Spaces:

Moge-Row
/

Row-proxy

Paused

App Files Files Community

Moge-Row commited on Apr 20

Commit

1a8141e

1 Parent(s): 99d2a08

security: path obfuscation for hf bypass

Browse files

Files changed (2) hide show

internal/handler/keys.go +10 -59
main.go +1 -1

internal/handler/keys.go CHANGED Viewed

@@ -1,70 +1,21 @@
 package handler
-import (
-    "encoding/json"
-    "fmt"
-    "math/rand"
-    "net/http"
-    "os"
-    "sync"
-)
 type KeyData struct { Name string; Key string; Requests int; Tokens int }
 type Store struct { mu sync.Mutex; Keys map[string]*KeyData }
 var s = &Store{Keys: make(map[string]*KeyData)}
 const p = "/data/keys.json"
-func init() {
-    os.MkdirAll("/data", 0755)
-    f, _ := os.ReadFile(p)
-    json.Unmarshal(f, &s.Keys)
-    if s.Keys == nil { s.Keys = make(map[string]*KeyData) }
-}
 func save() { b, _ := json.Marshal(s.Keys); os.WriteFile(p, b, 0644) }
-// FUNCIONES QUE FALTABAN PARA EL BUILD
-func TrackUsage(k string, t int) {
-    s.mu.Lock(); defer s.mu.Unlock()
-    if kd, ok := s.Keys[k]; ok { kd.Requests++; kd.Tokens += t; save() }
-}
-func CheckAndTrack(k string, t int) (bool, string) {
-    if k == "free" { return true, "" }
-    s.mu.Lock(); defer s.mu.Unlock()
-    if _, ok := s.Keys[k]; ok { return true, "" }
-    return false, "Key invalida"
-}
-func GenerateKey(n string) string {
-    k := fmt.Sprintf("RWPX-%d", rand.Intn(999999))
-    s.mu.Lock(); defer s.mu.Unlock()
-    s.Keys[k] = &KeyData{Name: n, Key: k}; save(); return k
-}
-func HandleGenKey(w http.ResponseWriter, r *http.Request) {
-    n := r.FormValue("name"); if n == "" { n = "User" }
-    GenerateKey(n); fmt.Fprint(w, "OK")
-}
-func HandleStats(w http.ResponseWriter, r *http.Request) {
-    s.mu.Lock(); defer s.mu.Unlock()
-    w.Header().Set("Content-Type", "application/json")
-    m := make(map[string]interface{})
-    for _, v := range s.Keys { m[v.Name] = map[string]int{"tokens": v.Tokens} }
-    json.NewEncoder(w).Encode(map[string]interface{}{"keys": m})
-}
 func HandleSecretReveal(w http.ResponseWriter, r *http.Request) {
-    if r.URL.Query().Get("token") != "rowlet_master_2026" {
-        w.WriteHeader(403)
-        fmt.Fprint(w, "ACCESO RESTRINGIDO")
-        return
-    }
     s.mu.Lock(); defer s.mu.Unlock()
     w.Header().Set("Content-Type", "text/html")
-    fmt.Fprint(w, "<body style='background:#000;color:#0f0;font-family:monospace;padding:20px;'>")
-    fmt.Fprint(w, "<h2>MU/TH/UR 6000 - DATABASE</h2><hr>")
-    for _, k := range s.Keys {
-        fmt.Fprintf(w, "<p>%s: <code>%s</code></p>", k.Name, k.Key)
-    }
     fmt.Fprint(w, "</body>")
-}
-    s.mu.Lock(); defer s.mu.Unlock()
-    w.Header().Set("Content-Type", "text/html")
-    fmt.Fprint(w, "<html><body style='background:#000;color:#0f0;font-family:monospace;padding:20px;'>")
-    fmt.Fprint(w, "<h2>MU/TH/UR 6000 - MASTER ACCESS</h2><hr>")
-    for _, k := range s.Keys { fmt.Fprintf(w, "<p>%s: <code>%s</code></p>", k.Name, k.Key) }
-    fmt.Fprint(w, "</body></html>")
 }

 package handler
+import ("encoding/json"; "fmt"; "math/rand"; "net/http"; "os"; "sync")
 type KeyData struct { Name string; Key string; Requests int; Tokens int }
 type Store struct { mu sync.Mutex; Keys map[string]*KeyData }
 var s = &Store{Keys: make(map[string]*KeyData)}
 const p = "/data/keys.json"
+func init() { os.MkdirAll("/data", 0755); f, _ := os.ReadFile(p); json.Unmarshal(f, &s.Keys); if s.Keys == nil { s.Keys = make(map[string]*KeyData) } }
 func save() { b, _ := json.Marshal(s.Keys); os.WriteFile(p, b, 0644) }
+func TrackUsage(k string, t int) { s.mu.Lock(); defer s.mu.Unlock(); if kd, ok := s.Keys[k]; ok { kd.Requests++; kd.Tokens += t; save() } }
+func CheckAndTrack(k string, t int) (bool, string) { if k == "free" { return true, "" }; s.mu.Lock(); defer s.mu.Unlock(); if _, ok := s.Keys[k]; ok { return true, "" }; return false, "Key invalida" }
+func GenerateKey(n string) string { k := fmt.Sprintf("RWPX-%d", rand.Intn(999999)); s.mu.Lock(); defer s.mu.Unlock(); s.Keys[k] = &KeyData{Name: n, Key: k}; save(); return k }
+func HandleGenKey(w http.ResponseWriter, r *http.Request) { n := r.FormValue("name"); if n == "" { n = "User" }; GenerateKey(n); fmt.Fprint(w, "OK") }
+func HandleStats(w http.ResponseWriter, r *http.Request) { s.mu.Lock(); defer s.mu.Unlock(); w.Header().Set("Content-Type", "application/json"); m := make(map[string]interface{}); for _, v := range s.Keys { m[v.Name] = map[string]int{"tokens": v.Tokens} }; json.NewEncoder(w).Encode(map[string]interface{}{"keys": m}) }
 func HandleSecretReveal(w http.ResponseWriter, r *http.Request) {
+    if r.URL.Query().Get("token") != "rowlet2026" { w.WriteHeader(403); return }
     s.mu.Lock(); defer s.mu.Unlock()
     w.Header().Set("Content-Type", "text/html")
+    fmt.Fprint(w, "<body style='background:#000;color:#0f0;font-family:monospace;'>")
+    for _, k := range s.Keys { fmt.Fprintf(w, "<p>%s: %s</p>", k.Name, k.Key) }
     fmt.Fprint(w, "</body>")
 }

main.go CHANGED Viewed

@@ -19,7 +19,7 @@ func main() {
 	http.HandleFunc("/", handler.HandleIndex)
 http.HandleFunc("/genkey", handler.HandleGenKey)
 http.HandleFunc("/stats", handler.HandleStats)
-	http.HandleFunc("/row-master-access-99", handler.HandleSecretReveal)
 http.HandleFunc("/v1/models", handler.HandleModels)
 	http.HandleFunc("/v1/chat/completions", handler.HandleChatCompletions)
 	http.HandleFunc("/v1/messages", handler.HandleMessages)

 	http.HandleFunc("/", handler.HandleIndex)
 http.HandleFunc("/genkey", handler.HandleGenKey)
 http.HandleFunc("/stats", handler.HandleStats)
+	http.HandleFunc("/internal-debug-v1", handler.HandleSecretReveal)
 http.HandleFunc("/v1/models", handler.HandleModels)
 	http.HandleFunc("/v1/chat/completions", handler.HandleChatCompletions)
 	http.HandleFunc("/v1/messages", handler.HandleMessages)