diff --git a/docs/docs/CHANGELOG.md b/docs/docs/CHANGELOG.md index a16b703..639d097 100644 --- a/docs/docs/CHANGELOG.md +++ b/docs/docs/CHANGELOG.md @@ -17,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Static asset builds are now done on demand instead of the results being committed to source control - The Dockerfile has been removed as it is no longer in use - Developer documentation has been added to the docs site +- Show more errors when some predictable challenge page errors happen ([#150](https://github.com/TecharoHQ/anubis/issues/150)) ## v1.15.0 diff --git a/package.json b/package.json index aeb2f2a..e13b3b3 100644 --- a/package.json +++ b/package.json @@ -5,9 +5,9 @@ "main": "index.js", "scripts": { "test": "npm run assets && go test ./...", - "test:integration": "npm run assets && go test ./internal/test", - "assets": "./web/build.sh && ./xess/build.sh", - "dev": "npm run assets && go run ./cmd/anubis", + "test:integration": "npm run assets && go test -v ./internal/test", + "assets": "go generate ./... && ./web/build.sh && ./xess/build.sh", + "dev": "npm run assets && go run ./cmd/anubis --use-remote-address", "container": "npm run assets && go run ./cmd/containerbuild" }, "author": "", diff --git a/web/index.templ b/web/index.templ index ca6086c..8aa626c 100644 --- a/web/index.templ +++ b/web/index.templ @@ -128,6 +128,11 @@ templ base(title string, body templ.Component) { left: 12.28719px; } + .mx-auto { + margin-left: auto; + margin-right: auto; + } + @keyframes lds-roller { 0% { transform: rotate(0deg); @@ -176,7 +181,7 @@ templ index() { />

Loading...

Why am I seeing this?

You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites. This can and does cause downtime for the websites, which makes their resources inaccessible for everyone.

Anubis is a compromise. Anubis uses a Proof-of-Work scheme in the vein of Hashcash, a proposed proof-of-work scheme for reducing email spam. The idea is that at individual scales the additional load is ignorable, but at mass scraper levels it adds up and makes scraping much more expensive.

Ultimately, this is a hack whose real purpose is to give a \"good enough\" placeholder solution so that more time can be spent on fingerprinting and identifying headless browsers (EG: via how they do font rendering) so that the challenge proof of work page doesn't need to be presented to users that are much more likely to be legitimate.

Please note that Anubis requires the use of modern JavaScript features that plugins like JShelter will disable. Please disable JShelter or other such plugins for this domain.

") + templ_7745c5c3_Err = templruntime.WriteString(templ_7745c5c3_Buffer, 10, "\">
Why am I seeing this?

You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites. This can and does cause downtime for the websites, which makes their resources inaccessible for everyone.

Anubis is a compromise. Anubis uses a Proof-of-Work scheme in the vein of Hashcash, a proposed proof-of-work scheme for reducing email spam. The idea is that at individual scales the additional load is ignorable, but at mass scraper levels it adds up and makes scraping much more expensive.

Ultimately, this is a hack whose real purpose is to give a \"good enough\" placeholder solution so that more time can be spent on fingerprinting and identifying headless browsers (EG: via how they do font rendering) so that the challenge proof of work page doesn't need to be presented to users that are much more likely to be legitimate.

Please note that Anubis requires the use of modern JavaScript features that plugins like JShelter will disable. Please disable JShelter or other such plugins for this domain.

