update index.js

jeffrey0326 · Jun 16, 2024 · 07ace2b · 07ace2b
1 parent 91d16cd
commit 07ace2b
Showing 1 changed file with 121 additions and 120 deletions.
diff --git a/src/index.js b/src/index.js
@@ -1,6 +1,6 @@
 addEventListener("fetch", (event) => {
-  event.passThroughOnException();
-  event.respondWith(handleRequest(event.request));
+    event.passThroughOnException();
+    event.respondWith(handleRequest(event.request));
 });
 
 const dockerHub = "https://registry-1.docker.io";
@@ -19,138 +19,139 @@ const dockerHub = "https://registry-1.docker.io";
 //   "docker-staging.v2ray2022.tk": dockerHub,
 // };
 const routes = {
-  "${workername}.${username}.workers.dev/": "https://registry-1.docker.io",
+    "cloudflare-docker-proxy.hjie0326.workers.dev/": "https://registry-1.docker.io",
 };
+
 function routeByHosts(host) {
-  if (host in routes) {
-    return routes[host];
-  }
-  if (MODE == "debug") {
-    return TARGET_UPSTREAM;
-  }
-  return "";
+    if (host in routes) {
+        return routes[host];
+    }
+    if (MODE == "debug") {
+        return TARGET_UPSTREAM;
+    }
+    return "";
 }
 
 async function handleRequest(request) {
-  const url = new URL(request.url);
-  const upstream = routeByHosts(url.hostname);
-  if (upstream === "") {
-    return new Response(
-      JSON.stringify({
-        routes: routes,
-      }),
-      {
-        status: 404,
-      }
-    );
-  }
-  const isDockerHub = upstream == dockerHub;
-  const authorization = request.headers.get("Authorization");
-  if (url.pathname == "/v2/") {
-    const newUrl = new URL(upstream + "/v2/");
-    const headers = new Headers();
-    if (authorization) {
-      headers.set("Authorization", authorization);
-    }
-    // check if need to authenticate
-    const resp = await fetch(newUrl.toString(), {
-      method: "GET",
-      headers: headers,
-      redirect: "follow",
-    });
-    if (resp.status === 401) {
-      if (MODE == "debug") {
-        headers.set(
-          "Www-Authenticate",
-          `Bearer realm="http://${url.host}/v2/auth",service="cloudflare-docker-proxy"`
+    const url = new URL(request.url);
+    const upstream = routeByHosts(url.hostname);
+    if (upstream === "") {
+        return new Response(
+            JSON.stringify({
+                routes: routes,
+            }),
+            {
+                status: 404,
+            }
         );
-      } else {
-        headers.set(
-          "Www-Authenticate",
-          `Bearer realm="https://${url.hostname}/v2/auth",service="cloudflare-docker-proxy"`
-        );
-      }
-      return new Response(JSON.stringify({ message: "UNAUTHORIZED" }), {
-        status: 401,
-        headers: headers,
-      });
-    } else {
-      return resp;
     }
-  }
-  // get token
-  if (url.pathname == "/v2/auth") {
-    const newUrl = new URL(upstream + "/v2/");
-    const resp = await fetch(newUrl.toString(), {
-      method: "GET",
-      redirect: "follow",
-    });
-    if (resp.status !== 401) {
-      return resp;
+    const isDockerHub = upstream == dockerHub;
+    const authorization = request.headers.get("Authorization");
+    if (url.pathname == "/v2/") {
+        const newUrl = new URL(upstream + "/v2/");
+        const headers = new Headers();
+        if (authorization) {
+            headers.set("Authorization", authorization);
+        }
+        // check if need to authenticate
+        const resp = await fetch(newUrl.toString(), {
+            method: "GET",
+            headers: headers,
+            redirect: "follow",
+        });
+        if (resp.status === 401) {
+            if (MODE == "debug") {
+                headers.set(
+                    "Www-Authenticate",
+                    `Bearer realm="http://${url.host}/v2/auth",service="cloudflare-docker-proxy"`
+                );
+            } else {
+                headers.set(
+                    "Www-Authenticate",
+                    `Bearer realm="https://${url.hostname}/v2/auth",service="cloudflare-docker-proxy"`
+                );
+            }
+            return new Response(JSON.stringify({ message: "UNAUTHORIZED" }), {
+                status: 401,
+                headers: headers,
+            });
+        } else {
+            return resp;
+        }
     }
-    const authenticateStr = resp.headers.get("WWW-Authenticate");
-    if (authenticateStr === null) {
-      return resp;
+    // get token
+    if (url.pathname == "/v2/auth") {
+        const newUrl = new URL(upstream + "/v2/");
+        const resp = await fetch(newUrl.toString(), {
+            method: "GET",
+            redirect: "follow",
+        });
+        if (resp.status !== 401) {
+            return resp;
+        }
+        const authenticateStr = resp.headers.get("WWW-Authenticate");
+        if (authenticateStr === null) {
+            return resp;
+        }
+        const wwwAuthenticate = parseAuthenticate(authenticateStr);
+        let scope = url.searchParams.get("scope");
+        // autocomplete repo part into scope for DockerHub library images
+        // Example: repository:busybox:pull => repository:library/busybox:pull
+        if (scope && isDockerHub) {
+            let scopeParts = scope.split(":");
+            if (scopeParts.length == 3 && !scopeParts[1].includes("/")) {
+                scopeParts[1] = "library/" + scopeParts[1];
+                scope = scopeParts.join(":");
+            }
+        }
+        return await fetchToken(wwwAuthenticate, scope, authorization);
     }
-    const wwwAuthenticate = parseAuthenticate(authenticateStr);
-    let scope = url.searchParams.get("scope");
-    // autocomplete repo part into scope for DockerHub library images
-    // Example: repository:busybox:pull => repository:library/busybox:pull
-    if (scope && isDockerHub) {
-      let scopeParts = scope.split(":");
-      if (scopeParts.length == 3 && !scopeParts[1].includes("/")) {
-        scopeParts[1] = "library/" + scopeParts[1];
-        scope = scopeParts.join(":");
-      }
+    // redirect for DockerHub library images
+    // Example: /v2/busybox/manifests/latest => /v2/library/busybox/manifests/latest
+    if (isDockerHub) {
+        const pathParts = url.pathname.split("/");
+        if (pathParts.length == 5) {
+            pathParts.splice(2, 0, "library");
+            const redirectUrl = new URL(url);
+            redirectUrl.pathname = pathParts.join("/");
+            return Response.redirect(redirectUrl, 301);
+        }
     }
-    return await fetchToken(wwwAuthenticate, scope, authorization);
-  }
-  // redirect for DockerHub library images
-  // Example: /v2/busybox/manifests/latest => /v2/library/busybox/manifests/latest
-  if (isDockerHub) {
-    const pathParts = url.pathname.split("/");
-    if (pathParts.length == 5) {
-      pathParts.splice(2, 0, "library");
-      const redirectUrl = new URL(url);
-      redirectUrl.pathname = pathParts.join("/");
-      return Response.redirect(redirectUrl, 301);
-    }
-  }
-  // foward requests
-  const newUrl = new URL(upstream + url.pathname);
-  const newReq = new Request(newUrl, {
-    method: request.method,
-    headers: request.headers,
-    redirect: "follow",
-  });
-  return await fetch(newReq);
+    // foward requests
+    const newUrl = new URL(upstream + url.pathname);
+    const newReq = new Request(newUrl, {
+        method: request.method,
+        headers: request.headers,
+        redirect: "follow",
+    });
+    return await fetch(newReq);
 }
 
