Files
Evil0ctal 8900a7c6fb fix: 修复大文件解密崩溃并将 XOR 解密移至服务端
问题修复:
- 修复解密超过 80MB 视频时页面崩溃的问题(issue #4 #6 #8)
- 根因:旧实现将整段视频经 CDP 管道传入浏览器做 XOR,base64 膨胀后超过
  Chromium DevTools 协议 100MB 单条消息上限,导致页面被关闭
- 将 XOR 解密从浏览器移至 Node.js 端,浏览器仅负责生成 128KB 密钥流,
  视频数据不再进入浏览器,文件大小不再受此限制

新功能:
- 新增 lib/decrypt.js 解密核心模块(decryptBuffer / assertMp4)
- 新增 decode_key 密钥流 LRU 缓存,命中后跳过浏览器 WASM 调用,
  可通过 KEYSTREAM_CACHE_MAX 环境变量配置上限(默认100)
- 新增 test/decrypt.test.js 单元测试,覆盖 120MB 大文件边界场景

其他:
- Dockerfile 补充拷贝 lib 目录,修复容器内模块缺失
- worker.html 的 decryptVideo 标注为已弃用(保留向后兼容)
- 更新 README 架构说明,补充大文件故障排除与「如何获取 decode_key」说明
- 版本号升级至 2.1.0
2026-06-09 22:33:15 -07:00

92 lines
2.2 KiB
Docker

# ==========================================
# Stage 1: Build Stage
# ==========================================
FROM node:18-bullseye-slim AS builder
WORKDIR /app
# Install system dependencies required for Playwright
RUN apt-get update && apt-get install -y \
wget \
ca-certificates \
&& rm -rf /var/lib/apt/lists/*
# Copy package files
COPY package*.json ./
# Install dependencies
RUN npm install
# Install Playwright Chromium browser and system dependencies
RUN npx playwright install chromium --with-deps
# ==========================================
# Stage 2: Production Stage
# ==========================================
FROM node:18-bullseye-slim
WORKDIR /app
# Install runtime dependencies for Chromium
RUN apt-get update && apt-get install -y \
# Chromium dependencies
libnss3 \
libnspr4 \
libatk1.0-0 \
libatk-bridge2.0-0 \
libcups2 \
libdrm2 \
libdbus-1-3 \
libxkbcommon0 \
libxcomposite1 \
libxdamage1 \
libxfixes3 \
libxrandr2 \
libgbm1 \
libpango-1.0-0 \
libcairo2 \
libasound2 \
libatspi2.0-0 \
# Fonts
fonts-liberation \
fonts-noto-color-emoji \
# Clean up
&& rm -rf /var/lib/apt/lists/*
# Copy node_modules from builder
COPY --from=builder /app/node_modules ./node_modules
# Copy Playwright browsers to a shared location
COPY --from=builder /root/.cache/ms-playwright /ms-playwright
# Copy application files
COPY server.js .
COPY worker.html .
COPY docs.html .
COPY lib ./lib
COPY wechat_files ./wechat_files
# Create non-root user for security
RUN groupadd -r playwright && \
useradd -r -g playwright -G audio,video playwright && \
mkdir -p /home/playwright && \
chown -R playwright:playwright /home/playwright && \
chown -R playwright:playwright /app && \
chown -R playwright:playwright /ms-playwright
# Set Playwright browsers path
ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
# Switch to non-root user
USER playwright
# Expose port
EXPOSE 3000
# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
CMD node -e "require('http').get('http://localhost:3000/health', (r) => { process.exit(r.statusCode === 200 ? 0 : 1); }).on('error', () => process.exit(1));"
# Start server
CMD ["node", "server.js"]