mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-05-13 17:46:02 +00:00
Ports the panel/security partial: change-credentials form and 2FA toggle. The 2FA modal is a new shared component since enabling 2FA, disabling 2FA, and changing credentials all funnel through it with slightly different copy. - TwoFactorModal.vue: 'set' flow renders a QR code + manual key + a 6-digit verifier; 'confirm' flow renders just the verifier. The parent passes a confirm(success) callback that fires only when the entered code matches the live TOTP value (otpauth lib). - SecurityTab.vue: holds the local user form (oldUsername/oldPassword/ new*), POSTs /panel/setting/updateUser, and on success force-redirects to logout. When 2FA is on, the credentials change goes through the confirm-modal first. - toggleTwoFactor leaves the switch read-only (the v-bound :checked matches AllSetting) and only flips after the modal succeeds, so cancelling out leaves state unchanged. - Adds otpauth ^9.5.1 dep (qrious was already present). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
299 lines
10 KiB
Vue
299 lines
10 KiB
Vue
<script setup>
|
|
import { computed, onMounted, ref } from 'vue';
|
|
import { theme as antdTheme, Modal } from 'ant-design-vue';
|
|
import {
|
|
SettingOutlined,
|
|
SafetyOutlined,
|
|
MessageOutlined,
|
|
CloudServerOutlined,
|
|
CodeOutlined,
|
|
} from '@ant-design/icons-vue';
|
|
|
|
import { HttpUtil, PromiseUtil } from '@/utils';
|
|
import { theme as themeState } from '@/composables/useTheme.js';
|
|
import { useMediaQuery } from '@/composables/useMediaQuery.js';
|
|
import AppSidebar from '@/components/AppSidebar.vue';
|
|
import { useAllSetting } from './useAllSetting.js';
|
|
import GeneralTab from './GeneralTab.vue';
|
|
import SecurityTab from './SecurityTab.vue';
|
|
|
|
const antdThemeConfig = computed(() => ({
|
|
algorithm: themeState.isDark ? antdTheme.darkAlgorithm : antdTheme.defaultAlgorithm,
|
|
}));
|
|
|
|
const { fetched, spinning, saveDisabled, allSetting, fetchAll, saveAll } = useAllSetting();
|
|
const { isMobile } = useMediaQuery();
|
|
|
|
const basePath = window.__X_UI_BASE_PATH__ || '';
|
|
const requestUri = window.location.pathname;
|
|
|
|
// `entry*` mirrors the URL the user opened the panel with so the page
|
|
// can rebuild it after a restart that may change host/port/scheme.
|
|
const entryHost = ref('');
|
|
const entryPort = ref('');
|
|
const entryIsIP = ref(false);
|
|
|
|
function isIp(h) {
|
|
if (typeof h !== 'string') return false;
|
|
// IPv4: four dot-separated octets 0-255.
|
|
const v4 = h.split('.');
|
|
if (v4.length === 4 && v4.every((p) => /^\d{1,3}$/.test(p) && Number(p) <= 255)) return true;
|
|
// IPv6: hex groups, optional single :: compression.
|
|
if (!h.includes(':') || h.includes(':::')) return false;
|
|
const parts = h.split('::');
|
|
if (parts.length > 2) return false;
|
|
const split = (s) => (s ? s.split(':').filter(Boolean) : []);
|
|
const head = split(parts[0]);
|
|
const tail = split(parts[1]);
|
|
const valid = (seg) => /^[0-9a-fA-F]{1,4}$/.test(seg);
|
|
if (![...head, ...tail].every(valid)) return false;
|
|
const groups = head.length + tail.length;
|
|
return parts.length === 2 ? groups < 8 : groups === 8;
|
|
}
|
|
|
|
onMounted(() => {
|
|
entryHost.value = window.location.hostname;
|
|
entryPort.value = window.location.port;
|
|
entryIsIP.value = isIp(entryHost.value);
|
|
});
|
|
|
|
// Rebuild the URL after a restart — host/port/scheme may have changed
|
|
// (cert toggled on, port edited, base path edited).
