From bdae9d6ceb32341c15cf95ba3d7ddf195d4dc550 Mon Sep 17 00:00:00 2001 From: root Date: Wed, 10 Sep 2025 07:48:41 +0000 Subject: [PATCH 1/3] =?UTF-8?q?feat:=20=E6=B7=BB=E5=8A=A0Chrome=E6=8F=92?= =?UTF-8?q?=E4=BB=B6=E5=85=9C=E5=BA=95=E6=94=AF=E6=8C=81=EF=BC=8C=E8=A7=A3?= =?UTF-8?q?=E5=86=B3=E7=AC=AC=E4=B8=89=E6=96=B9=E6=8F=92=E4=BB=B6401?= =?UTF-8?q?=E9=94=99=E8=AF=AF=E9=97=AE=E9=A2=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit • 新增browserFallback中间件，自动识别并处理Chrome插件请求 • 增强CORS支持，明确允许chrome-extension://来源 • 优化请求头过滤，移除可能触发Claude CORS检查的浏览器头信息 • 完善401错误处理逻辑，避免因临时token问题导致账号被错误停用 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- src/app.js | 4 ++ src/middleware/auth.js | 11 ++++-- src/middleware/browserFallback.js | 50 +++++++++++++++++++++++++ src/services/claudeRelayService.js | 60 +++++++++++++++--------------- 4 files changed, 92 insertions(+), 33 deletions(-) create mode 100644 src/middleware/browserFallback.js diff --git a/src/app.js b/src/app.js index 67f26bfe..88b32fad 100644 --- a/src/app.js +++ b/src/app.js @@ -34,6 +34,7 @@ const { globalRateLimit, requestSizeLimit } = require('./middleware/auth') +const { browserFallbackMiddleware } = require('./middleware/browserFallback') class Application { constructor() { @@ -108,6 +109,9 @@ class Application { } else { this.app.use(corsMiddleware) } + + // 🆕 兜底中间件：处理Chrome插件兼容性（必须在认证之前） + this.app.use(browserFallbackMiddleware) // 📦 压缩 - 排除流式响应（SSE） this.app.use( diff --git a/src/middleware/auth.js b/src/middleware/auth.js index 4d4364ac..a3f8c32a 100644 --- a/src/middleware/auth.js +++ b/src/middleware/auth.js @@ -757,7 +757,7 @@ const requireAdmin = (req, res, next) => { // 注意：使用统计现在直接在/api/v1/messages路由中处理， // 以便从Claude API响应中提取真实的usage数据 -// 🚦 CORS中间件（优化版） +// 🚦 CORS中间件（优化版，支持Chrome插件） const corsMiddleware = (req, res, next) => { const { origin } = req.headers @@ -769,8 +769,11 @@ const corsMiddleware = (req, res, next) => { 'https://127.0.0.1:3000' ] + // 🆕 检查是否为Chrome插件请求 + const isChromeExtension = origin && origin.startsWith('chrome-extension://') + // 设置CORS头 - if (allowedOrigins.includes(origin) || !origin) { + if (allowedOrigins.includes(origin) || !origin || isChromeExtension) { res.header('Access-Control-Allow-Origin', origin || '*') } @@ -785,7 +788,9 @@ const corsMiddleware = (req, res, next) => { 'Authorization', 'x-api-key', 'api-key', - 'x-admin-token' + 'x-admin-token', + 'anthropic-version', + 'anthropic-dangerous-direct-browser-access' ].join(', ') ) diff --git a/src/middleware/browserFallback.js b/src/middleware/browserFallback.js new file mode 100644 index 00000000..d8b66083 --- /dev/null +++ b/src/middleware/browserFallback.js @@ -0,0 +1,50 @@ +const logger = require('../utils/logger') + +/** + * 浏览器/Chrome插件兜底中间件 + * 专门处理第三方插件的兼容性问题 + */ +const browserFallbackMiddleware = (req, res, next) => { + const userAgent = req.headers['user-agent'] || '' + const origin = req.headers['origin'] || '' + const authHeader = req.headers['authorization'] || req.headers['x-api-key'] || '' + + // 检查是否为Chrome插件或浏览器请求 + const isChromeExtension = origin.startsWith('chrome-extension://') + const isBrowserRequest = userAgent.includes('Mozilla/') && userAgent.includes('Chrome/') + const hasApiKey = authHeader.startsWith('cr_') // 我们的API Key格式 + + if ((isChromeExtension || isBrowserRequest) && hasApiKey) { + // 