release: v1.8.0

feat: update storage directory path for Windows (#1087 )
feat: add environment variables configuration support (#1088 )
2026-11-10 02:20:28 +00:00 · 2025-08-28 18:43:44 +08:00 · 2025-08-28 08:44:18 +08:00 · 2025-08-28 08:21:02 +08:00 · 2025-08-26 10:07:33 +08:00 · 2025-08-22 09:26:37 +08:00
60 changed files with 3395 additions and 618 deletions
@@ -43,18 +43,26 @@ template: |
        <td rowspan="2">🪟 Windows</td>
        <td><code>EXE</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-windows-amd64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-windows-amd64.zip">📥</a></td>
      </tr>
      <tr>
        <td><code>Portable</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-windows-amd64-portable.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-windows-amd64-portable.zip">📥</a></td>
      </tr>
      <tr>
-        <td>🍎 MacOS</td>
-        <td><code>DMG</code></td>
+        <td rowspan="3">🍎 MacOS</td>
+        <td rowspan="3"><code>DMG</code></td>
        <td>universal</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-macos.dmg">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-macos.dmg">📥</a></td>
+      </tr>
+      <tr>
+        <td>amd64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-macos-amd64.dmg">📥</a></td>
+      </tr>
+      <tr>
+        <td>arm64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-macos-arm64.dmg">📥</a></td>
      </tr>
      <tr>
        <td rowspan="6">🐧 Linux</td>
@@ -70,32 +78,44 @@ template: |
      <tr>
        <td rowspan="2"><code>DEB</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-linux-amd64.deb">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-linux-amd64.deb">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-linux-arm64.deb">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-linux-arm64.deb">📥</a></td>
      </tr>
      <tr>
        <td rowspan="2"><code>AppImage</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-linux-amd64.AppImage">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-linux-amd64.AppImage">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-linux-arm64.AppImage">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-linux-arm64.AppImage">📥</a></td>
      </tr>
      <tr>
-        <td>🤖 Android</td>
-        <td><code>APK</code></td>
+        <td rowspan="4">🤖 Android</td>
+        <td rowspan="4"><code>APK</code></td>
        <td>universal</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-android.apk">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-android.apk">📥</a></td>
+      </tr>
+      <tr>
+        <td>armeabi-v7a</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-android-armeabi-v7a.apk">📥</a></td>
+      </tr>
+      <tr>
+        <td>arm64-v8a</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-android-arm64-v8a.apk">📥</a></td>
+      </tr>
+      <tr>
+        <td>x86_64</td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-android-x86_64.apk">📥</a></td>
      </tr>
      <tr>
        <td>📱 iOS</td>
        <td><code>IPA</code></td>
        <td>universal</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/Gopeed-v$NEXT_PATCH_VERSION-ios.ipa">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=Gopeed-v$NEXT_PATCH_VERSION-ios.ipa">📥</a></td>
      </tr>
      <tr>
        <td>🐳 Docker</td>
@@ -107,47 +127,47 @@ template: |
        <td rowspan="2">💾 Qnap</td>
        <td rowspan="2"><code>QPKG</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-v$NEXT_PATCH_VERSION-qnap-amd64.qpkg">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-v$NEXT_PATCH_VERSION-qnap-amd64.qpkg">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-v$NEXT_PATCH_VERSION-qnap-arm64.qpkg">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-v$NEXT_PATCH_VERSION-qnap-arm64.qpkg">📥</a></td>
      </tr>
      <tr>
        <td rowspan="8">🌐 Web</td>
        <td rowspan="3"><code>Windows</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-windows-amd64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-windows-amd64.zip">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-windows-arm64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-windows-arm64.zip">📥</a></td>
      </tr>
      <tr>
        <td>386</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-windows-386.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-windows-386.zip">📥</a></td>
      </tr>
      <tr>
        <td rowspan="2"><code>MacOS</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-macos-amd64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-macos-amd64.zip">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-macos-arm64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-macos-arm64.zip">📥</a></td>
      </tr>
      <tr>
        <td rowspan="3"><code>Linux</code></td>
        <td>amd64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-linux-amd64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-linux-amd64.zip">📥</a></td>
      </tr>
      <tr>
        <td>arm64</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-linux-arm64.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-linux-arm64.zip">📥</a></td>
      </tr>
      <tr>
        <td>386</td>
-        <td><a href="https://github.com/GopeedLab/gopeed/releases/download/v$NEXT_PATCH_VERSION/gopeed-web-v$NEXT_PATCH_VERSION-linux-386.zip">📥</a></td>
+        <td><a href="https://gopeed.com/api/download?tpl=gopeed-web-v$NEXT_PATCH_VERSION-linux-386.zip">📥</a></td>
      </tr>
    </tbody>
  </table>
@@ -13,7 +13,7 @@ on:
        default: "false"

 env:
-  GO_VERSION: "1.23"
+  GO_VERSION: "1.24"
  FLUTTER_VERSION: "3.24.5"

