3x-ui

mirror of https://github.com/MHSanaei/3x-ui.git synced 2026-05-08 14:36:13 +00:00

Files

MHSanaei c394938f01 refactor(websocket): split controller into service + thin controller

Move per-connection lifecycle out of the controller and into a new
service.WebSocketService. The controller is now HTTP-layer only:
authenticate, validate origin, upgrade, and hand the connection off.

- web/service/websocket.go (new): owns the read/write pumps, hub
  registration, and connection lifetime. Pump constants are prefixed
  (wsWriteWait, wsPongWait, wsPingPeriod, wsClientReadLimit) to avoid
  collisions in the larger service package namespace.
- web/controller/websocket.go: trimmed to the upgrader, same-origin
  check, auth gate, and hand-off to the service.
- web/web.go: wires controller.NewWebSocketController(service.NewWebSocketService(hub)).

The hub package (web/websocket) stays as low-level fan-out
infrastructure. Behavior is unchanged — this is a structural cleanup
to align with the rest of the codebase's controller/service split.

Also includes a small range-int modernization in login_limiter_test.go
that gopls flagged.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-08 00:00:44 +02:00

api.go

Implement CSRF protection and security hardening across the application (#4179 )

2026-05-07 23:36:11 +02:00

base.go

docs: add comments for all functions

2025-09-20 09:35:50 +02:00

custom_geo.go

Add SSRF protection (#4044 )

2026-04-20 00:18:20 +02:00

inbound.go

ws/inbounds: realtime fixes + perf for 10k+ client inbounds (#4123 )