString
|
||
// remove left ssr://
|
||
let base64Begin = urlStr.index(urlStr.startIndex, offsetBy: 6)
|
||
let encodedStr = String(urlStr[base64Begin...])
|
||
|
||
guard let decoded = encodedStr.base64Decoded() else {
|
||
self.error = "decode ssr error"
|
||
return (url.absoluteString, nil)
|
||
}
|
||
|
||
let raw = decoded.trimmingCharacters(in: .whitespacesAndNewlines)
|
||
|
||
let sep = raw.range(of: "/?")
|
||
let s = String(raw[..<(sep?.lowerBound ?? raw.endIndex)])
|
||
if let iBeg = raw.range(of: "remarks=")?.upperBound {
|
||
let fragment = String(raw[iBeg...])
|
||
let iEnd = fragment.firstIndex(of: "&")
|
||
let aRemarks = String(fragment[..<(iEnd ?? fragment.endIndex)])
|
||
guard let tag = aRemarks.base64Decoded() else {
|
||
return (s, aRemarks)
|
||
}
|
||
return (s, tag)
|
||
}
|
||
|
||
return (s, nil)
|
||
}
|
||
}
|
||
|
||
// trojan
|
||
class TrojanUri {
|
||
var host: String = ""
|
||
var path: String = ""
|
||
var port: Int = 443
|
||
var password: String = ""
|
||
var remark: String = ""
|
||
var sni: String = ""
|
||
var flow: String = ""
|
||
var security: String = "tls"
|
||
var fp: String = ""
|
||
var error: String = ""
|
||
var network: String = "tcp" // network type: tcp,ws,h2,grpc,domainsocket
|
||
var netHost: String = "" // host for ws,h2
|
||
var netPath: String = "" // path for ws,h2,grpc,ds,kcp
|
||
var headerType: String = "none" // header type: none,http,wireguard,srtp,utp,wechat-video,dtls
|
||
|
||
// trojan://pass@remote_host:443?flow=xtls-rprx-origin&security=xtls&sni=sni&host=remote_host#trojan
|
||
func encode() -> String {
|
||
var uri = URLComponents()
|
||
uri.scheme = "trojan"
|
||
uri.user = self.password // 因没有 user，所以这里用 password, 不然会多一个 :
|
||
uri.host = self.host
|
||
uri.port = self.port
|
||
uri.queryItems = [
|
||
URLQueryItem(name: "flow", value: self.flow),
|
||
URLQueryItem(name: "security", value: self.security),
|
||
URLQueryItem(name: "sni", value: self.sni),
|
||
URLQueryItem(name: "fp", value: self.fp),
|
||
URLQueryItem(name: "type", value: self.network),
|
||
URLQueryItem(name: "host", value: self.netHost),
|
||
URLQueryItem(name: "path", value: self.netPath),
|
||
URLQueryItem(name: "headerType", value: self.headerType),
|
||
URLQueryItem(name: "serviceName", value: self.netPath)
|
||
]
|
||
return (uri.url?.absoluteString ?? "") + "#" + self.remark
|
||
}
|
||
|
||
func Init(url: URL) {
|
||
guard let host = url.host else {
|
||
self.error = "error:missing host"
|
||
return
|
||
}
|
||
guard let port = url.port else {
|
||
self.error = "error:missing port"
|
||
return
|
||
}
|
||
guard var password = url.user else {
|
||
self.error = "error:missing password"