 permissions:
@@ -139,9 +139,9 @@ jobs:
          upload_url: ${{ needs.get-release.outputs.upload_url }}
          asset_path: ui/flutter/build/windows/Output/*
          overwrite: true
-  build-macos-arm64-lib:
+  build-macos-amd64-lib:
    if: ${{ github.event.inputs.platform == 'all' || github.event.inputs.platform == 'macos' }}
-    runs-on: macos-latest
+    runs-on: macos-13
    needs: [get-release]
    steps:
      - uses: actions/checkout@v3
@@ -157,15 +157,18 @@ jobs:
          go build -ldflags="-w -s" github.com/GopeedLab/gopeed/cmd/updater
      - uses: actions/upload-artifact@v4
        with:
-          name: macos-arm64-lib
+          name: macos-amd64-lib
          path: |
            libgopeed.dylib
            host
            updater
  build-macos:
    if: ${{ github.event.inputs.platform == 'all' || github.event.inputs.platform == 'macos' }}
-    runs-on: macos-13
-    needs: [get-release, build-macos-arm64-lib]
+    runs-on: macos-latest
+    strategy:
+      matrix:
+        channel: [ arm64, amd64, universal ]
+    needs: [get-release, build-macos-amd64-lib]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -183,34 +186,46 @@ jobs:
          npm install -g appdmg
      - uses: actions/download-artifact@v4
        with:
-          name: macos-arm64-lib
-          path: ui/flutter/lib-arm64
+          name: macos-amd64-lib
+          path: ui/flutter/lib-amd64
+      - if: ${{ matrix.channel == 'arm64' }}
+        name: Build Arm64 Libraries
+        run: |
+          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/macos/Frameworks/libgopeed.dylib github.com/GopeedLab/gopeed/bind/desktop
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/host github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/assets/exec/updater github.com/GopeedLab/gopeed/cmd/updater
+      - if: ${{ matrix.channel == 'amd64' }}
+        name: Build Amd64 Libraries
+        run: |
+          mkdir -p ui/flutter/macos/Frameworks
+          
+          cp ui/flutter/lib-amd64/libgopeed.dylib ui/flutter/macos/Frameworks/libgopeed.dylib
+          cp ui/flutter/lib-amd64/host ui/flutter/assets/exec/host
+          cp ui/flutter/lib-amd64/updater ui/flutter/assets/exec/updater
+      - if: ${{ matrix.channel == 'universal' }}
+        name: Build Universal Libraries
+        run: |
+          mkdir -p ui/flutter/macos/Frameworks
+          
+          # arm64 lib
+          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/.temp/libgopeed.dylib.arm64 github.com/GopeedLab/gopeed/bind/desktop
+          go build -ldflags="-w -s" -o ui/flutter/.temp/host.arm64 github.com/GopeedLab/gopeed/cmd/host
+          go build -ldflags="-w -s" -o ui/flutter/.temp/updater.arm64 github.com/GopeedLab/gopeed/cmd/updater
+         
+          # amd64 lib
+          cp ui/flutter/lib-amd64/libgopeed.dylib ui/flutter/.temp/libgopeed.dylib.amd64
+          cp ui/flutter/lib-amd64/host ui/flutter/.temp/host.amd64
+          cp ui/flutter/lib-amd64/updater ui/flutter/.temp/updater.amd64
+         
+          # universal lib
+          lipo -create -output ui/flutter/macos/Frameworks/libgopeed.dylib ui/flutter/.temp/libgopeed.dylib.arm64 ui/flutter/.temp/libgopeed.dylib.amd64
+          lipo -create -output ui/flutter/assets/exec/host ui/flutter/.temp/host.arm64 ui/flutter/.temp/host.amd64
+          lipo -create -output ui/flutter/assets/exec/updater ui/flutter/.temp/updater.arm64 ui/flutter/.temp/updater.amd64
      - name: Build
        env:
          VERSION: ${{ needs.get-release.outputs.version }}
        run: |
-          PROJECT_DIR=$(pwd)
-
-          # amd64 lib
-          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/lib-amd64/libgopeed.dylib github.com/GopeedLab/gopeed/bind/desktop
-          go build -ldflags="-w -s" -o ui/flutter/lib-amd64/host github.com/GopeedLab/gopeed/cmd/host
-          go build -ldflags="-w -s" -o ui/flutter/lib-amd64/updater github.com/GopeedLab/gopeed/cmd/updater
-          # universal binary
-          mkdir -p ui/flutter/macos/Frameworks
-          cp ui/flutter/lib-amd64/libgopeed.dylib ui/flutter/macos/Frameworks/amd64-lib
-          cp ui/flutter/lib-arm64/libgopeed.dylib ui/flutter/macos/Frameworks/arm64-lib
-          cp ui/flutter/lib-amd64/host ui/flutter/macos/Frameworks/amd64-host
-          cp ui/flutter/lib-arm64/host ui/flutter/macos/Frameworks/arm64-host
-          cp ui/flutter/lib-amd64/updater ui/flutter/macos/Frameworks/amd64-updater
-          cp ui/flutter/lib-arm64/updater ui/flutter/macos/Frameworks/arm64-updater
-          cd ui/flutter/macos/Frameworks
-          lipo -create -output libgopeed.dylib amd64-lib arm64-lib
-          lipo -create -output host amd64-host arm64-host
-          lipo -create -output updater amd64-updater arm64-updater
-          rm -rf amd64-lib arm64-lib amd64-host arm64-host amd64-updater arm64-updater
-          mv host ../../assets/exec/host
-
-          cd $PROJECT_DIR/ui/flutter
+          cd ui/flutter
          flutter build macos --dart-define="UPDATE_CHANNEL=macosDmg"
          cd build/macos/Build/Products/Release
          cat>appdmg.json<<EOF
@@ -225,6 +240,13 @@ jobs:
          EOF
          mkdir dist
          appdmg appdmg.json dist/Gopeed-v$VERSION-macos.dmg
+          
+          if [[ "${{ matrix.channel }}" == "arm64" ]]; then
+            mv dist/Gopeed-v$VERSION-macos.dmg dist/Gopeed-v$VERSION-macos-arm64.dmg
+          fi
+          if [[ "${{ matrix.channel }}" == "amd64" ]]; then
+            mv dist/Gopeed-v$VERSION-macos.dmg dist/Gopeed-v$VERSION-macos-amd64.dmg
+          fi
      - name: Upload
        uses: shogo82148/actions-upload-release-asset@v1
        with:
@@ -236,7 +258,7 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        os: [ ubuntu-22.04, ubuntu-22.04-arm ]
+        os: [ubuntu-22.04, ubuntu-22.04-arm]
    needs: [get-release]
    steps:
      - uses: actions/checkout@v3
@@ -270,7 +292,7 @@ jobs:
          go build -tags nosqlite -ldflags="-w -s -X github.com/GopeedLab/gopeed/pkg/base.Version=$VERSION" -buildmode=c-shared -o ui/flutter/linux/bundle/lib/libgopeed.so github.com/GopeedLab/gopeed/bind/desktop
          go build -ldflags="-w -s" -o ui/flutter/assets/exec/host github.com/GopeedLab/gopeed/cmd/host
          go build -ldflags="-w -s" -o ui/flutter/assets/exec/updater github.com/GopeedLab/gopeed/cmd/updater
-          
+
          cd ui/flutter
          cat << EOF > distribute_options.yaml
          output: dist/
@@ -295,13 +317,13 @@ jobs:
          dart pub global activate -sgit https://github.com/GopeedLab/flutter_distributor.git --git-path packages/flutter_distributor
          flutter_distributor release --name linux
          cd dist/*
-          
+
          # Get current running architecture, x86_64 -> amd64 and aarch64 -> arm64
          ARCH="amd64"
          if [[ "${{ matrix.os }}" == *-arm ]]; then
            ARCH="arm64"
          fi
-          
+
          mv gopeed-*-linux.AppImage Gopeed-v${VERSION}-linux-${ARCH}.AppImage
          mv gopeed-*-linux.deb Gopeed-v${VERSION}-linux-${ARCH}.deb
      - name: Upload
@@ -472,8 +494,12 @@ jobs:
          cd ui/flutter
          echo $APK_KEYSTORE | base64 -di > android/app/upload-keystore.jks
          flutter build apk --dart-define="UPDATE_CHANNEL=androidApk"
+          flutter build apk --split-per-abi --dart-define="UPDATE_CHANNEL=androidApk"
          mkdir dist
          cp build/app/outputs/flutter-apk/app-release.apk dist/Gopeed-v$VERSION-android.apk
+          cp build/app/outputs/flutter-apk/app-armeabi-v7a-release.apk dist/Gopeed-v$VERSION-android-armeabi-v7a.apk
+          cp build/app/outputs/flutter-apk/app-arm64-v8a-release.apk dist/Gopeed-v$VERSION-android-arm64-v8a.apk
+          cp build/app/outputs/flutter-apk/app-x86_64-release.apk dist/Gopeed-v$VERSION-android-x86_64.apk
      - name: Upload
        uses: shogo82148/actions-upload-release-asset@v1
        with:
@@ -482,7 +508,7 @@ jobs:
          overwrite: true
  build-ios:
    if: ${{ github.event.inputs.platform == 'all' || github.event.inputs.platform == 'ios' }}
-    runs-on: macos-latest
+    runs-on: macos-14
    needs: [get-release]
    steps:
      - uses: actions/checkout@v3
@@ -529,7 +555,6 @@ jobs:
        env:
          VERSION: ${{ needs.get-release.outputs.version }}
        run: |
-          VERSION=${VERSION:-$(date +%y%m%d%H%M)} # Use current time as version if not specified
          cd ui/flutter
          flutter build web --no-web-resources-cdn
          cd ../../
@@ -17,7 +17,7 @@ on:
      - "Dockerfile"

 env:
-  GO_VERSION: "1.23"
+  GO_VERSION: "1.24"

 permissions:
  contents: write
@@ -27,7 +27,7 @@ on:
      - "go.sum"

 env:
-  GO_VERSION: "1.23"
+  GO_VERSION: "1.24"
  FLUTTER_VERSION: "3.24.5"

 jobs:
@@ -53,7 +53,13 @@ jobs:
        with:
          go-version: ${{ env.GO_VERSION }}
      - name: Run Unit tests.
-        run: go test $(go list ./... | grep -v /cmd/ | grep -v /bind/ ) -v -covermode=count -coverprofile=coverage.txt
+        run: |
+          # Get packages for testing and coverage (including cmd/web for flags_test.go)
+          PACKAGES=$(go list ./... | grep -v /bind/ | grep -v -E '/cmd/(?!web)')
+          go test -v -coverpkg=$(echo "$PACKAGES" | paste -sd "," -) -covermode=count -coverprofile=coverage.txt $PACKAGES
+          # Filter out main.go from coverage report to avoid lowering coverage percentage
+          grep -v "main.go" coverage.txt > coverage_filtered.txt || true
+          mv coverage_filtered.txt coverage.txt
      - uses: codecov/codecov-action@v4
        with:
          files: ./coverage.txt
@@ -63,8 +69,8 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        os: [ windows-latest, macos-latest, ubuntu-22.04, ubuntu-22.04-arm ]
-    needs: [ test ]
+        os: [windows-latest, macos-latest, ubuntu-22.04, ubuntu-22.04-arm]
+    needs: [test]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -96,8 +102,8 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        os: [ macos-latest, ubuntu-latest ]
-    needs: [ test ]
+        os: [macos-14, ubuntu-latest]
+    needs: [test]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -129,7 +135,7 @@ jobs:
  build-web:
    name: Build web check
    runs-on: ubuntu-latest
-    needs: [ test ]
+    needs: [test]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -149,7 +155,7 @@ jobs:
  build-docker:
    name: Build docker check
    runs-on: ubuntu-latest
-    needs: [ test ]
+    needs: [test]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
@@ -35,11 +35,19 @@ Visit ✈ [Official Website](https://gopeed.com) | 📖 [Official Docs](https://
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
+    <tr>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
    <tr>
      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
@@ -70,10 +78,22 @@ Visit ✈ [Official Website](https://gopeed.com) | 📖 [Official Docs](https://
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -35,11 +35,19 @@ Gopeed (正式名 Go Speed) は `Golang` + `Flutter` によって開発された
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
+    <tr>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
    <tr>
      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
@@ -70,10 +78,22 @@ Gopeed (正式名 Go Speed) は `Golang` + `Flutter` によって開発された
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -135,7 +155,6 @@ Gopeed (正式名 Go Speed) は `Golang` + `Flutter` によって開発された
    </tr>
  </tbody>
 </table>
-
 インストールについての詳細は、[インストール](https://docs.gopeed.com/install.html)を参照してください。

