update

Dockerfile

@@ -31,8 +31,8 @@ COPY --from=build --chown=node:node /app/.git /app/.git
 
 USER node
 
-ENV API_URL="https://hhaoqin-cobalt.hf.space/"
-ENV API_PORT="7860"
+#ENV API_URL="https://hhaoqin-cobalt.hf.space/"
+#ENV API_PORT="7860"
 
 EXPOSE 7860
 CMD [ "node", "src/cobalt" ]

api/src/.env

@@ -1 +1,3 @@
-API_URL="https://hhaoqin-cobalt.hf.space/"
+API_URL="https://hhaoqin-cobalt.hf.space/"
+APPKEY="SL0qaUL2dAdzaIpduOuBSg"
+API_PORT="7860"

api/src/config.js

@@ -13,9 +13,10 @@ const enabledServices = new Set(Object.keys(services).filter(e => {
 }));
 
 const env = {
-    apiURL: process.env.API_URL || 'https://hhaoqin-cobalt.hf.space/',
+    apiURL: process.env.API_URL || '',
     apiPort: process.env.API_PORT || 7860,
     tunnelPort: process.env.API_PORT || 7860,
+    appKey: process.env.APPKEY,
 
     listenAddress: process.env.API_LISTEN_ADDRESS,
     freebindCIDR: process.platform === 'linux' && process.env.FREEBIND_CIDR,

api/src/core/api.js

@@ -128,6 +128,20 @@ export const runAPI = async (express, app, __dirname, isPrimary = true) => {
         next();
     });
 
+    app.post('/', (req, res, next) => {
+        const appkey = req.query.appkey;
+
+        if (!appkey) {
+            return fail(res, "error.api.auth.appkey.missing");
+        }
+
+        if (appkey !== env.appKey) {
+            return fail(res, "error.api.auth.appkey.invalid");
+        }
+
+        next();
+    });
+
     app.post('/', (req, res, next) => {
         if (!env.apiKeyURL) {
             return next();
@@ -170,7 +184,7 @@ export const runAPI = async (express, app, __dirname, isPrimary = true) => {
                 return fail(res, "error.api.auth.jwt.invalid");
             }
 
-            const [ type, token, ...rest ] = authorization.split(" ");
+            const [type, token, ...rest] = authorization.split(" ");
             if (!token || type.toLowerCase() !== 'bearer' || rest.length) {
                 return fail(res, "error.api.auth.jwt.invalid");
             }
@@ -321,6 +335,14 @@ export const runAPI = async (express, app, __dirname, isPrimary = true) => {
     app.get('/itunnel', itunnelHandler);
 
     app.get('/', (_, res) => {
+        res.type('json');
+        res.status(200).send(JSON.stringify({
+            status: 'success',
+            message: 'Hello, world!'
+        }));
+    })
+
+    app.get('/api-status', (_, res) => {
         res.type('json');
         res.status(200).send(serverInfo);
     })