mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-10-04 13:12:07 +03:00
libmur-dev
ce221c33d0
* fix(sub): carry REALITY ML-KEM hint in VLESS links Keep raw share links in parity with Clash subscriptions for Xray 26.9.8+. Preserve the URI hint through Go and frontend imports, expose it in the outbound editor, and update the documentation tooling. * fix(link): accept REALITY ML-KEM boolean aliases * test(frontend): isolate Happ preset notifications * fix(link): keep the ML-KEM hint out of Xray REALITY settings support-x25519mlkem768 is a Mihomo reality-opts option; xray-core's REALITYConfig (infra/conf/transport_security.go) has no such field and its JSON loader drops unknown keys silently. The PR also stored it as realitySettings.supportX25519Mlkem768 in Xray outbounds (form switch, Go and TS link import, docs outbound builders) and as an inbound settings default that is stripped before Xray and read by no link generator. The outbound switch therefore did nothing, and imported links carried a dead key into the JSON subscription. The share-link hint itself stays: Go, frontend and docs still emit support-x25519mlkem768=true on VLESS REALITY links and drop it on a TLS host override. --------- Co-authored-by: libmur-dev <333915961+libmur-dev@users.noreply.github.com> Co-authored-by: MHSanaei <ho3ein.sanaei@gmail.com>
86 lines
2.9 KiB
TypeScript
86 lines
2.9 KiB
TypeScript
import { describe, it, expect } from 'vitest';
|
|
import {
|
|
generateX25519KeyPair,
|
|
isX25519Available,
|
|
randomShortId,
|
|
realityClientLink,
|
|
realityServerInbound,
|
|
type RealityConfig,
|
|
} from './reality';
|
|
import { base64UrlToBytes } from './base64';
|
|
import { parseLink } from './links';
|
|
|
|
describe('X25519 keygen', () => {
|
|
it('is available in this environment (Node 22+ / modern browser)', () => {
|
|
expect(isX25519Available()).toBe(true);
|
|
});
|
|
|
|
it('produces 32-byte base64url keys that differ', async () => {
|
|
const { privateKey, publicKey } = await generateX25519KeyPair();
|
|
expect(privateKey).not.toMatch(/[+/=]/);
|
|
expect(publicKey).not.toMatch(/[+/=]/);
|
|
expect(base64UrlToBytes(privateKey)).toHaveLength(32);
|
|
expect(base64UrlToBytes(publicKey)).toHaveLength(32);
|
|
expect(privateKey).not.toEqual(publicKey);
|
|
});
|
|
|
|
it('generates a fresh keypair each call', async () => {
|
|
const a = await generateX25519KeyPair();
|
|
const b = await generateX25519KeyPair();
|
|
expect(a.privateKey).not.toEqual(b.privateKey);
|
|
});
|
|
});
|
|
|
|
describe('randomShortId', () => {
|
|
it('returns lowercase hex of the requested byte length', () => {
|
|
const id = randomShortId(4);
|
|
expect(id).toMatch(/^[0-9a-f]{8}$/);
|
|
});
|
|
});
|
|
|
|
const CONFIG: RealityConfig = {
|
|
address: 'example.com',
|
|
port: 443,
|
|
uuid: '11111111-2222-3333-4444-555555555555',
|
|
dest: 'www.microsoft.com:443',
|
|
serverNames: ['www.microsoft.com'],
|
|
shortIds: ['ab12'],
|
|
privateKey: 'PRIV',
|
|
publicKey: 'PUB',
|
|
fingerprint: 'chrome',
|
|
spiderX: '/',
|
|
flow: 'xtls-rprx-vision',
|
|
supportX25519Mlkem768: true,
|
|
};
|
|
|
|
describe('realityClientLink', () => {
|
|
it('builds a parseable vless link with the public REALITY params', () => {
|
|
const link = realityClientLink(CONFIG);
|
|
const parsed = parseLink(link);
|
|
expect(parsed.protocol).toBe('vless');
|
|
expect(parsed.credential).toBe(CONFIG.uuid);
|
|
expect(parsed.port).toBe(443);
|
|
expect(parsed.params.security).toBe('reality');
|
|
expect(parsed.params.pbk).toBe('PUB');
|
|
expect(parsed.params['support-x25519mlkem768']).toBe('true');
|
|
expect(parsed.params.sid).toBe('ab12');
|
|
expect(parsed.params.sni).toBe('www.microsoft.com');
|
|
expect(parsed.params.flow).toBe('xtls-rprx-vision');
|
|
// The private key must never appear in a client link.
|
|
expect(link).not.toContain('PRIV');
|
|
});
|
|
});
|
|
|
|
describe('realityServerInbound', () => {
|
|
it('produces a vless+reality inbound with the private key', () => {
|
|
const inbound = realityServerInbound(CONFIG) as {
|
|
protocol: string;
|
|
streamSettings: { security: string; realitySettings: { privateKey: string; dest: string } };
|
|
};
|
|
expect(inbound.protocol).toBe('vless');
|
|
expect(inbound.streamSettings.security).toBe('reality');
|
|
expect(inbound.streamSettings.realitySettings.privateKey).toBe('PRIV');
|
|
expect(inbound.streamSettings.realitySettings.dest).toBe('www.microsoft.com:443');
|
|
});
|
|
});
|