 ### 🛠️ コマンドツール
@@ -35,11 +35,19 @@ Truy cập ✈ [Trang web chính thức](https://gopeed.com) | 📖 [Tài liệu
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
+    <tr>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
    <tr>
      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
@@ -70,10 +78,22 @@ Truy cập ✈ [Trang web chính thức](https://gopeed.com) | 📖 [Tài liệu
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -135,7 +155,6 @@ Truy cập ✈ [Trang web chính thức](https://gopeed.com) | 📖 [Tài liệu
    </tr>
  </tbody>
 </table>
-
 Thêm thông tin về cài đặt, vui lòng tham khảo [Cài đặt](https://docs.gopeed.com/install.html)

 ### 🛠️ Công cụ lệnh
@@ -35,11 +35,19 @@ Gopeed（全称 Go Speed），直译过来中文名叫做`够快下载器`（不
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
+    <tr>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
    <tr>
      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
@@ -70,10 +78,22 @@ Gopeed（全称 Go Speed），直译过来中文名叫做`够快下载器`（不
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -135,7 +155,6 @@ Gopeed（全称 Go Speed），直译过来中文名叫做`够快下载器`（不
    </tr>
  </tbody>
 </table>
-
 更多关于安装的内容请参考[安装文档](https://docs.gopeed.com/zh/install.html)

 ### 🛠️ 命令行工具
@@ -35,11 +35,19 @@ Gopeed（全稱 Go Speed），是一款使用`Golang`+`Flutter`編寫的高速
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-windows-amd64-portable.zip">📥</a></td>
    </tr>
    <tr>
-      <td>🍎 MacOS</td>
-      <td><code>DMG</code></td>
+      <td rowspan="3">🍎 MacOS</td>
+      <td rowspan="3"><code>DMG</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos.dmg">📥</a></td>
    </tr>
+    <tr>
+      <td>amd64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-amd64.dmg">📥</a></td>
+    </tr>
+    <tr>
+      <td>arm64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-macos-arm64.dmg">📥</a></td>
+    </tr>
    <tr>
      <td rowspan="6">🐧 Linux</td>
      <td><code>Flathub</code></td>
@@ -70,10 +78,22 @@ Gopeed（全稱 Go Speed），是一款使用`Golang`+`Flutter`編寫的高速
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-linux-arm64.AppImage">📥</a></td>
    </tr>
    <tr>
-      <td>🤖 Android</td>
-      <td><code>APK</code></td>
+      <td rowspan="4">🤖 Android</td>
+      <td rowspan="4"><code>APK</code></td>
      <td>universal</td>
      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>armeabi-v7a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-armeabi-v7a.apk">📥</a></td>
+    </tr>
+     <tr>
+      <td>arm64-v8a</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-arm64-v8a.apk">📥</a></td>
+    </tr>
+    <tr>
+      <td>x86_64</td>
+      <td><a href="https://gopeed.com/api/download?tpl=Gopeed-$version-android-x86_64.apk">📥</a></td>
    </tr>
    <tr>
      <td>📱 iOS</td>
@@ -3,19 +3,23 @@ package main
 import (
 	"encoding/json"
 	"flag"
-	"fmt"
-	"github.com/GopeedLab/gopeed/pkg/base"
 	"os"
 	"path/filepath"
+	"reflect"
+	"strconv"
+	"strings"
+
+	"github.com/GopeedLab/gopeed/pkg/base"
 )

 type args struct {
-	Address    *string `json:"address"`
-	Port       *int    `json:"port"`
-	Username   *string `json:"username"`
-	Password   *string `json:"password"`
-	ApiToken   *string `json:"apiToken"`
-	StorageDir *string `json:"storageDir"`
+	Address           *string  `json:"address"`
+	Port              *int     `json:"port"`
+	Username          *string  `json:"username"`
+	Password          *string  `json:"password"`
+	ApiToken          *string  `json:"apiToken"`
+	StorageDir        *string  `json:"storageDir"`
+	WhiteDownloadDirs []string `json:"whiteDownloadDirs"`
 	// DownloadConfig when the first time to start the server, it will be configured as initial value
 	DownloadConfig *base.DownloaderStoreConfig `json:"downloadConfig"`

@@ -23,62 +27,177 @@ type args struct {
 }

 func parse() *args {
-	var cliArgs args
-	cliArgs.Address = flag.String("A", "0.0.0.0", "Bind Address")
-	cliArgs.Port = flag.Int("P", 9999, "Bind Port")
-	cliArgs.Username = flag.String("u", "gopeed", "HTTP Basic Auth Username")
-	cliArgs.Password = flag.String("p", "", "HTTP Basic Auth Pwd")
-	cliArgs.ApiToken = flag.String("T", "", "API token, it must be configured when using HTTP API in the case of enabling basic authentication")
-	cliArgs.StorageDir = flag.String("d", "", "Storage directory")
-	cliArgs.configPath = flag.String("c", "./config.json", "Config file path")
+	cfg := &args{}
+
+	cliConfig := loadCliArgs()
+	loadConfigFile(cfg, *cliConfig.configPath)
+	loadEnvVars(cfg)
+	// override with non-default command line arguments
+	overrideWithCliArgs(cfg, cliConfig)
+	// set default values for any unset fields
+	setDefaults(cfg)
+	return cfg
+}
+
+// loadCliArgs parses command line arguments and returns initial config
+func loadCliArgs() *args {
+	cfg := &args{}
+	cfg.Address = flag.String("A", "", "Bind Address")
+	cfg.Port = flag.Int("P", 0, "Bind Port")
+	cfg.Username = flag.String("u", "", "Web Authentication Username")
+	cfg.Password = flag.String("p", "", "Web Authentication Password, if no password is set, web authentication will not be enabled")
+	cfg.ApiToken = flag.String("T", "", "API token, it must be configured when using HTTP API in the case of enabling web authentication")
+	cfg.StorageDir = flag.String("d", "", "Storage directory")
+	whiteDownloadDirs := flag.String("w", "", "White download directories, comma-separated")
+	cfg.configPath = flag.String("c", "./config.json", "Config file path")
 	flag.Parse()

-	// args priority: config file > cli args
-	cfgArgs := loadConfig(*cliArgs.configPath)
-	if cfgArgs.Address == nil {
-		cfgArgs.Address = cliArgs.Address
+	// Parse white download directories from comma-separated string
+	if whiteDownloadDirs != nil && *whiteDownloadDirs != "" {
+		dirs := strings.Split(*whiteDownloadDirs, ",")
+		for i := range dirs {
+			dirs[i] = strings.TrimSpace(dirs[i])
+		}
+		cfg.WhiteDownloadDirs = dirs
 	}
-	if cfgArgs.Port == nil {
-		cfgArgs.Port = cliArgs.Port
-	}
-	if cfgArgs.Username == nil {
-		cfgArgs.Username = cliArgs.Username
-	}
-	if cfgArgs.Password == nil {
-		cfgArgs.Password = cliArgs.Password
-	}
-	if cfgArgs.ApiToken == nil {
-		cfgArgs.ApiToken = cliArgs.ApiToken
-	}
-	if cfgArgs.StorageDir == nil {
-		cfgArgs.StorageDir = cliArgs.StorageDir
-	}
-	return cfgArgs
+
+	return cfg
 }

-func loadConfig(path string) *args {
-	var args args
+// overrideWithCliArgs overrides config with non-empty command line arguments
+func overrideWithCliArgs(cfg *args, cliConfig *args) {
+	// Only override if the cli value is not empty/zero
+	if cliConfig.Address != nil && *cliConfig.Address != "" {
+		cfg.Address = cliConfig.Address
+	}