|
||
return
|
||
}
|
||
// shadowrocket trojan url: trojan://%3Apassword@host:port?query#remark
|
||
if url.absoluteString.contains("trojan://%3A") {
|
||
// 去掉前面的 %3A,即:
|
||
password = password.replacingOccurrences(of: "%3A", with: "").replacingOccurrences(of: ":", with: "")
|
||
}
|
||
self.host = host
|
||
self.port = Int(port)
|
||
self.password = password
|
||
let queryItems = url.queryParams()
|
||
for item in queryItems {
|
||
switch item.key {
|
||
case "sni":
|
||
self.sni = item.value as! String
|
||
break
|
||
case "flow":
|
||
self.flow = item.value as! String
|
||
break
|
||
case "security":
|
||
self.security = item.value as! String
|
||
break
|
||
case "fp":
|
||
self.fp = item.value as! String
|
||
break
|
||
case "type":
|
||
self.network = item.value as! String
|
||
break
|
||
case "path":
|
||
self.netPath = item.value as! String
|
||
break
|
||
case "host":
|
||
self.netHost = item.value as! String
|
||
break
|
||
case "serviceName":
|
||
self.netPath = item.value as! String
|
||
break
|
||
case "headerType":
|
||
self.headerType = item.value as! String
|
||
break
|
||
// 以下是 shadowrocket 的分享参数:
|
||
// peer=sni.xx.xx&obfs=grpc&obfsParam=hjfjkdkdi&path=tekdjjd#yanue-trojan1
|
||
// ?peer=sni.xx.xx&plugin=obfs-local;obfs=websocket;obfs-host=%7B%22Host%22:%22hjfjkdkdi%22%7D;obfs-uri=tekdjjd#trojan3
|
||
case "plugin":
|
||
// 这里是 obfs-local 的参数: obfs-local;obfs=websocket;obfs-host={"Host":"hjfjkdkdi"};obfs-uri=tekdjjd
|
||
let value = item.value as! String
|
||
// 按 ; 分割
|
||
let plugins = value.components(separatedBy: ";")
|
||
for plugin in plugins {
|
||
let pluginParts = plugin.components(separatedBy: "=")
|
||
if pluginParts.count < 2 {
|
||
continue
|
||
}
|
||
switch pluginParts[0] {
|
||
case "obfs":
|
||
// 这里是 ws 的
|
||
if pluginParts[1] == "websocket" || pluginParts[1] == "ws" {
|
||
self.network = "ws"
|
||
} else if pluginParts[1] == "h2" {
|
||
self.network = "h2"
|
||
} else if pluginParts[1] == "grpc" {
|
||
self.network = "grpc"
|
||
} else {
|
||
self.network = "tcp"
|
||
}
|
||
case "obfs-host":
|
||
// 这里是 ws,h2 的 host: {"Host":"hjfjkdkdi"}
|
||
if let hostValue = pluginParts[1].removingPercentEncoding,let data = hostValue.data(using: .utf8) {
|
||
if let json = try? JSON(data: data) {
|
||
self.netHost = json["Host"].stringValue
|
||
}
|
||
}
|
||
case "obfs-uri":
|
||
// 这里是 ws,h2 的 path
|
||
self.netPath = pluginParts[1]
|
||
default:
|
||
break
|
||
}
|
||
}
|
||
break
|
||
case "obfs":
|
||
let value = item.value as! String
|
||
// 这里是 ws 的
|
||
if value == "websocket" || value == "ws" {
|
||
self.network = "ws"
|
||
} else if value == "h2" {
|
||
self.network = "h2"