|
|
function rebuildUrlAfterRestart() {
|
|
const { webDomain, webPort, webBasePath, webCertFile, webKeyFile } = allSetting;
|
|
const newProtocol = (webCertFile || webKeyFile) ? 'https:' : 'http:';
|
|
|
|
let base = webBasePath ? webBasePath.replace(/^\//, '') : '';
|
|
if (base && !base.endsWith('/')) base += '/';
|
|
|
|
if (!entryIsIP.value) {
|
|
const url = new URL(window.location.href);
|
|
url.pathname = `/${base}panel/settings`;
|
|
url.protocol = newProtocol;
|
|
return url.toString();
|
|
}
|
|
|
|
let finalHost = entryHost.value;
|
|
let finalPort = entryPort.value || '';
|
|
if (webDomain && isIp(webDomain)) finalHost = webDomain;
|
|
if (webPort && Number(webPort) !== Number(entryPort.value)) finalPort = String(webPort);
|
|
|
|
const url = new URL(`${newProtocol}//${finalHost}`);
|
|
if (finalPort) url.port = finalPort;
|
|
url.pathname = `/${base}panel/settings`;
|
|
return url.toString();
|
|
}
|
|
|
|
async function restartPanel() {
|
|
await new Promise((resolve, reject) => {
|
|
Modal.confirm({
|
|
title: 'Restart panel',
|
|
content: 'Restart the panel now? Your session will reconnect once it comes back.',
|
|
okText: 'Restart',
|
|
cancelText: 'Cancel',
|
|
onOk: () => resolve(),
|
|
onCancel: () => reject(new Error('cancelled')),
|
|
});
|
|
}).catch(() => null);
|
|
|
|
spinning.value = true;
|
|
try {
|
|
const msg = await HttpUtil.post('/panel/setting/restartPanel');
|
|
if (!msg?.success) return;
|
|
await PromiseUtil.sleep(5000);
|
|
window.location.replace(rebuildUrlAfterRestart());
|
|
} finally {
|
|
spinning.value = false;
|
|
}
|
|
}
|
|
|
|
// Conf alerts mirror the legacy banner — pure derivation off allSetting.
|
|
const confAlerts = computed(() => {
|
|
const out = [];
|
|
if (window.location.protocol !== 'https:') {
|
|
out.push('Panel is served over plain HTTP — set up TLS for production.');
|
|
}
|
|
if (allSetting.webPort === 2053) {
|
|
out.push('Default port 2053 is well-known — change it to a random port.');
|
|
}
|
|
const segs = window.location.pathname.split('/').length < 4;
|
|
if (segs && allSetting.webBasePath === '/') {
|
|
out.push('Default base path "/" is well-known — change it to a random path.');
|
|
}
|
|
if (allSetting.subEnable) {
|
|
let subPath = allSetting.subPath;
|
|
if (allSetting.subURI) {
|
|
try { subPath = new URL(allSetting.subURI).pathname; } catch (_e) {}
|
|
}
|
|
if (subPath === '/sub/') {
|
|
out.push('Default subscription path "/sub/" is well-known — change it.');
|
|
}
|
|
}
|
|
if (allSetting.subJsonEnable) {
|
|
let p = allSetting.subJsonPath;
|
|
if (allSetting.subJsonURI) {
|
|
try { p = new URL(allSetting.subJsonURI).pathname; } catch (_e) {}
|
|
}
|
|
if (p === '/json/') {
|
|
out.push('Default JSON subscription path "/json/" is well-known — change it.');
|
|
}
|
|
}
|
|
return out;
|
|
});
|
|
|
|
const alertVisible = ref(true);
|
|
</script>
|
|
|
|
<template>
|
|
<a-config-provider :theme="antdThemeConfig">
|
|
<a-layout
|
|
class="settings-page"
|
|
:class="{ 'is-dark': themeState.isDark, 'is-ultra': themeState.isUltra }"
|
|
>
|
|
<AppSidebar :base-path="basePath" :request-uri="requestUri" />
|
|
|
|
<a-layout class="content-shell">
|
|
<a-layout-content id="content-layout" class="content-area">
|
|
<a-spin :spinning="spinning || !fetched" :delay="200" tip="Loading…" size="large">
|
|
<div v-if="!fetched" class="loading-spacer" />
|
|
|
|
<template v-else>
|
|
<a-alert
|
|
v-if="confAlerts.length > 0 && alertVisible"
|
|
type="error"
|
|
show-icon
|
|
closable
|
|
class="conf-alert"
|
|
@close="alertVisible = false"
|
|
>
|
|
<template #message>Security warnings</template>
|
|
<template #description>
|
|
<b>Your panel may be exposed:</b>
|
|
<ul>
|
|
<li v-for="(msg, i) in confAlerts" :key="i">{{ msg }}</li>
|
|
</ul>
|
|
</template>
|
|
</a-alert>
|
|
|
|
<a-row :gutter="[isMobile ? 8 : 16, isMobile ? 0 : 12]">
|
|
<a-col :span="24">
|
|
<a-card hoverable>
|
|
<a-row class="header-row">
|
|
<a-col :xs="24" :sm="10" class="header-actions">
|
|
<a-space direction="horizontal">
|
|
<a-button type="primary" :disabled="saveDisabled" @click="saveAll">
|
|
Save
|
|
</a-button>
|
|
<a-button type="primary" danger :disabled="!saveDisabled" @click="restartPanel">
|
|
Restart panel
|
|
</a-button>
|
|
</a-space>
|
|
</a-col>
|
|
<a-col :xs="24" :sm="14" class="header-info">
|
|
<a-back-top :target="() => document.getElementById('content-layout')" :visibility-height="200" />
|
|
<a-alert
|
|
type="warning"
|
|
show-icon
|
|
message="Save before restarting — unsaved changes are dropped on restart."