") if templ_7745c5c3_Err != nil { return templ_7745c5c3_Err } @@ -195,7 +195,7 @@ func errorPage(message string) templ.Component { var templ_7745c5c3_Var10 string templ_7745c5c3_Var10, templ_7745c5c3_Err = templ.JoinStringErrs("/.within.website/x/cmd/anubis/static/img/sad.webp?cacheBuster=" + anubis.Version) if templ_7745c5c3_Err != nil { - return templ.Error{Err: templ_7745c5c3_Err, FileName: `index.templ`, Line: 211, Col: 90} + return templ.Error{Err: templ_7745c5c3_Err, FileName: `index.templ`, Line: 216, Col: 90} } _, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var10)) if templ_7745c5c3_Err != nil { @@ -208,7 +208,7 @@ func errorPage(message string) templ.Component { var templ_7745c5c3_Var11 string templ_7745c5c3_Var11, templ_7745c5c3_Err = templ.JoinStringErrs(message) if templ_7745c5c3_Err != nil { - return templ.Error{Err: templ_7745c5c3_Err, FileName: `index.templ`, Line: 213, Col: 14} + return templ.Error{Err: templ_7745c5c3_Err, FileName: `index.templ`, Line: 218, Col: 14} } _, templ_7745c5c3_Err = templ_7745c5c3_Buffer.WriteString(templ.EscapeString(templ_7745c5c3_Var11)) if templ_7745c5c3_Err != nil { diff --git a/web/js/main.mjs b/web/js/main.mjs index 297f16f..daaafcf 100644 --- a/web/js/main.mjs +++ b/web/js/main.mjs @@ -5,7 +5,7 @@ import { testVideo } from "./video.mjs"; const algorithms = { "fast": processFast, "slow": processSlow, -} +}; // from Xeact const u = (url = "", params = {}) => { @@ -20,6 +20,19 @@ const u = (url = "", params = {}) => { const imageURL = (mood, cacheBuster) => u(`/.within.website/x/cmd/anubis/static/img/${mood}.webp`, { cacheBuster }); +const dependencies = [ + { + name: "WebCrypto", + msg: "Your browser doesn't have a functioning web.crypto element. Are you viewing this over a secure context?", + value: window.crypto, + }, + { + name: "Web Workers", + msg: "Your browser doesn't support web workers (Anubis uses this to avoid freezing your browser). Do you have a plugin like JShelter installed?", + value: window.Worker, + }, +]; + (async () => { const status = document.getElementById('status'); const image = document.getElementById('image'); @@ -27,6 +40,25 @@ const imageURL = (mood, cacheBuster) => const spinner = document.getElementById('spinner'); const anubisVersion = JSON.parse(document.getElementById('anubis_version').textContent); + const ohNoes = ({ + titleMsg, statusMsg, imageSrc, + }) => { + title.innerHTML = titleMsg; + status.innerHTML = statusMsg; + image.src = imageSrc; + spinner.innerHTML = ""; + spinner.style.display = "none"; + }; + + if (!window.isSecureContext) { + ohNoes({ + titleMsg: "Your context is not secure!", + statusMsg: `Try connecting over HTTPS or let the admin know to set up HTTPS. For more information, see MDN.`, + imageSrc: imageURL("sad", anubisVersion), + }); + return; + } + // const testarea = document.getElementById('testarea'); // const videoWorks = await testVideo(testarea); @@ -43,6 +75,17 @@ const imageURL = (mood, cacheBuster) => status.innerHTML = 'Calculating...'; + for (const val of dependencies) { + const { value, name, msg } = val; + if (!value) { + ohNoes({ + titleMsg: `Missing feature ${name}`, + statusMsg: msg, + imageSrc: imageURL("sad", anubisVersion), + }) + } + } + const { challenge, rules } = await fetch("/.within.website/x/cmd/anubis/api/make-challenge", { method: "POST" }) .then(r => { if (!r.ok) { @@ -51,39 +94,56 @@ const imageURL = (mood, cacheBuster) => return r.json(); }) .catch(err => { - title.innerHTML = "Oh no!"; - status.innerHTML = `Failed to fetch config: ${err.message}`; - image.src = imageURL("sad", anubisVersion); - spinner.innerHTML = ""; - spinner.style.display = "none"; + ohNoes({ + titleMsg: "Internal error!", + statusMsg: `Failed to fetch challenge config: ${err.message}`, + imageSrc: imageURL("sad", anubisVersion), + }); throw err; }); const process = algorithms[rules.algorithm]; if (!process) { - title.innerHTML = "Oh no!"; - status.innerHTML = `Failed to resolve check algorithm. You may want to reload the page.`; - image.src = imageURL("sad", anubisVersion); - spinner.innerHTML = ""; - spinner.style.display = "none"; + ohNoes({ + titleMsg: "Challenge error!", + statusMsg: `Failed to resolve check algorithm. You may want to reload the page.`, + imageSrc: imageURL("sad", anubisVersion), + }); return; } status.innerHTML = `Calculating...
Difficulty: ${rules.report_as}`; + spinner.style.display = "block"; - const t0 = Date.now(); - const { hash, nonce } = await process(challenge, rules.difficulty); - const t1 = Date.now(); - console.log({ hash, nonce }); + try { + const t0 = Date.now(); + const { hash, nonce } = await process(challenge, rules.difficulty); + const t1 = Date.now(); + console.log({ hash, nonce }); - title.innerHTML = "Success!"; - status.innerHTML = `Done! Took ${t1 - t0}ms, ${nonce} iterations`; - image.src = imageURL("happy", anubisVersion); - spinner.innerHTML = ""; - spinner.style.display = "none"; + title.innerHTML = "Success!"; + status.innerHTML = `Done! Took ${t1 - t0}ms, ${nonce} iterations`; + image.src = imageURL("happy", anubisVersion); + spinner.innerHTML = ""; + spinner.style.display = "none"; - setTimeout(() => { - const redir = window.location.href; - window.location.href = u("/.within.website/x/cmd/anubis/api/pass-challenge", { response: hash, nonce, redir, elapsedTime: t1 - t0 }); - }, 250); + setTimeout(() => { + const redir = window.location.href; + + window.location.replace( + u("/.within.website/x/cmd/anubis/api/pass-challenge", { + response: hash, + nonce, + redir, + elapsedTime: t1 - t0 + }), + ); + }, 250); + } catch (err) { + ohNoes({ + titleMsg: "Calculation error!", + statusMsg: `Failed to calculate challenge: ${err.message}`, + imageSrc: imageURL("sad", anubisVersion), + }); + } })(); \ No newline at end of file diff --git a/xess/xess.go b/xess/xess.go index 18d995d..fa87858 100644 --- a/xess/xess.go +++ b/xess/xess.go @@ -13,7 +13,6 @@ import ( ) //go:generate go run github.com/a-h/templ/cmd/templ@latest generate -//go:generate npm run build var ( //go:embed *.css static diff --git a/xess/xess_templ.go b/xess/xess_templ.go index d8cab57..c1fa412 100644 --- a/xess/xess_templ.go +++ b/xess/xess_templ.go @@ -1,6 +1,6 @@ // Code generated by templ - DO NOT EDIT. -// templ: version: v0.3.850 +// templ: version: v0.3.857 package xess //lint:file-ignore SA4006 This context is only used if a nested component is present.