fix(fix3): runtime env hardening and public endpoint source-of-truth

apps/frontend/src/api/hysteria2/types.ts

@@ -6,12 +6,10 @@ export interface Hysteria2KickDto {
 export interface Hysteria2SubscribeUrlDto {
   accountId: number;
   protocol: string;
-  host: string;
 }
 
 export interface Hysteria2UrlDto {
   accountId: number;
-  hostname: string;
 }
 
 export interface Hysteria2SubscribeVo {

apps/frontend/src/types/env.d.ts

@@ -9,8 +9,6 @@ declare module "*.vue" {
 
 // TypeScript-подсказки для переменных окружения
 interface ImportMetaEnv {
-  VITE_APP_PORT: string;
-  VITE_APP_BASE_API: string;
 }
 
 interface ImportMeta {

apps/frontend/src/utils/request.ts

@@ -2,9 +2,10 @@ import axios, { InternalAxiosRequestConfig, AxiosResponse } from "axios";
 import { useAccountStoreHook } from "@/store/modules/account";
 
 const dynamicBase = (window as any).__dynamic_base__ || "";
+const API_BASE = "/hui";
 // Создание axios instance
 const service = axios.create({
-  baseURL: `${dynamicBase}${import.meta.env.VITE_APP_BASE_API}`,
+  baseURL: `${dynamicBase}${API_BASE}`,
   timeout: 50000,
   headers: { "Content-Type": "application/json;charset=utf-8" },
 });

apps/frontend/src/views/account/list/index.vue

@@ -906,7 +906,6 @@ const handleSubscribe = async (row: { [key: string]: any }) => {
     const dto: Hysteria2SubscribeUrlDto = {
       accountId: row.id,
       protocol: window.location.protocol,
-      host: window.location.host,
     };
     const { data } = await hysteria2SubscribeUrlApi(dto);
     copy(data.url);
@@ -920,7 +919,6 @@ const handleNodeUrl = async (row: { [key: string]: any }) => {
   try {
     const dto: Hysteria2UrlDto = {
       accountId: row.id,
-      hostname: window.location.hostname,
     };
     const { data } = await hysteria2UrlApi(dto);
     copy(data.url);
@@ -934,7 +932,6 @@ const handleQrCode = async (row: { [key: string]: any }) => {
   try {
     const dto: Hysteria2UrlDto = {
       accountId: row.id,
-      hostname: window.location.hostname,
     };
     const { data } = await hysteria2UrlApi(dto);
     state.qrCodeSrc = "data:image/png;base64," + data.qrCode;

apps/frontend/src/views/info/account/index.vue

@@ -204,7 +204,6 @@ const handleSubscribe = async () => {
     const dto: Hysteria2SubscribeUrlDto = {
       accountId: accountStore.id,
       protocol: window.location.protocol,
-      host: window.location.host,
     };
     const { data } = await hysteria2SubscribeUrlApi(dto);
     copy(data.url);
@@ -219,7 +218,6 @@ const handleSubscribeQrCode = async () => {
     const dto: Hysteria2SubscribeUrlDto = {
       accountId: accountStore.id,
       protocol: window.location.protocol,
-      host: window.location.host,
     };
     const { data } = await hysteria2SubscribeUrlApi(dto);
     state.qrCodeSrc = "data:image/png;base64," + data.qrCode;
@@ -233,7 +231,6 @@ const handleNodeUrl = async () => {
   try {
     const dto: Hysteria2UrlDto = {
       accountId: accountStore.id,
-      hostname: window.location.hostname,
     };
     const { data } = await hysteria2UrlApi(dto);
     copy(data.url);
@@ -247,7 +244,6 @@ const handleUrlQrCode = async () => {
   try {
     const dto: Hysteria2UrlDto = {
       accountId: accountStore.id,
-      hostname: window.location.hostname,
     };
     const { data } = await hysteria2UrlApi(dto);
     state.qrCodeSrc = "data:image/png;base64," + data.qrCode;

apps/frontend/vite.config.ts

@@ -1,6 +1,6 @@
 import vue from "@vitejs/plugin-vue";
 
-import { ConfigEnv, defineConfig, loadEnv, UserConfig } from "vite";
+import { defineConfig, UserConfig } from "vite";
 
 import AutoImport from "unplugin-auto-import/vite";
 import Components from "unplugin-vue-components/vite";
@@ -20,9 +20,10 @@ const pathSrc = path.resolve(__dirname, "src");
 // eslint-disable-next-line no-control-regex
 const INVALID_CHAR_REGEX = /[\u0000-\u001F"#$&*+,:;<=>?[\]^`{|}\u007F]/g;
 const DRIVE_LETTER_REGEX = /^[a-z]:/i;
+const DEV_SERVER_PORT = 8080;
+const API_BASE = "/hui";
 
-export default defineConfig(({ mode }: ConfigEnv): UserConfig => {
-  const env = loadEnv(mode, process.cwd());
+export default defineConfig((): UserConfig => {
   return {
     base: "/",
     resolve: {
@@ -44,11 +45,11 @@ export default defineConfig(({ mode }: ConfigEnv): UserConfig => {
     },
     server: {
       host: "0.0.0.0",
-      port: Number(env.VITE_APP_PORT),
+      port: DEV_SERVER_PORT,
       open: true, // Automatically open browser on start
       proxy: {
         // Reverse proxy for CORS in development
-        [env.VITE_APP_BASE_API]: {
+        [API_BASE]: {
           target: "http://127.0.0.1:8081",
           changeOrigin: true,
         },