|
||
} else if value == "grpc" {
|
||
self.network = "grpc"
|
||
} else {
|
||
self.network = "tcp"
|
||
}
|
||
break
|
||
case "obfsParam":
|
||
// 这里是 ws,h2 的 host
|
||
self.netHost = item.value as! String
|
||
break
|
||
case "peer":
|
||
// 这里是 sni
|
||
self.sni = item.value as! String
|
||
break
|
||
default:
|
||
break
|
||
}
|
||
}
|
||
if self.security == "" {
|
||
self.security = "tls"
|
||
}
|
||
|
||
if self.remark.isEmpty {
|
||
self.remark = (url.fragment ?? "trojan").urlDecoded()
|
||
}
|
||
}
|
||
}
|
||
|
||
// 待定标准方案: https://github.com/XTLS/Xray-core/issues/91
|
||
//# VMess + TCP，不加密（仅作示例，不安全）
|
||
//vmess://99c80931-f3f1-4f84-bffd-6eed6030f53d@qv2ray.net:31415?encryption=none#VMessTCPNaked
|
||
//# VMess + TCP，自动选择加密。编程人员特别注意不是所有的 URL 都有问号，注意处理边缘情况。
|
||
//vmess://f08a563a-674d-4ffb-9f02-89d28aec96c9@qv2ray.net:9265#VMessTCPAuto
|
||
//# VMess + TCP，手动选择加密
|
||
//vmess://5dc94f3a-ecf0-42d8-ae27-722a68a6456c@qv2ray.net:35897?encryption=aes-128-gcm#VMessTCPAES
|
||
//# VMess + TCP + TLS，内层不加密
|
||
//vmess://136ca332-f855-4b53-a7cc-d9b8bff1a8d7@qv2ray.net:9323?encryption=none&security=tls#VMessTCPTLSNaked
|
||
//# VMess + TCP + TLS，内层也自动选择加密
|
||
//vmess://be5459d9-2dc8-4f47-bf4d-8b479fc4069d@qv2ray.net:8462?security=tls#VMessTCPTLS
|
||
//# VMess + TCP + TLS，内层不加密，手动指定 SNI
|
||
//vmess://c7199cd9-964b-4321-9d33-842b6fcec068@qv2ray.net:64338?encryption=none&security=tls&sni=fastgit.org#VMessTCPTLSSNI
|
||
//# VLESS + TCP + XTLS
|
||
//vless://b0dd64e4-0fbd-4038-9139-d1f32a68a0dc@qv2ray.net:3279?security=xtls&flow=rprx-xtls-splice#VLESSTCPXTLSSplice
|
||
//# VLESS + mKCP + Seed
|
||
//vless://399ce595-894d-4d40-add1-7d87f1a3bd10@qv2ray.net:50288?type=kcp&seed=69f04be3-d64e-45a3-8550-af3172c63055#VLESSmKCPSeed
|
||
//# VLESS + mKCP + Seed，伪装成 Wireguard
|
||
//vless://399ce595-894d-4d40-add1-7d87f1a3bd10@qv2ray.net:41971?type=kcp&headerType=wireguard&seed=69f04be3-d64e-45a3-8550-af3172c63055#VLESSmKCPSeedWG
|
||
//# VMess + WebSocket + TLS
|
||
//vmess://44efe52b-e143-46b5-a9e7-aadbfd77eb9c@qv2ray.net:6939?type=ws&security=tls&host=qv2ray.net&path=%2Fsomewhere#VMessWebSocketTLS
|
||
//# VLESS + TCP + reality
|
||
//vless://44efe52b-e143-46b5-a9e7-aadbfd77eb9c@qv2ray.net:443?encryption=none&flow=xtls-rprx-vision&security=reality&sni=sni.yahoo.com&fp=chrome&pbk=xxx&sid=88&type=tcp&headerType=none&host=hk.yahoo.com#reality
|
||
|
||
class VlessUri {
|
||
var error: String = ""
|
||
var remark: String = ""
|
||
|
||
var address: String = ""
|
||
var port: Int = 0
|
||
var id: String = ""
|
||
|
||
var level: Int = 0
|
||
var flow: String = ""
|
||
|
||
var encryption: String = "" // none,auto,aes-128-gcm,...