-	if !filepath.IsAbs(path) {
+	if cliConfig.Port != nil && *cliConfig.Port != 0 {
+		cfg.Port = cliConfig.Port
+	}
+
+	if cliConfig.Username != nil && *cliConfig.Username != "" {
+		cfg.Username = cliConfig.Username
+	}
+
+	if cliConfig.Password != nil && *cliConfig.Password != "" {
+		cfg.Password = cliConfig.Password
+	}
+
+	if cliConfig.ApiToken != nil && *cliConfig.ApiToken != "" {
+		cfg.ApiToken = cliConfig.ApiToken
+	}
+
+	if cliConfig.StorageDir != nil && *cliConfig.StorageDir != "" {
+		cfg.StorageDir = cliConfig.StorageDir
+	}
+
+	if cliConfig.WhiteDownloadDirs != nil {
+		cfg.WhiteDownloadDirs = cliConfig.WhiteDownloadDirs
+	}
+}
+
+// setDefaults sets default values for any unset configuration fields
+func setDefaults(cfg *args) {
+	if cfg.Address == nil {
+		address := "0.0.0.0"
+		cfg.Address = &address
+	}
+
+	if cfg.Port == nil {
+		port := 9999
+		cfg.Port = &port
+	}
+
+	if cfg.Username == nil {
+		username := "gopeed"
+		cfg.Username = &username
+	}
+}
+
+// loadConfigFile loads configuration from file
+func loadConfigFile(cfg *args, configPath string) {
+	if !filepath.IsAbs(configPath) {
 		dir, err := os.Getwd()
 		if err != nil {
-			fmt.Println("config dir get failed, reason:" + err.Error())
-			return &args
+			return
 		}
-		path = filepath.Join(dir, path)
+		configPath = filepath.Join(dir, configPath)
 	}
-	file, err := os.ReadFile(path)
+
+	file, err := os.ReadFile(configPath)
 	if err != nil {
 		if os.IsNotExist(err) {
-			return &args
+			return
 		}
-		fmt.Println("config file read failed, reason:" + err.Error())
-		return &args
+		return
 	}
-	if err = json.Unmarshal(file, &args); err != nil {
-		fmt.Println("config file parse failed, reason:" + err.Error())
-		return &args
+
+	if err = json.Unmarshal(file, cfg); err != nil {
+		return
+	}
+}
+
+// loadEnvVars loads configuration from environment variables with prefix GOPEED_
+func loadEnvVars(cfg *args) {
+	v := reflect.ValueOf(cfg).Elem()
+	t := reflect.TypeOf(cfg).Elem()
+
+	for i := 0; i < v.NumField(); i++ {
+		field := v.Field(i)
+		fieldType := t.Field(i)
+
+		// Get json tag as environment variable suffix
+		jsonTag := fieldType.Tag.Get("json")
+		if jsonTag == "" || jsonTag == "-" {
+			continue
+		}
+
+		// Remove options like omitempty
+		if commaIdx := strings.Index(jsonTag, ","); commaIdx != -1 {
+			jsonTag = jsonTag[:commaIdx]
+		}
+
+		// Convert to uppercase and add GOPEED_ prefix
+		envKey := "GOPEED_" + strings.ToUpper(jsonTag)
+		envValue := os.Getenv(envKey)
+
+		if envValue == "" {
+			continue
+		}
+
+		// Set value based on field type
+		if field.Kind() == reflect.Ptr {
+			if field.IsNil() {
+				// Create new pointer instance
+				newVal := reflect.New(field.Type().Elem())
+				field.Set(newVal)
+			}
+
+			switch field.Type().Elem().Kind() {
+			case reflect.String:
+				field.Elem().SetString(envValue)
+			case reflect.Int:
+				if intVal, err := strconv.Atoi(envValue); err == nil {
+					field.Elem().SetInt(int64(intVal))
+				}
+			default:
+				// For complex types like DownloadConfig, try JSON unmarshaling
+				if field.Type().Elem() == reflect.TypeOf(base.DownloaderStoreConfig{}) {
+					var config base.DownloaderStoreConfig
+					if err := json.Unmarshal([]byte(envValue), &config); err == nil {
+						field.Set(reflect.ValueOf(&config))
+					}
+				}
+			}
+		} else if field.Kind() == reflect.Slice {
+			// Handle non-pointer slice types (like []string for WhiteDownloadDirs)
+			if field.Type().Elem().Kind() == reflect.String {
+				dirs := strings.Split(envValue, ",")
+				for i := range dirs {
+					dirs[i] = strings.TrimSpace(dirs[i])
+				}
+				field.Set(reflect.ValueOf(dirs))
+			}
+		}
 	}
-	fmt.Printf("config file loaded: %s\n", path)
-	return &args
 }
@@ -0,0 +1,698 @@
+package main
+
+import (
+	"os"
+	"path/filepath"
+	"reflect"
+	"testing"
+
+	"github.com/GopeedLab/gopeed/pkg/base"
+)
+
+func TestSetDefaults(t *testing.T) {
+	tests := []struct {
+		name     string
+		input    *args
+		expected *args
+	}{
+		{
+			name:  "empty config should get defaults",
+			input: &args{},
+			expected: &args{
+				Address:  stringPtr("0.0.0.0"),
+				Port:     intPtr(9999),
+				Username: stringPtr("gopeed"),
+			},
+		},
+		{
+			name: "partial config should only fill missing defaults",
+			input: &args{
+				Address: stringPtr("127.0.0.1"),
+			},
+			expected: &args{
+				Address:  stringPtr("127.0.0.1"),
+				Port:     intPtr(9999),
+				Username: stringPtr("gopeed"),
+			},
+		},
+		{
+			name: "full config should remain unchanged",
+			input: &args{
+				Address:  stringPtr("192.168.1.1"),
+				Port:     intPtr(8080),
+				Username: stringPtr("admin"),
+			},
+			expected: &args{
+				Address:  stringPtr("192.168.1.1"),
+				Port:     intPtr(8080),
+				Username: stringPtr("admin"),
+			},
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			setDefaults(tt.input)
+			if !reflect.DeepEqual(tt.input, tt.expected) {
+				t.Errorf("setDefaults() = %+v, want %+v", tt.input, tt.expected)
+			}
+		})
+	}
+}
+
+func TestOverrideWithCliArgs(t *testing.T) {
+	tests := []struct {
+		name      string
+		config    *args
+		cliConfig *args
+		expected  *args
+	}{
+		{
+			name:   "empty cli should not override",
+			config: &args{Address: stringPtr("192.168.1.1")},
+			cliConfig: &args{
+				Address: stringPtr(""),
+				Port:    intPtr(0),
+			},
+			expected: &args{Address: stringPtr("192.168.1.1")},
+		},
+		{
+			name:   "non-empty cli should override",
+			config: &args{Address: stringPtr("192.168.1.1")},
+			cliConfig: &args{
+				Address: stringPtr("127.0.0.1"),
+				Port:    intPtr(8080),
+			},
+			expected: &args{
+				Address: stringPtr("127.0.0.1"),
+				Port:    intPtr(8080),
+			},
+		},
+		{
+			name: "all fields override test",
+			config: &args{
+				Address:    stringPtr("old_address"),
+				Port:       intPtr(1111),
+				Username:   stringPtr("old_user"),
+				Password:   stringPtr("old_pass"),
+				ApiToken:   stringPtr("old_token"),
+				StorageDir: stringPtr("old_dir"),
+			},
+			cliConfig: &args{
+				Address:    stringPtr("new_address"),
+				Port:       intPtr(2222),
+				Username:   stringPtr("new_user"),
+				Password:   stringPtr("new_pass"),
+				ApiToken:   stringPtr("new_token"),
+				StorageDir: stringPtr("new_dir"),
+			},
+			expected: &args{
+				Address:    stringPtr("new_address"),
+				Port:       intPtr(2222),
+				Username:   stringPtr("new_user"),
+				Password:   stringPtr("new_pass"),
+				ApiToken:   stringPtr("new_token"),
+				StorageDir: stringPtr("new_dir"),
+			},
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			overrideWithCliArgs(tt.config, tt.cliConfig)
+			if !reflect.DeepEqual(tt.config, tt.expected) {
+				t.Errorf("overrideWithCliArgs() = %+v, want %+v", tt.config, tt.expected)
+			}
+		})
+	}
+}
+
+func TestLoadConfigFile(t *testing.T) {
+	// Create temporary directory for test files
+	tempDir, err := os.MkdirTemp("", "flags_test")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer os.RemoveAll(tempDir)
+
+	tests := []struct {
+		name       string
+		configData string
+		fileName   string
+		expected   *args
+	}{
+		{
+			name: "valid config file",
+			configData: `{
+				"address": "192.168.1.100",
+				"port": 8080,
+				"username": "testuser",
+				"password": "testpass",
+				"apiToken": "testtoken",
+				"storageDir": "/test/storage",
+				"downloadConfig": {
+					"downloadDir": "/test/downloads",
+					"maxRunning": 10
+				}
