From 1b04fe102fe8b25fca17afa38cf5b9e3ea53d9b3 Mon Sep 17 00:00:00 2001
From: Dream95 <zhou_8621@163.com>
Date: Thu, 2 Apr 2026 14:48:30 +0000
Subject: [PATCH] feat: support socks5 password

Signed-off-by: Dream95 <zhou_8621@163.com>
---
 cmd/socks5_auth.go | 47 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 cmd/socks5_auth.go

diff --git a/cmd/socks5_auth.go b/cmd/socks5_auth.go
new file mode 100644
index 0000000..5373fdb
--- /dev/null
+++ b/cmd/socks5_auth.go
@@ -0,0 +1,47 @@
+package main
+
+import (
+	"fmt"
+
+	"golang.org/x/net/proxy"
+)
+
+func validateSocks5UpstreamConfig() error {
+	hasAddr := socks5ProxyAddr != ""
+	hasUser := socks5User != ""
+	hasPass := socks5Pass != ""
+
+	if (hasUser || hasPass) && !hasAddr {
+		return fmt.Errorf("--socks5-user/--socks5-pass provided but --socks5 is empty")
+	}
+
+	if !hasUser && !hasPass {
+		return nil
+	}
+	if hasUser != hasPass {
+		return fmt.Errorf("--socks5-user and --socks5-pass must be set together")
+	}
+
+	// RFC1929: 1..255 bytes for both username and password.
+	if l := len(socks5User); l == 0 || l > 255 {
+		return fmt.Errorf("invalid --socks5-user length %d (must be 1..255)", l)
+	}
+	if l := len(socks5Pass); l == 0 || l > 255 {
+		return fmt.Errorf("invalid --socks5-pass length %d (must be 1..255)", l)
+	}
+
+	return nil
+}
+
+func socks5AuthOrNil() (*proxy.Auth, error) {
+	if socks5ProxyAddr == "" {
+		return nil, nil
+	}
+	if socks5User == "" && socks5Pass == "" {
+		return nil, nil
+	}
+	if err := validateSocks5UpstreamConfig(); err != nil {
+		return nil, err
+	}
+	return &proxy.Auth{User: socks5User, Password: socks5Pass}, nil
+}