|
||
var security: String = "" // xtls,tls,reality
|
||
|
||
var network: String = "" // network type: tcp,http,kcp,h2,ws,quic,grpc,domainsocket
|
||
var headerType: String = "" // header type: tcp=["none","http"],quic,kcp=["none", "srtp", "utp", "wechat-video", "dtls", "wireguard"]
|
||
var host: String = ""
|
||
var sni: String = ""
|
||
var path: String = ""
|
||
var fp: String = "" // fingerprint
|
||
var pbk: String = "" // reality public key
|
||
var sid: String = "" // reality shortId
|
||
var grpcMode:String = ""
|
||
var kcpSeed:String = ""
|
||
|
||
// vless://f2a5064a-fabb-43ed-a2b6-8ffeb970df7f@00.com:443?flow=xtls-rprx-splite&encryption=none&security=xtls&sni=aaaaa&type=http&host=00.com&path=%2fvl#vless1
|
||
func encode() -> String {
|
||
var uri = URLComponents()
|
||
uri.scheme = "vless"
|
||
uri.user = self.id
|
||
uri.host = self.address
|
||
uri.port = self.port
|
||
uri.queryItems = [
|
||
URLQueryItem(name: "flow", value: self.flow),
|
||
URLQueryItem(name: "security", value: self.security),
|
||
URLQueryItem(name: "encryption", value: self.encryption),
|
||
URLQueryItem(name: "type", value: self.network), // 网络类型: tcp,http,kcp,h2,ws,quic,grpc,domainsocket
|
||
URLQueryItem(name: "host", value: self.host),
|
||
URLQueryItem(name: "path", value: self.path),
|
||
URLQueryItem(name: "sni", value: self.sni),
|
||
URLQueryItem(name: "fp", value: self.fp),
|
||
URLQueryItem(name: "pbk", value: self.pbk),
|
||
URLQueryItem(name: "sid", value: self.sid),
|
||
URLQueryItem(name: "serviceName", value: self.path),
|
||
URLQueryItem(name: "headerType", value: self.headerType),
|
||
URLQueryItem(name: "mode", value: self.grpcMode),
|
||
URLQueryItem(name: "seed", value: self.kcpSeed)
|
||
]
|
||
|
||
return (uri.url?.absoluteString ?? "") + "#" + self.remark
|
||
}
|
||
|
||
func Init(url: URL) {
|
||
// vless://YXV0bzpwYXNzd29yZEB2bGVzcy5ob3N0OjQ0Mw==?remarks=vless_vision_reality&tls=1&peer=sni.vless.host&xtls=2&pbk=nQhM0Ahmm1WPrUFPxE9_qFxXSQ7weIf7yOeMrZU5gRs&sid=5443
|
||
// vless://id@address:port?query#remark
|
||
guard var address = url.host else {
|
||
self.error = "error:missing host"
|
||
return
|
||
}
|
||
var id = url.user ?? ""
|
||
var port = url.port ?? 0
|
||
if id.count == 0 || port == 0 {
|
||
// 可能是 shadowrocket 的链接: vless://base64encode?query#remark
|
||
// base64encode 是 auto:id@address:port 的 base64 编码
|
||
guard let base64Str = url.absoluteString.components(separatedBy: "://").last?.components(separatedBy: "?").first else {
|
||
self.error = "error:missing port or id"
|
||
return
|
||
}
|
||
guard let decodedStr = base64Str.base64Decoded() else {
|
||
self.error = "error: decode base64"
|
||
return
|
||
}
|
||
print("VlessUri decode base64:", decodedStr)
|
||
let parts = decodedStr.split(separator: "@")
|
||
if parts.count != 2 {
|
||
self.error = "error: decode base64 parts"
|
||
return
|
||
}
|
||
// id:encryption
|
||
let idAndEncypt = parts[0].split(separator: ":")
|
||
if idAndEncypt.count > 1 {
|
||
self.encryption = String(idAndEncypt[0])
|
||
id = String(idAndEncypt[1])
|
||
} else {
|
||
id = String(idAndEncypt[0])
|
||
}
|
||
// address:port
|
||
let addressAndPort = parts[1].split(separator: ":")
|
||
if addressAndPort.count != 2 {
|
||
self.error = "error: decode base64 address and port"
|
||
return
|
||
}
|
||
// 替换原始的 id 和 address, port
|
||
address = String(addressAndPort[0])
|
||
port = Int(addressAndPort[1]) ?? 0
|
||
}
|
||
self.address = address
|
||
self.port = Int(port)
|
||
self.id = id
|
||
let paramsStr = url.query ?? ""
|
||
print("VlessUri parsed", self.encryption, address, port, id, url)