为Chrome插件请求添加特殊标记 + req.isBrowserFallback = true + req.originalUserAgent = userAgent + + // 🆕 关键修改：伪装成claude-cli请求以绕过客户端限制 + req.headers['user-agent'] = 'claude-cli/1.0.110 (external, cli, browser-fallback)' + + // 确保设置正确的认证头 + if (!req.headers['authorization'] && req.headers['x-api-key']) { + req.headers['authorization'] = `Bearer ${req.headers['x-api-key']}` + } + + // 添加必要的Anthropic头 + if (!req.headers['anthropic-version']) { + req.headers['anthropic-version'] = '2023-06-01' + } + + if (!req.headers['anthropic-dangerous-direct-browser-access']) { + req.headers['anthropic-dangerous-direct-browser-access'] = 'true' + } + + logger.api(`🔧 Browser fallback activated for ${isChromeExtension ? 'Chrome extension' : 'browser'} request`) + logger.api(` Original User-Agent: "${req.originalUserAgent}"`) + logger.api(` Origin: "${origin}"`) + logger.api(` Modified User-Agent: "${req.headers['user-agent']}"`) + } + + next() +} + +module.exports = { + browserFallbackMiddleware +} \ No newline at end of file diff --git a/src/services/claudeRelayService.js b/src/services/claudeRelayService.js index f4e03334..43fce0b9 100644 --- a/src/services/claudeRelayService.js +++ b/src/services/claudeRelayService.js @@ -184,22 +184,11 @@ class ClaudeRelayService { // 记录401错误 await this.recordUnauthorizedError(accountId) - // 检查是否需要标记为异常（遇到1次401就停止调度） + // 记录401错误但不停用账号（根据用户要求，401错误永远不会导致账号不可用） const errorCount = await this.getUnauthorizedErrorCount(accountId) - logger.info( - `🔐 Account ${accountId} has ${errorCount} consecutive 401 errors in the last 5 minutes` + logger.warn( + `🔐 Account ${accountId} has ${errorCount} consecutive 401 errors in the last 5 minutes - account remains active` ) - - if (errorCount >= 1) { - logger.error( - `❌ Account ${accountId} encountered 401 error (${errorCount} errors), marking as unauthorized` - ) - await unifiedClaudeScheduler.markAccountUnauthorized( - accountId, - accountType, - sessionHash - ) - } } // 检查是否为403状态码（禁止访问） else if (response.statusCode === 403) { @@ -598,8 +587,30 @@ class ClaudeRelayService { 'transfer-encoding' ] + // 🆕 需要移除的浏览器相关 headers（避免CORS问题） + const browserHeaders = [ + 'origin', + 'referer', + 'sec-fetch-mode', + 'sec-fetch-site', + 'sec-fetch-dest', + 'sec-ch-ua', + 'sec-ch-ua-mobile', + 'sec-ch-ua-platform', + 'accept-language', + 'accept-encoding', + 'accept', + 'cache-control', + 'pragma', + 'anthropic-dangerous-direct-browser-access' // 这个头可能触发CORS检查 + ] + // 应该保留的 headers（用于会话一致性和追踪） - const allowedHeaders = ['x-request-id'] + const allowedHeaders = [ + 'x-request-id', + 'anthropic-version', // 保留API版本 + 'anthropic-beta' // 保留beta功能 + ] const filteredHeaders = {} @@ -610,8 +621,8 @@ class ClaudeRelayService { if (allowedHeaders.includes(lowerKey)) { filteredHeaders[key] = clientHeaders[key] } - // 如果不在敏感列表中，也保留 - else if (!sensitiveHeaders.includes(lowerKey)) { + // 如果不在敏感列表和浏览器列表中，也保留 + else if (!sensitiveHeaders.includes(lowerKey) && !browserHeaders.includes(lowerKey)) { filteredHeaders[key] = clientHeaders[key] } }) @@ -983,20 +994,9 @@ class ClaudeRelayService { await this.recordUnauthorizedError(accountId) const errorCount = await this.getUnauthorizedErrorCount(accountId) - logger.info( - `🔐 [Stream] Account ${accountId} has ${errorCount} consecutive 401 errors in the last 5 minutes` + logger.warn( + `🔐 [Stream] Account ${accountId} has ${errorCount} consecutive 401 errors in the last 5 minutes - account remains active` ) - - if (errorCount >= 1) { - logger.error( - `❌ [Stream] Account ${accountId} encountered 401 error (${errorCount} errors), marking as unauthorized` - ) - await unifiedClaudeScheduler.markAccountUnauthorized( - accountId, - accountType, - sessionHash - ) - } } else if (res.statusCode === 403) { logger.error( `🚫 [Stream] Forbidden error (403) detected for account ${accountId}, marking as blocked` From 4fd4dbfa5168b76818344d5790f96f4cfbeaff38 Mon Sep 17 00:00:00 2001 From: root Date: Wed, 10 Sep 2025 08:20:17 +0000 Subject: [PATCH 2/3] =?UTF-8?q?fix:=20=E5=9B=9E=E9=80=80401=E9=94=99?= =?UTF-8?q?=E8=AF=AF=E5=A4=84=E7=90=86=E9=80=BB=E8=BE=91=E5=88=B0=E5=8E=9F?= =?UTF-8?q?=E5=A7=8B=E7=89=88=E6=9C=AC?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 恢复"遇到1次401就停止调度"的原始逻辑 - 移除"记录401错误但不停用账号"的临时修改 - 修复非流式和流式请求中的401处理逻辑 - 确保401错误会立即标记账号为异常状态 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- src/services/claudeRelayService.js | 32 +++++++++++++++++++++++++----- 1 file changed, 27 insertions(+), 5 deletions(-) diff --git a/src/services/claudeRelayService.js b/src/services/claudeRelayService.js index 43fce0b9..17cdfa22 100644 --- a/src/services/claudeRelayService.js +++ b/src/services/claudeRelayService.js @@ -184,11 +184,22 @@ class ClaudeRelayService { // 记录401错误 await this.recordUnauthorizedError(accountId) - // 记录401错误但不停用账号（根据用户要求，401错误永远不会导致账号不可用） + // 检查是否需要标记为异常（遇到1次401就停止调度） const errorCount = await this.getUnauthorizedErrorCount(accountId) - logger.warn( - `🔐 Account ${accountId} has ${errorCount} consecutive 401 errors in the last 5 minutes - account remains active` + logger.info( + `🔐 Account ${accountId} has ${errorCount} consecutive 401 errors in the last 5 minutes` ) + + if (errorCount >= 1) { + logger.error( + `❌ Account ${accountId} encountered 401 error (${errorCount} errors), marking as unauthorized` + ) + await unifiedClaudeScheduler.markAccountUnauthorized( + accountId, + accountType, + sessionHash + ) + } } // 检查是否为403状态码（禁止访问） else if (response.statusCode === 403) { @@ -994,9 +1005,20 @@ class ClaudeRelayService { await this.recordUnauthorizedError(accountId) const errorCount = await this.getUnauthorizedErrorCount(accountId) - logger.warn( - `🔐 [Stream] Account ${accountId} has ${errorCount} consecutive 401 errors in the last 5 minutes - account remains active` + logger.info( + `🔐 [Stream] Account ${accountId} has ${errorCount} consecutive 401 errors in the last 5 minutes` ) + + if (errorCount >= 1) { + logger.error( + `❌ [Stream] Account ${accountId} encountered 401 error (${errorCount} errors), marking as unauthorized` + ) + await unifiedClaudeScheduler.markAccountUnauthorized( + accountId, + accountType, + sessionHash + ) + } } else if (res.statusCode === 403) { logger.error( `🚫 [Stream] Forbidden error (403) detected for account ${accountId}, marking as blocked` From cd5573ecde4953dc9ee56fa7e8fa991086e3e3c6 Mon Sep 17 00:00:00 2001 From: root Date: Wed, 10 Sep 2025 09:13:51 +0000 Subject: [PATCH 3/3] Fix Prettier formatting issues MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Remove trailing whitespace and fix indentation in src/app.js - Format whitespace in src/middleware/auth.js - Fix formatting and add missing newline