+			}`,
+			fileName: "valid_config.json",
+			expected: &args{
+				Address:    stringPtr("192.168.1.100"),
+				Port:       intPtr(8080),
+				Username:   stringPtr("testuser"),
+				Password:   stringPtr("testpass"),
+				ApiToken:   stringPtr("testtoken"),
+				StorageDir: stringPtr("/test/storage"),
+				DownloadConfig: &base.DownloaderStoreConfig{
+					DownloadDir: "/test/downloads",
+					MaxRunning:  10,
+				},
+			},
+		},
+		{
+			name: "partial config file",
+			configData: `{
+				"address": "10.0.0.1",
+				"port": 3000
+			}`,
+			fileName: "partial_config.json",
+			expected: &args{
+				Address: stringPtr("10.0.0.1"),
+				Port:    intPtr(3000),
+			},
+		},
+		{
+			name:       "invalid json should not panic",
+			configData: `{invalid json}`,
+			fileName:   "invalid_config.json",
+			expected:   &args{},
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			// Create test config file
+			configPath := filepath.Join(tempDir, tt.fileName)
+			err := os.WriteFile(configPath, []byte(tt.configData), 0644)
+			if err != nil {
+				t.Fatal(err)
+			}
+
+			cfg := &args{}
+			loadConfigFile(cfg, configPath)
+
+			if !reflect.DeepEqual(cfg, tt.expected) {
+				t.Errorf("loadConfigFile() = %+v, want %+v", cfg, tt.expected)
+			}
+		})
+	}
+
+	// Test non-existent file
+	t.Run("non-existent file", func(t *testing.T) {
+		cfg := &args{}
+		loadConfigFile(cfg, "/non/existent/file.json")
+		expected := &args{}
+		if !reflect.DeepEqual(cfg, expected) {
+			t.Errorf("loadConfigFile() with non-existent file = %+v, want %+v", cfg, expected)
+		}
+	})
+}
+
+func TestLoadEnvVars(t *testing.T) {
+	// Save original environment
+	originalEnv := make(map[string]string)
+	envKeys := []string{
+		"GOPEED_ADDRESS", "GOPEED_PORT", "GOPEED_USERNAME",
+		"GOPEED_PASSWORD", "GOPEED_APITOKEN", "GOPEED_STORAGEDIR",
+		"GOPEED_DOWNLOADCONFIG", "GOPEED_WHITEDOWNLOADDIRS",
+	}
+	for _, key := range envKeys {
+		originalEnv[key] = os.Getenv(key)
+	}
+
+	// Clean up function
+	cleanup := func() {
+		for _, key := range envKeys {
+			if val, exists := originalEnv[key]; exists {
+				os.Setenv(key, val)
+			} else {
+				os.Unsetenv(key)
+			}
+		}
+	}
+	defer cleanup()
+
+	tests := []struct {
+		name     string
+		envVars  map[string]string
+		expected *args
+	}{
+		{
+			name: "all environment variables set",
+			envVars: map[string]string{
+				"GOPEED_ADDRESS":    "env.example.com",
+				"GOPEED_PORT":       "7777",
+				"GOPEED_USERNAME":   "envuser",
+				"GOPEED_PASSWORD":   "envpass",
+				"GOPEED_APITOKEN":   "envtoken",
+				"GOPEED_STORAGEDIR": "/env/storage",
+			},
+			expected: &args{
+				Address:    stringPtr("env.example.com"),
+				Port:       intPtr(7777),
+				Username:   stringPtr("envuser"),
+				Password:   stringPtr("envpass"),
+				ApiToken:   stringPtr("envtoken"),
+				StorageDir: stringPtr("/env/storage"),
+			},
+		},
+		{
+			name: "partial environment variables",
+			envVars: map[string]string{
+				"GOPEED_ADDRESS": "partial.example.com",
+				"GOPEED_PORT":    "5555",
+			},
+			expected: &args{
+				Address: stringPtr("partial.example.com"),
+				Port:    intPtr(5555),
+			},
+		},
+		{
+			name: "downloadConfig from environment",
+			envVars: map[string]string{
+				"GOPEED_DOWNLOADCONFIG": `{"downloadDir": "/env/downloads", "maxRunning": 15}`,
+			},
+			expected: &args{
+				DownloadConfig: &base.DownloaderStoreConfig{
+					DownloadDir: "/env/downloads",
+					MaxRunning:  15,
+				},
+			},
+		},
+		{
+			name: "invalid port should be ignored",
+			envVars: map[string]string{
+				"GOPEED_PORT": "invalid_port",
+			},
+			expected: &args{
+				Port: intPtr(0), // Invalid port creates pointer with 0 value
+			},
+		},
+		{
+			name: "invalid json for downloadConfig should be ignored",
+			envVars: map[string]string{
+				"GOPEED_DOWNLOADCONFIG": `{invalid json}`,
+			},
+			expected: &args{
+				DownloadConfig: &base.DownloaderStoreConfig{}, // Invalid JSON creates empty config
+			},
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			// Clear all environment variables first
+			for _, key := range envKeys {
+				os.Unsetenv(key)
+			}
+
+			// Set test environment variables
+			for key, value := range tt.envVars {
+				os.Setenv(key, value)
+			}
+
+			cfg := &args{}
+			loadEnvVars(cfg)
+
+			if !reflect.DeepEqual(cfg, tt.expected) {
+				t.Errorf("loadEnvVars() = %+v, want %+v", cfg, tt.expected)
+			}
+		})
+	}
+}
+
+func TestConfigPriority(t *testing.T) {
+	// Create temporary directory for test files
+	tempDir, err := os.MkdirTemp("", "flags_test_priority")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer os.RemoveAll(tempDir)
+
+	// Create test config file
+	configData := `{
+		"address": "config.example.com",
+		"port": 6666,
+		"username": "configuser",
+		"password": "configpass"
+	}`
+	configPath := filepath.Join(tempDir, "test_config.json")
+	err = os.WriteFile(configPath, []byte(configData), 0644)
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	// Save original environment
+	originalEnv := make(map[string]string)
+	envKeys := []string{"GOPEED_ADDRESS", "GOPEED_PORT", "GOPEED_USERNAME"}
+	for _, key := range envKeys {
+		originalEnv[key] = os.Getenv(key)
+	}
+	defer func() {
+		for _, key := range envKeys {
+			if val, exists := originalEnv[key]; exists {
+				os.Setenv(key, val)
+			} else {
+				os.Unsetenv(key)
+			}
+		}
+	}()
+
+	// Set environment variables
+	os.Setenv("GOPEED_ADDRESS", "env.example.com")
+	os.Setenv("GOPEED_PORT", "7777")
+
+	// Test configuration priority: CLI > ENV > Config File > Defaults
+	cfg := &args{}
+
+	// Load config file
+	loadConfigFile(cfg, configPath)
+
+	// Load environment variables (should override config file)
+	loadEnvVars(cfg)
+
+	// Simulate CLI args (should override env vars)
+	cliConfig := &args{
+		Address: stringPtr("cli.example.com"),
+		// Port not set in CLI, should remain from env
+		// Username not set in CLI or env, should remain from config file
+	}
+	overrideWithCliArgs(cfg, cliConfig)
+
+	// Set defaults for missing fields
+	setDefaults(cfg)
+
+	expected := &args{
+		Address:  stringPtr("cli.example.com"), // From CLI (highest priority)
+		Port:     intPtr(7777),                 // From ENV (overrides config file)
+		Username: stringPtr("configuser"),      // From config file (env not set)
+		Password: stringPtr("configpass"),      // From config file only
+	}
+
+	if !reflect.DeepEqual(cfg, expected) {
+		t.Errorf("Configuration priority test failed.\nGot: %+v\nWant: %+v", cfg, expected)
+	}
+}
+
+func TestCompleteConfigurationFlow(t *testing.T) {
+	// This test simulates a complete configuration loading scenario
+	// with all sources: defaults, config file, environment variables, and CLI args
+
+	tempDir, err := os.MkdirTemp("", "flags_test_complete")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer os.RemoveAll(tempDir)
+
+	// Create comprehensive config file
+	configData := `{
+		"address": "config.host.com",
+		"port": 5000,
+		"username": "configuser",
+		"password": "configpass",
+		"apiToken": "configtoken",
+		"storageDir": "/config/storage",
+		"downloadConfig": {
+			"downloadDir": "/config/downloads",
+			"maxRunning": 8,
+			"protocolConfig": {"http": {"maxConnections": 16}},
+			"proxy": {
+				"enable": true,
+				"system": false,
+				"scheme": "http",
+				"host": "proxy.example.com:8080"
+			}
+		}
+	}`
+	configPath := filepath.Join(tempDir, "complete_config.json")
