update 2026-06-24 22:17:35

luci-app-passwall/luasrc/model/cbi/passwall/client/type/hysteria2.lua

@@ -49,6 +49,12 @@ o.rewrite_option = o.option
 o = s:option(Value, _n("realm_url"), translate("Realm URL"), translate("Example:") .. "realm://public@realm.hy2.io/your-realm-name")
 o.rewrite_option = o.option
 o:depends({ [_n("realms")] = "1" })
+o.validate = function(self, value)
+	value = api.trim(value)
+	local realm = api.parse_realm_uri(value)
+	if realm then return value end
+	return nil, translate("Invalid Realm URL.")
+end
 
 o = s:option(DynamicList, _n("realm_stun"), translate("Realm STUN"))
 o.default = { "stun.sip.us:3478", "stun.nextcloud.com:3478", "global.stun.twilio.com:3478" }

luci-app-passwall/luasrc/model/cbi/passwall/client/type/ray.lua

@@ -351,6 +351,12 @@ end
 
 o = s:option(Value, _n("hysteria2_realm_url"), translate("Realm URL"), translate("Example:") .. "realm://public@realm.hy2.io/your-realm-name")
 o:depends({ [_n("hysteria2_realms")] = "1" })
+o.validate = function(self, value)
+	value = api.trim(value)
+	local realm = api.parse_realm_uri(value)
+	if realm then return value end
+	return nil, translate("Invalid Realm URL.")
+end
 
 o = s:option(DynamicList, _n("hysteria2_realm_stun"), translate("Realm STUN"))
 o.default = { "stun.sip.us:3478", "stun.nextcloud.com:3478", "global.stun.twilio.com:3478" }

luci-app-passwall/luasrc/model/cbi/passwall/client/type/sing-box.lua

@@ -375,6 +375,12 @@ if singbox_tags:find("with_quic") then
 
 	o = s:option(Value, _n("hysteria2_realm_url"), translate("Realm URL"), translate("Example:") .. "realm://public@realm.hy2.io/your-realm-name")
 	o:depends({ [_n("hysteria2_realms")] = "1" })
+	o.validate = function(self, value)
+		value = api.trim(value)
+		local realm = api.parse_realm_uri(value)
+		if realm then return value end
+		return nil, translate("Invalid Realm URL.")
+	end
 
 	o = s:option(DynamicList, _n("hysteria2_realm_stun"), translate("Realm STUN"))
 	o.default = { "stun.sip.us:3478", "stun.nextcloud.com:3478", "global.stun.twilio.com:3478" }

luci-app-passwall/luasrc/model/cbi/passwall/server/type/hysteria2.lua

@@ -36,6 +36,12 @@ o:depends({ [_n("custom")] = false })
 o = s:option(Value, _n("realm_url"), translate("Realm URL"), translate("Example:") .. "realm://public@realm.hy2.io/your-realm-name")
 o.rewrite_option = o.option
 o:depends({ [_n("realms")] = "1" })
+o.validate = function(self, value)
+	value = api.trim(value)
+	local realm = api.parse_realm_uri(value)
+	if realm then return value end
+	return nil, translate("Invalid Realm URL.")
+end
 
 o = s:option(DynamicList, _n("realm_stun"), translate("Realm STUN"))
 o.default = { "stun.sip.us:3478", "stun.nextcloud.com:3478", "global.stun.twilio.com:3478" }

luci-app-passwall/luasrc/model/cbi/passwall/server/type/ray.lua

@@ -130,6 +130,12 @@ o:depends({ [_n("protocol")] = "hysteria2"})
 
 o = s:option(Value, _n("hysteria2_realm_url"), translate("Realm URL"), translate("Example:") .. "realm://public@realm.hy2.io/your-realm-name")
 o:depends({ [_n("hysteria2_realms")] = "1" })
+o.validate = function(self, value)
+	value = api.trim(value)
+	local realm = api.parse_realm_uri(value)
+	if realm then return value end
+	return nil, translate("Invalid Realm URL.")
+end
 
 o = s:option(DynamicList, _n("hysteria2_realm_stun"), translate("Realm STUN"))
 o.default = { "stun.sip.us:3478", "stun.nextcloud.com:3478", "global.stun.twilio.com:3478" }

luci-app-passwall/luasrc/model/cbi/passwall/server/type/sing-box.lua

@@ -163,6 +163,12 @@ if singbox_tags:find("with_quic") then
 
 	o = s:option(Value, _n("hysteria2_realm_url"), translate("Realm URL"), translate("Example:") .. "realm://public@realm.hy2.io/your-realm-name")
 	o:depends({ [_n("hysteria2_realms")] = "1" })
+	o.validate = function(self, value)
+		value = api.trim(value)
+		local realm = api.parse_realm_uri(value)
+		if realm then return value end
+		return nil, translate("Invalid Realm URL.")
+	end
 
 	o = s:option(DynamicList, _n("hysteria2_realm_stun"), translate("Realm STUN"))
 	o.default = { "stun.sip.us:3478", "stun.nextcloud.com:3478", "global.stun.twilio.com:3478" }

luci-app-passwall/luasrc/passwall/api.lua

@@ -1605,12 +1605,20 @@ function vps_domain_exclude(domain)
 end
 
 function parse_realm_uri(uri)
-	if type(uri) ~= "string" then return nil end
+	uri = trim(uri)
+	if uri == "" then return nil end
 	-- realm[+http]://token@server/realm_id?query
-	local scheme, token, server_url, realm_id, query = trim(uri):match("^(realm%+http|realm)://([^@]+)@([^/]+)/([^?]*)%??(.*)$")
-	if not scheme or not token or not server_url or not realm_id then return nil end
+	local scheme = (uri:match("^realm%+http://") and "realm+http") or (uri:match("^realm://") and "realm")
+	if not scheme then return nil end
+	uri = uri:gsub("^realm%+http://", ""):gsub("^realm://", "")
+	local token, server_url, realm_id, query = uri:match("^([^@]+)@([^/]+)/([^?]*)%??(.*)$")
+	if not token or not server_url or not realm_id then return nil end
 	realm_id = realm_id:gsub("/+$", "")
-	local address, port = server_url:match("^%[?([^%]]+)%]?:?(%d*)$")
+	local address, port = server_url:match("^%[([^%]]+)%]:(%d+)$") --ipv6:port
+	if not address then
+		address, port = server_url:match("^([^:]+):(%d+)$") --ipv4[domain]:port
+	end
+	address = address or server_url:match("^%[([^%]]+)%]$") or server_url
 	port = tonumber(port) or (scheme == "realm+http" and 80 or 443)
 	local realm = {
 		scheme = scheme,
@@ -1622,9 +1630,9 @@ function parse_realm_uri(uri)
 	}
 	-- 解析 query 中的 stun=
 	local stun_servers
-	for value in (query or ""):gmatch("[?&]?[Ss][Tt][Uu][Nn]=([^&]+)") do
-		if not stun_servers then stun_servers = {} end
-		stun_servers[#stun_servers + 1] = value
+	for v in (query or ""):gmatch("[Ss][Tt][Uu][Nn]=([^&]+)") do
+		stun_servers = stun_servers or {}
+		stun_servers[#stun_servers + 1] = v
 	end
 	realm.stun_servers = stun_servers
 	return realm

luci-app-passwall/po/zh-cn/passwall.po

@@ -2125,3 +2125,6 @@ msgstr "并发隧道连接数"
 
 msgid "Processing, please wait…"
 msgstr "正在处理，请稍候…"
+
+msgid "Invalid Realm URL."
+msgstr "Realm URL 不正确。"