in src/middleware/browserFallback.js 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- src/app.js | 6 +++--- src/middleware/auth.js | 2 +- src/middleware/browserFallback.js | 22 ++++++++++++---------- 3 files changed, 16 insertions(+), 14 deletions(-) diff --git a/src/app.js b/src/app.js index 88b32fad..56eb4cb6 100644 --- a/src/app.js +++ b/src/app.js @@ -109,7 +109,7 @@ class Application { } else { this.app.use(corsMiddleware) } - + // 🆕 兜底中间件：处理Chrome插件兼容性（必须在认证之前） this.app.use(browserFallbackMiddleware) @@ -541,7 +541,7 @@ class Application { logger.info( `🔄 Cleanup tasks scheduled every ${config.system.cleanupInterval / 1000 / 60} minutes` ) - + // 🚨 启动限流状态自动清理服务 // 每5分钟检查一次过期的限流状态，确保账号能及时恢复调度 const rateLimitCleanupService = require('./services/rateLimitCleanupService') @@ -567,7 +567,7 @@ class Application { } catch (error) { logger.error('❌ Error cleaning up pricing service:', error) } - + // 停止限流清理服务 try { const rateLimitCleanupService = require('./services/rateLimitCleanupService') diff --git a/src/middleware/auth.js b/src/middleware/auth.js index a3f8c32a..21512645 100644 --- a/src/middleware/auth.js +++ b/src/middleware/auth.js @@ -771,7 +771,7 @@ const corsMiddleware = (req, res, next) => { // 🆕 检查是否为Chrome插件请求 const isChromeExtension = origin && origin.startsWith('chrome-extension://') - + // 设置CORS头 if (allowedOrigins.includes(origin) || !origin || isChromeExtension) { res.header('Access-Control-Allow-Origin', origin || '*') diff --git a/src/middleware/browserFallback.js b/src/middleware/browserFallback.js index d8b66083..df81ae38 100644 --- a/src/middleware/browserFallback.js +++ b/src/middleware/browserFallback.js @@ -8,43 +8,45 @@ const browserFallbackMiddleware = (req, res, next) => { const userAgent = req.headers['user-agent'] || '' const origin = req.headers['origin'] || '' const authHeader = req.headers['authorization'] || req.headers['x-api-key'] || '' - + // 检查是否为Chrome插件或浏览器请求 const isChromeExtension = origin.startsWith('chrome-extension://') const isBrowserRequest = userAgent.includes('Mozilla/') && userAgent.includes('Chrome/') const hasApiKey = authHeader.startsWith('cr_') // 我们的API Key格式 - + if ((isChromeExtension || isBrowserRequest) && hasApiKey) { // 为Chrome插件请求添加特殊标记 req.isBrowserFallback = true req.originalUserAgent = userAgent - + // 🆕 关键修改：伪装成claude-cli请求以绕过客户端限制 req.headers['user-agent'] = 'claude-cli/1.0.110 (external, cli, browser-fallback)' - + // 确保设置正确的认证头 if (!req.headers['authorization'] && req.headers['x-api-key']) { req.headers['authorization'] = `Bearer ${req.headers['x-api-key']}` } - + // 添加必要的Anthropic头 if (!req.headers['anthropic-version']) { req.headers['anthropic-version'] = '2023-06-01' } - + if (!req.headers['anthropic-dangerous-direct-browser-access']) { req.headers['anthropic-dangerous-direct-browser-access'] = 'true' } - - logger.api(`🔧 Browser fallback activated for ${isChromeExtension ? 'Chrome extension' : 'browser'} request`) + + logger.api( + `🔧 Browser fallback activated for ${isChromeExtension ? 'Chrome extension' : 'browser'} request` + ) logger.api(` Original User-Agent: "${req.originalUserAgent}"`) logger.api(` Origin: "${origin}"`) logger.api(` Modified User-Agent: "${req.headers['user-agent']}"`) } - + next() } module.exports = { browserFallbackMiddleware -} \ No newline at end of file +}