+	err = os.WriteFile(configPath, []byte(configData), 0644)
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	// Save and set environment variables
+	originalEnv := make(map[string]string)
+	envKeys := []string{"GOPEED_ADDRESS", "GOPEED_USERNAME", "GOPEED_APITOKEN", "GOPEED_WHITEDOWNLOADDIRS"}
+	for _, key := range envKeys {
+		originalEnv[key] = os.Getenv(key)
+	}
+	defer func() {
+		for _, key := range envKeys {
+			if val, exists := originalEnv[key]; exists {
+				os.Setenv(key, val)
+			} else {
+				os.Unsetenv(key)
+			}
+		}
+	}()
+
+	os.Setenv("GOPEED_ADDRESS", "env.host.com")
+	os.Setenv("GOPEED_USERNAME", "envuser")
+
+	// Simulate complete configuration loading
+	cfg := &args{}
+
+	// Load from config file
+	loadConfigFile(cfg, configPath)
+
+	// Override with environment variables
+	loadEnvVars(cfg)
+
+	// Override with CLI arguments
+	cliConfig := &args{
+		Port:       intPtr(9090),
+		StorageDir: stringPtr("/cli/storage"),
+	}
+	overrideWithCliArgs(cfg, cliConfig)
+
+	// Set defaults
+	setDefaults(cfg)
+
+	// Verify the final configuration follows priority rules
+	if *cfg.Address != "env.host.com" {
+		t.Errorf("Address should be from environment, got %s", *cfg.Address)
+	}
+	if *cfg.Port != 9090 {
+		t.Errorf("Port should be from CLI, got %d", *cfg.Port)
+	}
+	if *cfg.Username != "envuser" {
+		t.Errorf("Username should be from environment, got %s", *cfg.Username)
+	}
+	if *cfg.Password != "configpass" {
+		t.Errorf("Password should be from config file, got %s", *cfg.Password)
+	}
+	if *cfg.ApiToken != "configtoken" {
+		t.Errorf("ApiToken should be from config file, got %s", *cfg.ApiToken)
+	}
+	if *cfg.StorageDir != "/cli/storage" {
+		t.Errorf("StorageDir should be from CLI, got %s", *cfg.StorageDir)
+	}
+	if cfg.DownloadConfig == nil {
+		t.Error("DownloadConfig should be loaded from config file")
+	} else {
+		if cfg.DownloadConfig.DownloadDir != "/config/downloads" {
+			t.Errorf("DownloadConfig.DownloadDir should be from config file, got %s", cfg.DownloadConfig.DownloadDir)
+		}
+		if cfg.DownloadConfig.MaxRunning != 8 {
+			t.Errorf("DownloadConfig.MaxRunning should be from config file, got %d", cfg.DownloadConfig.MaxRunning)
+		}
+	}
+}
+
+// Helper functions for creating pointers
+func stringPtr(s string) *string {
+	return &s
+}
+
+func intPtr(i int) *int {
+	return &i
+}
+
+func TestWhiteDownloadDirs(t *testing.T) {
+	t.Run("overrideWithCliArgs should handle WhiteDownloadDirs", func(t *testing.T) {
+		tests := []struct {
+			name      string
+			config    *args
+			cliConfig *args
+			expected  *args
+		}{
+			{
+				name:   "nil cli WhiteDownloadDirs should not override",
+				config: &args{WhiteDownloadDirs: []string{"/old/dir1", "/old/dir2"}},
+				cliConfig: &args{
+					WhiteDownloadDirs: nil,
+				},
+				expected: &args{WhiteDownloadDirs: []string{"/old/dir1", "/old/dir2"}},
+			},
+			{
+				name:   "non-nil cli WhiteDownloadDirs should override",
+				config: &args{WhiteDownloadDirs: []string{"/old/dir1"}},
+				cliConfig: &args{
+					WhiteDownloadDirs: []string{"/new/dir1", "/new/dir2"},
+				},
+				expected: &args{WhiteDownloadDirs: []string{"/new/dir1", "/new/dir2"}},
+			},
+			{
+				name:   "empty cli WhiteDownloadDirs should override with empty slice",
+				config: &args{WhiteDownloadDirs: []string{"/old/dir1"}},
+				cliConfig: &args{
+					WhiteDownloadDirs: []string{},
+				},
+				expected: &args{WhiteDownloadDirs: []string{}},
+			},
+		}
+
+		for _, tt := range tests {
+			t.Run(tt.name, func(t *testing.T) {
+				overrideWithCliArgs(tt.config, tt.cliConfig)
+				if !reflect.DeepEqual(tt.config, tt.expected) {
+					t.Errorf("overrideWithCliArgs() = %+v, want %+v", tt.config, tt.expected)
+				}
+			})
+		}
+	})
+
+	t.Run("loadConfigFile should handle WhiteDownloadDirs", func(t *testing.T) {
+		// Create temporary directory for test files
+		tempDir, err := os.MkdirTemp("", "flags_test_whitedirs")
+		if err != nil {
+			t.Fatal(err)
+		}
+		defer os.RemoveAll(tempDir)
+
+		tests := []struct {
+			name       string
+			configData string
+			fileName   string
+			expected   *args
+		}{
+			{
+				name: "config with WhiteDownloadDirs array",
+				configData: `{
+					"address": "test.example.com",
+					"whiteDownloadDirs": ["/path/to/dir1", "/path/to/dir2", "/path/to/dir3"]
+				}`,
+				fileName: "whitedirs_config.json",
+				expected: &args{
+					Address:           stringPtr("test.example.com"),
+					WhiteDownloadDirs: []string{"/path/to/dir1", "/path/to/dir2", "/path/to/dir3"},
+				},
+			},
+			{
+				name: "config with empty WhiteDownloadDirs array",
+				configData: `{
+					"address": "test.example.com",
+					"whiteDownloadDirs": []
+				}`,
+				fileName: "empty_whitedirs_config.json",
+				expected: &args{
+					Address:           stringPtr("test.example.com"),
+					WhiteDownloadDirs: []string{},
+				},
+			},
+			{
+				name: "config without WhiteDownloadDirs",
+				configData: `{
+					"address": "test.example.com",
+					"port": 8080
+				}`,
+				fileName: "no_whitedirs_config.json",
+				expected: &args{
+					Address: stringPtr("test.example.com"),
+					Port:    intPtr(8080),
+				},
+			},
+		}
+
+		for _, tt := range tests {
+			t.Run(tt.name, func(t *testing.T) {
+				// Create test config file
+				configPath := filepath.Join(tempDir, tt.fileName)
+				err := os.WriteFile(configPath, []byte(tt.configData), 0644)
+				if err != nil {
+					t.Fatal(err)
+				}
+
+				cfg := &args{}
+				loadConfigFile(cfg, configPath)
+
+				if !reflect.DeepEqual(cfg, tt.expected) {
+					t.Errorf("loadConfigFile() = %+v, want %+v", cfg, tt.expected)
+				}
+			})
+		}
+	})
+
+	t.Run("loadEnvVars should handle WhiteDownloadDirs", func(t *testing.T) {
+		// Save original environment
+		originalEnv := os.Getenv("GOPEED_WHITEDOWNLOADDIRS")
+		defer func() {
+			if originalEnv != "" {
+				os.Setenv("GOPEED_WHITEDOWNLOADDIRS", originalEnv)
+			} else {
+				os.Unsetenv("GOPEED_WHITEDOWNLOADDIRS")
+			}
+		}()
+
+		tests := []struct {
+			name     string
+			envValue string
+			expected *args
+		}{
+			{
+				name:     "comma-separated directories",
+				envValue: "/env/dir1,/env/dir2,/env/dir3",
+				expected: &args{
+					WhiteDownloadDirs: []string{"/env/dir1", "/env/dir2", "/env/dir3"},
+				},
+			},
+			{
+				name:     "comma-separated with spaces",
+				envValue: " /env/dir1 , /env/dir2 , /env/dir3 ",
+				expected: &args{
+					WhiteDownloadDirs: []string{"/env/dir1", "/env/dir2", "/env/dir3"},
+				},
+			},
+			{
+				name:     "single directory",
+				envValue: "/single/dir",
+				expected: &args{
+					WhiteDownloadDirs: []string{"/single/dir"},
+				},
+			},
+			{
+				name:     "empty string should create empty slice",
+				envValue: "",
+				expected: &args{},
+			},
+		}
+
+		for _, tt := range tests {
+			t.Run(tt.name, func(t *testing.T) {
+				// Clear environment variable first
+				os.Unsetenv("GOPEED_WHITEDOWNLOADDIRS")
+
+				if tt.envValue != "" {
+					os.Setenv("GOPEED_WHITEDOWNLOADDIRS", tt.envValue)
+				}
+
+				cfg := &args{}
+				loadEnvVars(cfg)
+
+				if !reflect.DeepEqual(cfg, tt.expected) {
+					t.Errorf("loadEnvVars() = %+v, want %+v", cfg, tt.expected)
+				}
+			})
+		}
+	})
+}
@@ -6,11 +6,12 @@ package main
 import (
 	"embed"
 	"fmt"
-	"github.com/GopeedLab/gopeed/cmd"
-	"github.com/GopeedLab/gopeed/pkg/rest/model"
 	"io/fs"
 	"os"
 	"path/filepath"
+
+	"github.com/GopeedLab/gopeed/cmd"
+	"github.com/GopeedLab/gopeed/pkg/rest/model"
 )