|
||
let queryItems = url.queryParams()
|
||
for item in queryItems {
|
||
switch item.key {
|
||
case "level":
|
||
self.level = item.value as! Int
|
||
break
|
||
case "flow":
|
||
self.flow = item.value as! String
|
||
break
|
||
case "encryption":
|
||
self.encryption = item.value as! String
|
||
if self.encryption.count == 0 {
|
||
self.encryption = "none"
|
||
}
|
||
break
|
||
case "security":
|
||
self.security = item.value as! String
|
||
break
|
||
case "type":
|
||
self.network = item.value as! String
|
||
break
|
||
case "host":
|
||
self.host = item.value as! String
|
||
break
|
||
case "sni":
|
||
self.sni = item.value as! String
|
||
break
|
||
case "path":
|
||
self.path = item.value as! String
|
||
break
|
||
case "fp":
|
||
self.fp = item.value as! String
|
||
break
|
||
case "pbk":
|
||
self.pbk = item.value as! String
|
||
break
|
||
case "sid":
|
||
self.sid = item.value as! String
|
||
break
|
||
case "headerType":
|
||
self.headerType = item.value as! String
|
||
break
|
||
case "seed":
|
||
self.kcpSeed = item.value as! String
|
||
break
|
||
case "serviceName":
|
||
self.path = item.value as! String
|
||
break
|
||
case "mode":
|
||
self.grpcMode = item.value as! String
|
||
break
|
||
// 以下是 shadowrocket 的分享参数:
|
||
// remarks=yanue-test11&tls=1&peer=sni.domain&xtls=2&pbk=nQhM0Ahmm1WPrUFPxE9_qFxXSQ7weIf7yOeMrZU5gRs&sid=5443
|
||
case "obfs":
|
||
let value = item.value as! String
|
||
// 这里是 ws 的
|
||
if value == "websocket" || value == "ws" {
|
||
self.network = "ws"
|
||
} else if value == "h2" {
|
||
self.network = "h2"
|
||
} else if value == "http" {
|
||
self.network = "tcp" //
|
||
self.headerType = "http" // headerType
|
||
} else if value == "grpc" {
|
||
self.network = "grpc"
|
||
} else if value == "domainsocket" {
|
||
self.network = "domainsocket"
|
||
} else if value == "quic" {
|
||
self.network = "quic"
|
||
} else if value == "kcp" || value == "mkcp" {
|
||
self.network = "kcp"
|
||
} else {
|
||
self.network = "tcp"
|
||
self.headerType = value
|
||
}
|
||
break
|
||
case "obfsParam":
|
||
let value = item.value as! String
|
||
// 这里是 ws,h2 的 host
|
||
self.host = value
|
||
// params的obfs=mkcp情况下, 获取 kcp seed: obfsParam=%7B%22seed%22:%22111%22,%22Host%22:%22xxx.xx%22%7D
|
||
if paramsStr.contains("obfs=mkcp") || paramsStr.contains("obfs=kcp") || paramsStr.contains("obfs=grpc") {
|
||
// 先 urldecode, 解析 kcp seed: {"seed":"111","Host":""}
|
||
if let decodedParam = value.removingPercentEncoding, let data = decodedParam.data(using: .utf8) {
|
||
if let json = try? JSON(data: data) {
|
||
self.kcpSeed = json["seed"].stringValue
|
||
self.host = json["Host"].stringValue
|
||
}
|
||
}
|
||
}
|
||
case "tls":
|
||
let value = item.value as! String
|
||
if !paramsStr.contains("xtls=") && value == "1" {
|
||
self.security = "tls"
|
||
}
|
||
break
|
||
case "xtls":
|
||
let value = item.value as! String
|
||
if value == "1" {
|
||
self.security = "xtls"
|
||
self.flow = "xtls-rprx-origin" // 默认 xtls
|
||
}
|
||
if value == "2" {
|
||
self.security = "reality"
|
||
self.flow = "xtls-rprx-vision" // 默认 reality
|
||
}
|
||
break
|
||
case "remarks":
|
||
// 这里是备注
|
||
let value = item.value as! String
|
||
self.remark = value.urlDecoded()
|
||
break
|
||
case "peer":
|
||
// 这里是 sni
|
||
let value = item.value as! String
|
||
self.sni = value
|
||
print("VlessUri peer sni:", self.sni)
|
||
break
|
||
default:
|
||
break
|
||
}
|
||
}
|
||
|
||
if self.sni.count == 0 {
|
||
self.sni = address
|
||
}
|
||
|
||
if self.remark.isEmpty {
|
||
self.remark = (url.fragment ?? "vless").urlDecoded()
|
||
}
|
||
}
|
||
}
|