ginuerzh ea3ca94e53 fix(handler): move auth before request validation so probe resistance works (#875) ...

Probe resistance (probeResist=code:403) was always returning 400 Bad
Request instead of the configured status code because the
non-proxy-form request validation check (req.URL.Scheme != "http")
ran before Authenticate(). Browser/scanner probes send GET / HTTP/1.1
which has an empty URL scheme, so they were rejected at the validation
gate before probe resistance ever had a chance to respond.

Swap the order: run Authenticate() first so probe resistance can
intercept non-proxy-form probes with the configured decoy response.
Legitimate clients with correct credentials proceed to request
validation and routing as before.

2026-06-23 19:57:45 +08:00

..

auth_test.go

test(handler/http): add 25+ tests for probe resistance, MITM, bypass, and edge cases

2026-05-30 17:54:27 +08:00

auth.go

refactor(handler/http): extract Authenticator, SnifferBuilder, and normalizeRequest as testable units

2026-05-29 00:14:44 +08:00

connect_test.go

test(handler/http): add 25+ tests for probe resistance, MITM, bypass, and edge cases

2026-05-30 17:54:27 +08:00

connect.go

fix(handler/forward): split readTimeout from pipe idleTimeout to prevent 15s download abort

2026-05-31 17:05:21 +08:00

handler_test.go

test(handler/http): add 25+ tests for probe resistance, MITM, bypass, and edge cases

2026-05-30 17:54:27 +08:00

handler.go

fix(handler): move auth before request validation so probe resistance works (#875)

2026-06-23 19:57:45 +08:00

helpers_test.go

test(handler/http): add 25+ tests for probe resistance, MITM, bypass, and edge cases

2026-05-30 17:54:27 +08:00

metadata_test.go

test(handler/http): add 25+ tests for probe resistance, MITM, bypass, and edge cases

2026-05-30 17:54:27 +08:00

metadata.go

fix(handler/forward): split readTimeout from pipe idleTimeout to prevent 15s download abort

2026-05-31 17:05:21 +08:00

proxy_test.go

test(handler/http): add 25+ tests for probe resistance, MITM, bypass, and edge cases

2026-05-30 17:54:27 +08:00

proxy.go

refactor(handler/http): extract Authenticator, SnifferBuilder, and normalizeRequest as testable units

2026-05-29 00:14:44 +08:00

udp_test.go

refactor(handler/http): extract Authenticator, SnifferBuilder, and normalizeRequest as testable units

2026-05-29 00:14:44 +08:00

udp.go

refactor(handler/http): extract Authenticator, SnifferBuilder, and normalizeRequest as testable units

2026-05-29 00:14:44 +08:00

util_test.go

refactor(handler/http): extract Authenticator, SnifferBuilder, and normalizeRequest as testable units

2026-05-29 00:14:44 +08:00

util.go

refactor(handler/http): extract Authenticator, SnifferBuilder, and normalizeRequest as testable units

2026-05-29 00:14:44 +08:00

websocket_test.go

test(handler/http): add 25+ tests for probe resistance, MITM, bypass, and edge cases

2026-05-30 17:54:27 +08:00

websocket.go

fix: nil HTTP recorder ref in WebSocket goroutines, add tunnel loop detection

2026-06-01 18:28:01 +08:00