 //go:embed dist/*
@@ -23,36 +24,37 @@ func main() {
 	}

 	args := parse()
-	var webBasicAuth *model.WebBasicAuth
+	var webAuth *model.WebAuth
 	if isNotBlank(args.Username) && isNotBlank(args.Password) {
-		webBasicAuth = &model.WebBasicAuth{
+		webAuth = &model.WebAuth{
 			Username: *args.Username,
 			Password: *args.Password,
 		}
 	}

-	var dir string
+	var storageDir string
 	if args.StorageDir != nil && *args.StorageDir != "" {
-		dir = *args.StorageDir
+		storageDir = *args.StorageDir
 	} else {
 		exe, err := os.Executable()
 		if err != nil {
 			panic(err)
 		}
-		dir = filepath.Dir(exe)
+		storageDir = filepath.Join(filepath.Dir(exe), "storage")
 	}

 	cfg := &model.StartConfig{
-		Network:        "tcp",
-		Address:        fmt.Sprintf("%s:%d", *args.Address, *args.Port),
-		Storage:        model.StorageBolt,
-		StorageDir:     filepath.Join(dir, "storage"),
-		ApiToken:       *args.ApiToken,
-		DownloadConfig: args.DownloadConfig,
-		ProductionMode: true,
-		WebEnable:      true,
-		WebFS:          sub,
-		WebBasicAuth:   webBasicAuth,
+		Network:           "tcp",
+		Address:           fmt.Sprintf("%s:%d", *args.Address, *args.Port),
+		Storage:           model.StorageBolt,
+		StorageDir:        storageDir,
+		WhiteDownloadDirs: args.WhiteDownloadDirs,
+		ApiToken:          *args.ApiToken,
+		DownloadConfig:    args.DownloadConfig,
+		ProductionMode:    true,
+		WebEnable:         true,
+		WebFS:             sub,
+		WebAuth:           webAuth,
 	}
 	cmd.Start(cfg)
 }
@@ -13,6 +13,7 @@ require (
 	github.com/go-git/go-git/v5 v5.8.1
 	github.com/gorilla/handlers v1.5.1
 	github.com/gorilla/mux v1.8.0
+	github.com/imroc/req/v3 v3.52.2
 	github.com/matoous/go-nanoid/v2 v2.0.0
 	github.com/mattn/go-ieproxy v0.0.12
 	github.com/pkg/errors v0.9.1
@@ -21,17 +22,29 @@ require (
 	github.com/xiaoqidun/setft v0.0.0-20220310121541-be86327699ad
 	go.etcd.io/bbolt v1.3.11
 	golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f
-	golang.org/x/sync v0.9.0
+	golang.org/x/sync v0.13.0
 )

 require (
+	github.com/andybalholm/brotli v1.1.1 // indirect
 	github.com/ebitengine/purego v0.8.1 // indirect
 	github.com/go-ole/go-ole v1.2.6 // indirect
+	github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
+	github.com/hashicorp/errwrap v1.1.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/icholy/digest v1.1.0 // indirect
+	github.com/klauspost/compress v1.18.0 // indirect
 	github.com/lufia/plan9stats v0.0.0-20220913051719-115f729f3c8c // indirect
+	github.com/onsi/ginkgo/v2 v2.23.4 // indirect
 	github.com/power-devops/perfstat v0.0.0-20220216144756-c35f1ee13d7c // indirect
+	github.com/quic-go/qpack v0.5.1 // indirect
+	github.com/quic-go/quic-go v0.51.0 // indirect
+	github.com/refraction-networking/utls v1.6.7 // indirect
 	github.com/tklauser/go-sysconf v0.3.12 // indirect
 	github.com/tklauser/numcpus v0.6.1 // indirect
 	github.com/yusufpapurcu/wmi v1.2.4 // indirect
+	go.uber.org/automaxprocs v1.6.0 // indirect
+	go.uber.org/mock v0.5.1 // indirect
 )

