1
export default {
2
  async fetch(request, env) {
3
    const url = new URL(request.url);
4
    const pathname = url.pathname;
5

6
    const referer = request.headers.get('Referer') || '';
7
    const allowedDomains = ['refact.cc', 'www.refact.cc', 'xlog.app', 'refact.xlog.app', 'localhost'];
8

9
    // -----------------------------
10
    // ✅ CORS 预检
11
    // -----------------------------
12
    if (request.method === 'OPTIONS') {
13
      return new Response(null, {
14
        status: 204,
15
        headers: {
16
          'Access-Control-Allow-Origin': '*',
17
          'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
18
          'Access-Control-Allow-Headers': 'Content-Type, Authorization',
19
          'Access-Control-Max-Age': '86400'
20
        }
21
      });
22
    }
23

24
    const corsHeaders = {
25
      'Access-Control-Allow-Origin': '*',
26
      'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
27
      'Access-Control-Allow-Headers': 'Content-Type, Authorization'
28
    };
29

30
    // -----------------------------
31
    // ✅ POST 上传（使用 Token 校验）
32
    // -----------------------------
33
    if (request.method === 'POST' && pathname === '/upload') {
34
      try {
35
        const auth = request.headers.get('Authorization');
36
        if (!auth || auth !== `Bearer ${env.UPLOAD_TOKEN}`) {
37
          return new Response(
38
            JSON.stringify({ error: 'Invalid upload token' }),
39
            { status: 403, headers: { 'Content-Type': 'application/json', ...corsHeaders } }
40
          );
41
        }
42

43
        const formData = await request.formData();
44
        const file = formData.get('file');
45

46
        if (!file) {
47
          return new Response(
48
            JSON.stringify({ error: 'No file uploaded' }),
49
            { status: 400, headers: { 'Content-Type': 'application/json', ...corsHeaders } }
50
          );
51
        }
52

53
        // 1. 获取 URL 参数 ?path=xxx
54
        const pathType = url.searchParams.get('path');
55

56
        // 2. 生成基础随机文件名
57
        const ext = file.name.substring(file.name.lastIndexOf('.')) || '';
58
        const uniqueName = `${Date.now()}-${Math.random().toString(36).slice(2)}${ext}`;
59

60
        // 3. 根据参数决定最终路径
61
        let filename;
62
        if (pathType === 'root') {
63
          // 如果参数是 root，直接放在根目录 (Admin 上传)
64
          filename = uniqueName;
65
        } else {
66
          // 默认情况，放在 comment 文件夹下 (Waline 评论)
67
          filename = `comment/${uniqueName}`;
68
        }
69

70
        const buffer = await file.arrayBuffer();
71

72
        await env.MY_BUCKET.put(filename, buffer, {
73
          httpMetadata: { contentType: file.type }
74
        });
75

76
        return new Response(
77
          JSON.stringify({ url: `https://img.refact.cc/${filename}` }),
78
          { status: 200, headers: { 'Content-Type': 'application/json', ...corsHeaders } }
79
        );
80
      } catch (err) {
81
        return new Response(
82
          JSON.stringify({ error: err.message }),
83
          { status: 500, headers: { 'Content-Type': 'application/json', ...corsHeaders } }
84
        );
85
      }
86
    }
87

88
    // -----------------------------
89
    // ✅ GET 图片（Referer 防盗链）
90
    // -----------------------------
91
    if (request.method === 'GET') {
92
      let allowed = false;
93

94
      // 如果路径以 /base/ 开头，直接允许，不检查 Referer
95
      if (pathname.startsWith('/base/')) {
96
        allowed = true;
97
      }
98
      else {
99
        // 否则，执行常规的 Referer 检查
100
        for (const domain of allowedDomains) {
101
          if (referer.includes(domain)) {
102
            allowed = true;
103
            break;
104
          }
105
        }
106
      }
107

108

109
      if (!allowed) {
110
        // 如果想允许直接浏览器访问（无 Referer），可以把下面的注释打开
111
        // if (!referer) allowed = true;
112

113
        if (!allowed) {
114
          const warning = await env.MY_BUCKET.get('hotlink-warning.png');
115
          if (warning) {
116
            return new Response(warning.body, {
117
              status: 200,
118
              headers: {
119
                'Content-Type': 'image/png',
120
                'Cache-Control': 'public, max-age=3600',
121
                'X-Robots-Tag': 'noindex'
122
              }
123
            });
124
          }
125
          return new Response('Hotlinking not allowed', {
126
            status: 403,
127
            headers: { 'Content-Type': 'text/plain', 'X-Robots-Tag': 'noindex' }
128
          });
129
        }
130
      }
131