 function parseAuthenticate(authenticateStr) {
-  // sample: Bearer realm="https://auth.ipv6.docker.com/token",service="registry.docker.io"
-  // match strings after =" and before "
-  const re = /(?<=\=")(?:\\.|[^"\\])*(?=")/g;
-  const matches = authenticateStr.match(re);
-  if (matches == null || matches.length < 2) {
-    throw new Error(`invalid Www-Authenticate Header: ${authenticateStr}`);
-  }
-  return {
-    realm: matches[0],
-    service: matches[1],
-  };
+    // sample: Bearer realm="https://auth.ipv6.docker.com/token",service="registry.docker.io"
+    // match strings after =" and before "
+    const re = /(?<=\=")(?:\\.|[^"\\])*(?=")/g;
+    const matches = authenticateStr.match(re);
+    if (matches == null || matches.length < 2) {
+        throw new Error(`invalid Www-Authenticate Header: ${authenticateStr}`);
+    }
+    return {
+        realm: matches[0],
+        service: matches[1],
+    };
 }
 
 async function fetchToken(wwwAuthenticate, scope, authorization) {
-  const url = new URL(wwwAuthenticate.realm);
-  if (wwwAuthenticate.service.length) {
-    url.searchParams.set("service", wwwAuthenticate.service);
-  }
-  if (scope) {
-    url.searchParams.set("scope", scope);
-  }
-  headers = new Headers();
-  if (authorization) {
-    headers.set("Authorization", authorization);
-  }
-  return await fetch(url, { method: "GET", headers: headers });
+    const url = new URL(wwwAuthenticate.realm);
+    if (wwwAuthenticate.service.length) {
+        url.searchParams.set("service", wwwAuthenticate.service);
+    }
+    if (scope) {
+        url.searchParams.set("scope", scope);
+    }
+    headers = new Headers();
+    if (authorization) {
+        headers.set("Authorization", authorization);
+    }
+    return await fetch(url, { method: "GET", headers: headers });
 }