Skip to content

[Feature] Support Authentication (User/Pass) for SOCKS5/HTTP(S) LAN Inbound #1306

@jsonmor

Description

@jsonmor

功能描述/Feature description

Description: Add the ability to set a Username and Password for the SOCKS5/HTTP(S) inbound when "Allow LAN" is enabled.

Currently, enabling "Allow LAN" creates an open proxy. This is a security risk in shared network environments (offices, dorms, public Wi-Fi).

Technical Requirement: Pass the user-defined users: [{ "username": "...", "password": "..." }] to the inbounds section of the sing-box config.

使用场景/Use case

Scenario: I want to share my VPN connection with my other specific devices (e.g., Apple TV, Console) via LAN, but I do not want unauthorized devices on the same network to access my tunnel.

Benefit:

Security: Prevents bandwidth theft and unauthorized access in untrusted local networks.

Control: Implements basic "Zero Trust" for the local inbound listener.

适用系统/Target OS

  • iOS
  • macOS
  • Apple tvOS
  • Android
  • Windows
  • Linux

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions