Method SyncUserInbounds

internal/panel/handler.go:571–622

SyncUserInbounds reconciles a user's inbound assignments. Exported for payment webhook use.

(userID string, selectedInboundIDs []string)

// SyncUserInbounds reconciles a user's inbound assignments. Exported for payment webhook use.
func (h *Handler) SyncUserInbounds(userID string, selectedInboundIDs []string) ([]string, error) {
	wantedInbounds := make(map[string]inbounds.Inbound)
	for _, ibID := range selectedInboundIDs {
		ib, err := h.ibStore.GetInbound(ibID)
		if err != nil {
			continue
		}
		wantedInbounds[ibID] = ib
	}
	existing, err := h.userStore.ListDirectUserInboundsByUser(userID)
	if err != nil {
		return nil, err
	}
	existingByInbound := make(map[string]users.UserInbound, len(existing))
	for _, acc := range existing {
		existingByInbound[acc.InboundID] = acc
	}
	changedNodeIDs := make(map[string]struct{})
	for ibID, ib := range wantedInbounds {
		if _, ok := existingByInbound[ibID]; !ok {
			secret := panelRandomToken(12)
			if ib.Protocol == "shadowsocks" && strings.HasPrefix(ib.Method, "2022-") {
				secret = generateSSPassword(ib.Method)
			}
			acc := users.UserInbound{
				ID:        idgen.NextString(),
				UserID:    userID,
				InboundID: ibID,
				NodeID:    ib.NodeID,
				UUID:      panelRandomUUID(),
				Secret:    secret,
			}
			if _, err := h.userStore.UpsertUserInbound(acc); err != nil {
				return nil, err
			}
			changedNodeIDs[ib.NodeID] = struct{}{}
		}
	}
	for ibID, acc := range existingByInbound {
		if _, wanted := wantedInbounds[ibID]; !wanted {
			if err := h.userStore.DeleteUserInbound(acc.ID); err != nil {
				return nil, err
			}
			changedNodeIDs[acc.NodeID] = struct{}{}
		}
	}
	affected := make([]string, 0, len(changedNodeIDs))
	for id := range changedNodeIDs {
		affected = append(affected, id)
	}
	return affected, nil
}

func collectUserIDs(accesses []users.UserInbound) []string {
	seen := make(map[string]struct{})