Method apiResetToken

internal/panel/handler.go:652–704

(w http.ResponseWriter, r *http.Request)

func (h *Handler) apiResetToken(w http.ResponseWriter, r *http.Request) {
	jsonErr := func(status int, msg string) {
		w.Header().Set("Content-Type", "application/json")
		w.WriteHeader(status)
		_, _ = fmt.Fprintf(w, `{"error":%q}`, msg)
	}
	token := r.URL.Query().Get("token")
	user, err := h.userStore.GetUserBySubToken(token)
	if err != nil {
		jsonErr(http.StatusNotFound, "user not found")
		return
	}
	user.SubToken = panelRandomToken(16)
	user.UUID = panelRandomUUID()
	user.Secret = panelRandomToken(16)
	if _, err := h.userStore.UpsertUser(user); err != nil {
		jsonErr(http.StatusInternalServerError, "failed to reset token")
		return
	}
	accesses, err := h.userStore.ListUserInboundsByUser(user.ID)
	if err != nil {
		jsonErr(http.StatusInternalServerError, "failed to list user inbounds")
		return
	}
	affectedNodeIDs := make(map[string]struct{})
	for _, acc := range accesses {
		ib, err := h.ibStore.GetInbound(acc.InboundID)
		if err != nil {
			continue
		}
		secret := panelRandomToken(12)
		if ib.Protocol == "shadowsocks" && strings.HasPrefix(ib.Method, "2022-") {
			secret = generateSSPassword(ib.Method)
		}
		acc.UUID = panelRandomUUID()
		acc.Secret = secret
		if _, err := h.userStore.UpsertUserInbound(acc); err != nil {
			jsonErr(http.StatusInternalServerError, "failed to reset inbound credentials")
			return
		}
		affectedNodeIDs[acc.NodeID] = struct{}{}
	}
	affected := make([]string, 0, len(affectedNodeIDs))
	for id := range affectedNodeIDs {
		affected = append(affected, id)
	}
	h.ApplyNodes(affected)
	w.Header().Set("Content-Type", "application/json")
	_ = json.NewEncoder(w).Encode(map[string]any{
		"token":   user.SubToken,
		"sub_url": subURL(r, user.SubToken),
	})
}