File size: 6,652 Bytes
88c4c60 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 | import { NextResponse } from "next/server";
import {
getMitmStatus,
startServer,
stopServer,
enableToolDNS,
disableToolDNS,
trustCert,
getCachedPassword,
setCachedPassword,
loadEncryptedPassword,
isSudoPasswordRequired,
initDbHooks,
} from "@/mitm/manager";
import { getSettings, updateSettings } from "@/lib/localDb";
initDbHooks(getSettings, updateSettings);
const DEFAULT_MITM_ROUTER_BASE = "http://localhost:20128";
function normalizeMitmRouterBaseUrlInput(input) {
if (input == null || String(input).trim() === "") {
return DEFAULT_MITM_ROUTER_BASE;
}
const t = String(input).trim().replace(/\/+$/, "");
let u;
try {
u = new URL(t);
} catch {
throw new Error("Invalid MITM router URL");
}
if (u.protocol !== "http:" && u.protocol !== "https:") {
throw new Error("MITM router URL must use http or https");
}
return t;
}
const isWin = process.platform === "win32";
function getPassword(provided) {
return provided || getCachedPassword() || null;
}
function requiresSudoPassword(pwd) {
return !isWin && !pwd && isSudoPasswordRequired();
}
function checkIsAdmin() {
if (isWin) {
try {
require("child_process").execSync("net session >nul 2>&1", { windowsHide: true });
return true;
} catch {
return false;
}
}
return typeof process.getuid === "function" && process.getuid() === 0;
}
function checkPrivilege(pwd) {
if (checkIsAdmin()) return true;
if (isWin) return false;
if (!isSudoPasswordRequired()) return true;
return !!pwd;
}
// GET - Full MITM status (server + per-tool DNS)
export async function GET() {
try {
const status = await getMitmStatus();
const settings = await getSettings();
const hasCachedPassword = !!getCachedPassword() || !!(await loadEncryptedPassword());
return NextResponse.json({
running: status.running,
pid: status.pid || null,
certExists: status.certExists || false,
certTrusted: status.certTrusted || false,
dnsStatus: status.dnsStatus || {},
hasCachedPassword,
isWin,
needsSudoPassword: !isWin && !hasCachedPassword && isSudoPasswordRequired(),
isAdmin: checkIsAdmin(),
mitmRouterBaseUrl:
(settings.mitmRouterBaseUrl && String(settings.mitmRouterBaseUrl).trim()) ||
DEFAULT_MITM_ROUTER_BASE,
});
} catch (error) {
console.log("Error getting MITM status:", error.message);
return NextResponse.json({ error: "Failed to get MITM status" }, { status: 500 });
}
}
// POST - Start MITM server (cert + server, no DNS)
export async function POST(request) {
try {
const { apiKey, sudoPassword, mitmRouterBaseUrl, forceKillPort443 } = await request.json();
const pwd = getPassword(sudoPassword) || await loadEncryptedPassword() || "";
if (!apiKey || requiresSudoPassword(pwd)) {
return NextResponse.json(
{ error: !apiKey ? "Missing apiKey" : "Missing sudoPassword" },
{ status: 400 }
);
}
if (!checkPrivilege(pwd)) {
return NextResponse.json(
{ error: isWin ? "Administrator required — restart 9Router as Administrator" : "Root or sudo password required to start MITM" },
{ status: 403 }
);
}
if (mitmRouterBaseUrl !== undefined && mitmRouterBaseUrl !== null) {
try {
const normalized = normalizeMitmRouterBaseUrlInput(mitmRouterBaseUrl);
await updateSettings({ mitmRouterBaseUrl: normalized });
} catch (e) {
return NextResponse.json(
{ error: e.message || "Invalid MITM router URL" },
{ status: 400 },
);
}
}
const result = await startServer(apiKey, pwd, !!forceKillPort443);
if (!isWin) setCachedPassword(pwd);
return NextResponse.json({ success: true, running: result.running, pid: result.pid });
} catch (error) {
console.log("Error starting MITM server:", error.message);
if (error.code === "PORT_443_BUSY") {
return NextResponse.json(
{ error: error.message, code: "PORT_443_BUSY", portOwner: error.portOwner },
{ status: 409 }
);
}
return NextResponse.json({ error: error.message || "Failed to start MITM server" }, { status: 500 });
}
}
// DELETE - Stop MITM server (removes all DNS first, then kills server)
export async function DELETE(request) {
try {
const body = await request.json().catch(() => ({}));
const { sudoPassword } = body;
const pwd = getPassword(sudoPassword) || await loadEncryptedPassword() || "";
if (requiresSudoPassword(pwd)) {
return NextResponse.json({ error: "Missing sudoPassword" }, { status: 400 });
}
await stopServer(pwd);
if (!isWin && sudoPassword) setCachedPassword(sudoPassword);
return NextResponse.json({ success: true, running: false });
} catch (error) {
console.log("Error stopping MITM server:", error.message);
return NextResponse.json({ error: error.message || "Failed to stop MITM server" }, { status: 500 });
}
}
// PATCH - Toggle DNS for a specific tool (enable/disable)
export async function PATCH(request) {
try {
const { tool, action, sudoPassword } = await request.json();
const pwd = getPassword(sudoPassword) || await loadEncryptedPassword() || "";
if (!tool || !action) {
return NextResponse.json({ error: "tool and action required" }, { status: 400 });
}
if (requiresSudoPassword(pwd)) {
return NextResponse.json({ error: "Missing sudoPassword" }, { status: 400 });
}
if (!checkPrivilege(pwd)) {
return NextResponse.json(
{ error: isWin ? "Administrator required — restart 9Router as Administrator" : "Root or sudo password required to modify DNS" },
{ status: 403 }
);
}
if (action === "enable") {
await enableToolDNS(tool, pwd);
} else if (action === "disable") {
await disableToolDNS(tool, pwd);
} else if (action === "trust-cert") {
await trustCert(pwd);
if (!isWin && sudoPassword) setCachedPassword(sudoPassword);
const status = await getMitmStatus();
return NextResponse.json({ success: true, certTrusted: status.certTrusted });
} else {
return NextResponse.json({ error: "action must be enable, disable, or trust-cert" }, { status: 400 });
}
if (!isWin && sudoPassword) setCachedPassword(sudoPassword);
const status = await getMitmStatus();
return NextResponse.json({ success: true, dnsStatus: status.dnsStatus });
} catch (error) {
console.log("Error toggling DNS:", error.message);
return NextResponse.json({ error: error.message || "Failed to toggle DNS" }, { status: 500 });
}
}
|