本地模拟 · 不连接 GitHub
允许添加 Star？
模拟为主页列出的 ${repositories.length} 个仓库添加 Star。这里不需要账号、密码或验证码，也不会修改真实 Star。
模拟允许并返回主页取消`);return;
+ }
+ if(path==='/api/stars/callback' && req.method==='GET'){
+ if(!session || !matches(url.searchParams.get('state'),session.state)){send(400,{error:'invalid_state'});return;}
+ if(session.busy){send(409,{error:'busy'});return;}
+ if(url.searchParams.has('error') || !url.searchParams.get('code')){forget(id);cookie('',0);redirect('denied');return;}
+ session.busy=true;
+ try{
+ let d;
+ if(demo)d={access_token:'synthetic-demo-token'};
+ else{
+ const r=await upstream('https://github.com/login/oauth/access_token',{method:'POST',headers:{Accept:'application/json','Content-Type':'application/x-www-form-urlencoded'},body:new URLSearchParams({client_id:clientId,client_secret:clientSecret,code:url.searchParams.get('code'),redirect_uri:callback,code_verifier:session.verifier})});
+ if(!r.ok)throw Error('exchange');d=await r.json();
+ }
+ if(!sessions.has(id)){redirect('expired');return;}
+ if(!d.access_token)throw Error('exchange');
+ session.token=d.access_token;session.ready=true;delete session.state;delete session.verifier;
+ session.expires=Math.min(session.expires,now()+(Number(d.expires_in)||900)*1000);
+ redirect('authorized');return;
+ }catch{forget(id);cookie('',0);redirect('error');return;}finally{session.busy=false;}
+ }
if(req.method!=='POST'){send(405,{error:'method'});return;}
if(req.headers.origin!==origin || req.headers['x-requested-with']!=='InferMatrixStars'){send(403,{error:'origin'});return;}
- for(const [key,s]of sessions)if(s.expires<=now()&&!s.busy)forget(key);
- const id=(req.headers.cookie||'').split(';').map(c=>c.trim()).find(c=>c.startsWith(cookieName+'='))?.slice(cookieName.length+1);
- let session=sessions.get(id);
- const cookie=(value,age)=>res.setHeader('Set-Cookie',`${cookieName}=${value}; HttpOnly; SameSite=Strict; Path=/; Max-Age=${age}${origin.startsWith('https:')?'; Secure':''}`);
if(path==='/api/stars/logout'){forget(id);cookie('',0);send(200,{ok:true});return;}
- if(!clientId){send(503,{error:'not_configured'});return;}
- try {
- if(path==='/api/stars/start'){
- if(session){send(409,{error:'session_exists'});return;}
- if(sessions.size>=100){send(429,{error:'busy'});return;}
- // Reserve capacity before awaiting GitHub, limiting concurrent anonymous starts.
- const key=randomBytes(32).toString('hex');
- session={expires:now()+15*60*1000,busy:true,done:new Set()};sessions.set(key,session);
- session.timer=setTimeout(()=>forget(key),15*60*1000);session.timer.unref?.();
- let d;
- try{d=await oauth('device/code',{client_id:clientId});}catch{forget(key);throw Error('upstream');}
- if(d.error || !d.device_code || !d.user_code){forget(key);send(502,{error:'authorization_unavailable'});return;}
- session.device=d.device_code;session.interval=Math.max(5,Number(d.interval)||5);session.next=now()+session.interval*1000;
- session.expires=now()+Math.min(900,Number(d.expires_in)||900)*1000;session.busy=false;
- cookie(key,900);send(200,{userCode:d.user_code,verificationUri:'https://github.com/login/device',interval:session.interval});return;
- }
- if(!session || session.expires<=now()){send(401,{error:'expired'});return;}
- if(session.busy){send(409,{error:'busy'});return;}
- if(path==='/api/stars/poll'){
- if(session.token){send(200,{authorized:true});return;}
- if(now()