132
      const key = pathname.slice(1);
133
      if (!key) return new Response('Bad Request', { status: 400 });
134

135
      const object = await env.MY_BUCKET.get(key);
136
      if (!object) return new Response('Not Found', { status: 404 });
137

138
      const headers = new Headers();
139
      object.writeHttpMetadata(headers);
140
      headers.set('etag', object.httpEtag);
141
      headers.set('Cache-Control', 'public, max-age=31536000, immutable');
142
      headers.set('Access-Control-Allow-Origin', '*');
143

144
      return new Response(object.body, { status: 200, headers });
145
    }
146

147
    return new Response('Method Not Allowed', { status: 405 });
148
  }
149
};

1
<div id="waline"></div>
2

3
<link
4
  rel="stylesheet"
5
  href="https://unpkg.com/@waline/client@v3/dist/waline.css"
6
/>
7

8
<style is:global>
9
  /* 去掉 Waline 所有圆角 */
10
  #waline .wl-editor,
11
  #waline .wl-input,
12
  #waline span.wl-badge,
13
  #waline .wl-btn,
14
  #waline .wl-comment,
15
  #waline .wl-card,
16
  #waline .wl-panel,
17
  #waline .wl-header,
18
  #waline .wl-gif-popup,
19
  #waline .wl-emoji-popup,
20
  #waline .wl-footer {
21
    border-radius: 0 !important;
22
    font-family: 'ShangguSansSC Variable', system-ui, -apple-system, sans-serif !important;
23
  }
24

25
  .wl-content,
26
  .wl-content * {
27
    white-space: normal !important;
28
    word-break: break-word !important;
29
    overflow-wrap: anywhere !important;
30
  }
31

32
  /* 浅色模式下的颜色设置 */
33
  #waline {
34
    --waline-theme-color: #000000 !important;
35
    --waline-active-color: #dc2626 !important;
36
    /* 设置字体 */
37
    --waline-font-size: 1rem !important;
38
    --waline-font-family: 'Onest Variable', 'Geist Variable', 'ShangguSansSC Variable', system-ui, -apple-system, sans-serif !important;
39
  }
40

41
  /* 深色模式下的颜色和背景设置 */
42
  html.dark #waline {
43
    --waline-theme-color: #ffffff !important;
44
    --waline-active-color: #dc2626 !important;
45
  }
46

47
  html.dark #waline .wl-panel {
48
    --waline-bgcolor: #101018 !important;
49
    background-color: #101018 !important;
50
  }
51

52
  /* 禁用输入框获得焦点时的样式变化 */
53
  #waline .wl-editor:focus,
54
  #waline .wl-editor:focus-within,
55
  #waline .wl-input:focus {
56
    background-color: var(--waline-bgcolor) !important;
57
    box-shadow: none !important;
58
    outline: none !important;
59
  }
60
</style>
61

62
<script src="https://unpkg.com/@waline/client@v3/dist/waline.umd.js" defer></script>
63
<script>
64
function loadWaline() {
65
  const container = document.querySelector('#waline');
66
  if (!container) return; // 容器不存在就不初始化
67

68
  const w = (window as any).Waline;
69
  if (!w) return;
70

71
  // 如果已有实例，先安全销毁
72
  const oldInstance = (window as any).__walineInstance;
73
  if (oldInstance && typeof oldInstance.destroy === 'function') {
74
    try {
75
      // 只有当挂载点还在 DOM 中时才销毁
76
      if (container.contains(container.firstChild) || container.childNodes.length > 0) {
77
        oldInstance.destroy();
78
      }
79
    } catch (e) {
80
      console.warn('Waline destroy failed:', e);
81
    }
82
  }
83

84
  // 重新初始化并保存实例
85
  (window as any).__walineInstance = w.init({
86
    el: container,
87
    serverURL: 'https://waline.refact.cc/',
88
    path: location.pathname.replace(/\/$/, ''),
89
    lang: 'zh-CN',
90
    pageview: true,
91
    dark: 'html.dark',
92
    requiredMeta: ['nick', 'mail'],
93
    locale: { placeholder: '写点什么吧…' }
94
  });
95
}
96

97

98
  // 首次加载
99
  window.addEventListener('DOMContentLoaded', loadWaline);
100

101
  // PJAX 完成后
102
  document.addEventListener('pjax:complete', loadWaline);
103

104
  // Astro View Transitions 完成后
105
  document.addEventListener('astro:page-load', loadWaline);
106
</script>