|
|
/>
|
|
</a-col>
|
|
</a-row>
|
|
</a-card>
|
|
</a-col>
|
|
|
|
<a-col :span="24">
|
|
<a-tabs default-active-key="1">
|
|
<a-tab-pane key="1" class="tab-pane">
|
|
<template #tab>
|
|
<SettingOutlined />
|
|
<span>Panel</span>
|
|
</template>
|
|
<GeneralTab :all-setting="allSetting" />
|
|
</a-tab-pane>
|
|
<a-tab-pane key="2" class="tab-pane">
|
|
<template #tab>
|
|
<SafetyOutlined />
|
|
<span>Security</span>
|
|
</template>
|
|
<SecurityTab :all-setting="allSetting" />
|
|
</a-tab-pane>
|
|
<a-tab-pane key="3" class="tab-pane">
|
|
<template #tab>
|
|
<MessageOutlined />
|
|
<span>Telegram</span>
|
|
</template>
|
|
<a-empty description="Telegram — coming in 5d-iv" />
|
|
</a-tab-pane>
|
|
<a-tab-pane key="4" class="tab-pane">
|
|
<template #tab>
|
|
<CloudServerOutlined />
|
|
<span>Subscription</span>
|
|
</template>
|
|
<a-empty description="Subscription — coming in 5d-v" />
|
|
</a-tab-pane>
|
|
<a-tab-pane
|
|
v-if="allSetting.subJsonEnable || allSetting.subClashEnable"
|
|
key="5"
|
|
class="tab-pane"
|
|
>
|
|
<template #tab>
|
|
<CodeOutlined />
|
|
<span>Subscription (Formats)</span>
|
|
</template>
|
|
<a-empty description="Subscription formats — coming in 5d-vi" />
|
|
</a-tab-pane>
|
|
</a-tabs>
|
|
</a-col>
|
|
</a-row>
|
|
</template>
|
|
</a-spin>
|
|
</a-layout-content>
|
|
</a-layout>
|
|
</a-layout>
|
|
</a-config-provider>
|
|
</template>
|
|
|
|
<style scoped>
|
|
.settings-page {
|
|
--bg-page: #f0f2f5;
|
|
--bg-card: #ffffff;
|
|
|
|
min-height: 100vh;
|
|
background: var(--bg-page);
|
|
}
|
|
|
|
.settings-page.is-dark {
|
|
--bg-page: #0a1222;
|
|
--bg-card: #151f31;
|
|
}
|
|
|
|
.settings-page.is-dark.is-ultra {
|
|
--bg-page: #21242a;
|
|
--bg-card: #0c0e12;
|
|
}
|
|
|
|
.settings-page :deep(.ant-layout),
|
|
.settings-page :deep(.ant-layout-content) {
|
|
background: transparent;
|
|
}
|
|
|
|
.content-shell { background: transparent; }
|
|
.content-area { padding: 24px; }
|
|
|
|
.loading-spacer { min-height: calc(100vh - 120px); }
|
|
|
|
.conf-alert { margin-bottom: 10px; }
|
|
|
|
.header-row {
|
|
display: flex;
|
|
flex-wrap: wrap;
|
|
align-items: center;
|
|
}
|
|
.header-actions { padding: 4px; }
|
|
.header-info {
|
|
display: flex;
|
|
justify-content: flex-end;
|
|
}
|
|
|
|
.tab-pane { padding-top: 20px; }
|
|
</style>
|