 require (
@@ -61,7 +74,7 @@ require (
 	github.com/bits-and-blooms/bitset v1.15.0 // indirect
 	github.com/bradfitz/iter v0.0.0-20191230175014-e8f45d346db8 // indirect
 	github.com/cespare/xxhash v1.1.0 // indirect
-	github.com/cloudflare/circl v1.3.3 // indirect
+	github.com/cloudflare/circl v1.6.1 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/dlclark/regexp2 v1.11.4 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
@@ -77,7 +90,7 @@ require (
 	github.com/go-sourcemap/sourcemap v2.1.4+incompatible // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/google/btree v1.1.3 // indirect
-	github.com/google/pprof v0.0.0-20240910150728-a0b0bb1d4134 // indirect
+	github.com/google/pprof v0.0.0-20250423184734-337e5dd93bb4 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/websocket v1.5.3 // indirect
 	github.com/huandu/xstrings v1.5.0 // indirect
@@ -122,13 +135,13 @@ require (
 	go.opentelemetry.io/otel v1.32.0 // indirect
 	go.opentelemetry.io/otel/metric v1.32.0 // indirect
 	go.opentelemetry.io/otel/trace v1.32.0 // indirect
-	golang.org/x/crypto v0.29.0 // indirect
-	golang.org/x/mod v0.22.0 // indirect
-	golang.org/x/net v0.31.0 // indirect
-	golang.org/x/sys v0.28.0 // indirect
-	golang.org/x/text v0.20.0 // indirect
+	golang.org/x/crypto v0.37.0 // indirect
+	golang.org/x/mod v0.24.0 // indirect
+	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/text v0.24.0 // indirect
 	golang.org/x/time v0.8.0 // indirect
-	golang.org/x/tools v0.27.0 // indirect
+	golang.org/x/tools v0.32.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	lukechampine.com/blake3 v1.3.0 // indirect
 	modernc.org/libc v1.61.0 // indirect
@@ -94,6 +94,8 @@ github.com/anacrolix/upnp v0.1.4 h1:+2t2KA6QOhm/49zeNyeVwDu1ZYS9dB9wfxyVvh/wk7U=
 github.com/anacrolix/upnp v0.1.4/go.mod h1:Qyhbqo69gwNWvEk1xNTXsS5j7hMHef9hdr984+9fIic=
 github.com/anacrolix/utp v0.2.0 h1:65Cdmr6q9WSw2KsM+rtJFu7rqDzLl2bdysf4KlNPcFI=
 github.com/anacrolix/utp v0.2.0/go.mod h1:HGk4GYQw1O/3T1+yhqT/F6EcBd+AAwlo9dYErNy7mj8=
+github.com/andybalholm/brotli v1.1.1 h1:PR2pgnyFznKEugtsUo0xLdDop5SKXd5Qf5ysW+7XdTA=
+github.com/andybalholm/brotli v1.1.1/go.mod h1:05ib4cKhjx3OQYUY22hTVd34Bc8upXjOLL2rKwwZBoA=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
 github.com/apache/thrift v0.12.0/go.mod h1:cp2SuWMxlEZw2r+iP2GNCdIi4C1qmUzdZFSVb+bacwQ=
@@ -122,8 +124,9 @@ github.com/chzyer/logex v1.2.0/go.mod h1:9+9sk7u7pGNWYMkh0hdiL++6OeibzJccyQU4p4M
 github.com/chzyer/readline v1.5.0/go.mod h1:x22KAscuvRqlLoK9CsoYsmxoXZMMFVyOl86cAH8qUic=
 github.com/chzyer/test v0.0.0-20210722231415-061457976a23/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
-github.com/cloudflare/circl v1.3.3 h1:fE/Qz0QdIGqeWfnwq0RE0R7MI51s0M2E4Ga9kq5AEMs=
 github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
+github.com/cloudflare/circl v1.6.1 h1:zqIqSPIndyBh1bjLVVDHMPpVKqp8Su/V+6MeDzzQBQ0=
+github.com/cloudflare/circl v1.6.1/go.mod h1:uddAzsPgqdMAYatqJ0lsjX1oECcQLIlRpzZh3pJrofs=
 github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -196,6 +199,8 @@ github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZs
 github.com/go-sourcemap/sourcemap v2.1.4+incompatible h1:a+iTbH5auLKxaNwQFg0B+TCYl6lbukKPc7b5x0n1s6Q=
 github.com/go-sourcemap/sourcemap v2.1.4+incompatible/go.mod h1:F8jJfvm2KbVjc5NqelyYJmf/v5J0dwNLS2mL4sNA1Jg=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
+github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
+github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
 github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
@@ -229,12 +234,12 @@ github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26/go.mod h1:dDKJzRmX4S37WGHujM7tX//fmj1uioxKzKxz3lo4HJo=
-github.com/google/pprof v0.0.0-20240910150728-a0b0bb1d4134 h1:c5FlPPgxOn7kJz3VoPLkQYQXGBS3EklQ4Zfi57uOuqQ=
-github.com/google/pprof v0.0.0-20240910150728-a0b0bb1d4134/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
+github.com/google/pprof v0.0.0-20250423184734-337e5dd93bb4 h1:gD0vax+4I+mAj+jEChEf25Ia07Jq7kYOFO5PPhAxFl4=
+github.com/google/pprof v0.0.0-20250423184734-337e5dd93bb4/go.mod h1:5hDyRhoBCxViHszMt12TnOpEI4VVi+U8Gm9iphldiMA=
 github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
@@ -250,6 +255,11 @@ github.com/gorilla/mux v1.8.0 h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=
 github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
 github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg=
 github.com/gorilla/websocket v1.5.3/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
+github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
+github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
+github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
+github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
+github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
 github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
 github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSow5/V2vxeg=
@@ -262,6 +272,10 @@ github.com/huandu/xstrings v1.3.2/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq
 github.com/huandu/xstrings v1.5.0 h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI=
 github.com/huandu/xstrings v1.5.0/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq4ovT0aE=
 github.com/ianlancetaylor/demangle v0.0.0-20220319035150-800ac71e25c2/go.mod h1:aYm2/VgdVmcIU8iMfdMvDMsRAQjcfZSKFby6HOFvi/w=
+github.com/icholy/digest v1.1.0 h1:HfGg9Irj7i+IX1o1QAmPfIBNu/Q5A5Tu3n/MED9k9H4=
+github.com/icholy/digest v1.1.0/go.mod h1:QNrsSGQ5v7v9cReDI0+eyjsXGUoRSUZQHeQ5C4XLa0Y=
+github.com/imroc/req/v3 v3.52.2 h1:xJocr1aIv0a2K9knfBQ4JnZHk+kWTITdjf0mgDg229I=
+github.com/imroc/req/v3 v3.52.2/go.mod h1:dBGsDloOSZJcFs6PnTjZXYBJK70OXbZpizHBLNqcH2k=
 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A=
 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
 github.com/jpillora/backoff v1.0.0/go.mod h1:J/6gKK9jxlEcS3zixgDgUAsiuZ7yrSoa/FX5e0EB2j4=
@@ -277,6 +291,8 @@ github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:C
 github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4=
 github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
+github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
 github.com/klauspost/cpuid/v2 v2.2.9 h1:66ze0taIn2H33fBvCkXuv9BmCwDfafmiIVpKV9kKGuY=
 github.com/klauspost/cpuid/v2 v2.2.9/go.mod h1:rqkxqrZ1EhYM9G+hXH7YdowN5R5RGN6NK4QwQ3WMXF8=
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
@@ -331,7 +347,11 @@ github.com/ncruces/go-strftime v0.1.9/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJm
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
 github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
+github.com/onsi/ginkgo/v2 v2.23.4 h1:ktYTpKJAVZnDT4VjxSbiBenUjmlL/5QkBEocaWXiQus=
+github.com/onsi/ginkgo/v2 v2.23.4/go.mod h1:Bt66ApGPBFzHyR+JO10Zbt0Gsp4uWxu5mIOTusL46e8=
 github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
+github.com/onsi/gomega v1.36.3 h1:hID7cr8t3Wp26+cYnfcjR6HpJ00fdogN6dqZ1t6IylU=
+github.com/onsi/gomega v1.36.3/go.mod h1:8D9+Txp43QWKhM24yyOBEdpkzN8FvJyAwecBgsU4KU0=
 github.com/openzipkin/zipkin-go v0.1.6/go.mod h1:QgAqvLzwWbR/WpD4A3cGpPtJrZXNIiJc5AZX7/PBEpw=
 github.com/philhofer/fwd v1.0.0/go.mod h1:gk3iGcWd9+svBvR0sR+KPcfE+RNWozjowpeBVG3ZVNU=
 github.com/pierrec/lz4 v2.0.5+incompatible/go.mod h1:pdkljMzZIN41W+lC3N2tnIh5sFi+IEE17M5jbnwPHcY=
@@ -380,6 +400,8 @@ github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZb
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/power-devops/perfstat v0.0.0-20220216144756-c35f1ee13d7c h1:NRoLoZvkBTKvR5gQLgA3e0hqjkY9u1wm+iOL45VN/qI=
 github.com/power-devops/perfstat v0.0.0-20220216144756-c35f1ee13d7c/go.mod h1:OmDBASR4679mdNQnz2pUhc2G8CO2JrUAVFDRBDP/hJE=
+github.com/prashantv/gostub v1.1.0 h1:BTyx3RfQjRHnUWaGF9oQos79AlQ5k8WNktv7VGvVH4g=
+github.com/prashantv/gostub v1.1.0/go.mod h1:A5zLQHz7ieHGG7is6LLXLz7I8+3LZzsrV0P1IAHhP5U=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
 github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829/go.mod h1:p2iRAGwDERtqlqzRXnrOVns+ignqQo//hLXqYxZYVNs=
 github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
@@ -404,7 +426,13 @@ github.com/prometheus/procfs v0.1.3/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4O
 github.com/prometheus/procfs v0.6.0/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
 github.com/protolambda/ctxlock v0.1.0 h1:rCUY3+vRdcdZXqT07iXgyr744J2DU2LCBIXowYAjBCE=
 github.com/protolambda/ctxlock v0.1.0/go.mod h1:vefhX6rIZH8rsg5ZpOJfEDYQOppZi19SfPiGOFrNnwM=
+github.com/quic-go/qpack v0.5.1 h1:giqksBPnT/HDtZ6VhtFKgoLOWmlyo9Ei6u9PqzIMbhI=
+github.com/quic-go/qpack v0.5.1/go.mod h1:+PC4XFrEskIVkcLzpEkbLqq1uCoxPhQuvK5rH1ZgaEg=
+github.com/quic-go/quic-go v0.51.0 h1:K8exxe9zXxeRKxaXxi/GpUqYiTrtdiWP8bo1KFya6Wc=
+github.com/quic-go/quic-go v0.51.0/go.mod h1:MFlGGpcpJqRAfmYi6NC2cptDPSxRWTOGNuP4wqrWmzQ=
 github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
+github.com/refraction-networking/utls v1.6.7 h1:zVJ7sP1dJx/WtVuITug3qYUq034cDq9B2MR1K67ULZM=
+github.com/refraction-networking/utls v1.6.7/go.mod h1:BC3O4vQzye5hqpmDTWUqi4P5DDhzJfkV1tdqtawQIH0=
 github.com/remyoudompheng/bigfft v0.0.0-20200410134404-eec4a21b6bb0/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
@@ -452,8 +480,9 @@ github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/
 github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
 github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
-github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
 github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 github.com/tidwall/btree v1.7.0 h1:L1fkJH/AuEh5zBnnBbmTwQ5Lt+bRJ5A8EWecslvo9iI=
 github.com/tidwall/btree v1.7.0/go.mod h1:twD9XRA5jj9VUQGELzDO4HPQTNJsoWWfYEL+EUQ2cKY=
 github.com/tinylib/msgp v1.0.2/go.mod h1:+d+yLhGm8mzTaHzB+wgMYrodPfmZrzkirds8fDWklFE=
@@ -471,6 +500,8 @@ github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM
 github.com/xanzy/ssh-agent v0.3.3/go.mod h1:6dzNDKs0J9rVPHPhaGCukekBHKqfl+L3KghI1Bc68Uw=
 github.com/xiaoqidun/setft v0.0.0-20220310121541-be86327699ad h1:QtuWk6dsrNXc/ugwCBEN0jG52q/4tXRzMvZm4fH6T9g=
 github.com/xiaoqidun/setft v0.0.0-20220310121541-be86327699ad/go.mod h1:Jj8p9bgKGTPQ+M8CdUMS9p7Mmdoxa3OAcAjJQBu0CcI=
+github.com/xyproto/randomstring v1.0.5 h1:YtlWPoRdgMu3NZtP45drfy1GKoojuR7hmRcnhZqKjWU=
+github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E=
 github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.4.1/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
@@ -487,8 +518,12 @@ go.opentelemetry.io/otel/metric v1.32.0 h1:xV2umtmNcThh2/a/aCP+h64Xx5wsj8qqnkYZk
 go.opentelemetry.io/otel/metric v1.32.0/go.mod h1:jH7CIbbK6SH2V2wE16W05BHCtIDzauciCRLoc/SyMv8=
 go.opentelemetry.io/otel/trace v1.32.0 h1:WIC9mYrXf8TmY/EXuULKc8hR17vE+Hjv2cssQDe03fM=
 go.opentelemetry.io/otel/trace v1.32.0/go.mod h1:+i4rkvCraA+tG6AzwloGaCtkx53Fa+L+V8e9a7YvhT8=
+go.uber.org/automaxprocs v1.6.0 h1:O3y2/QNTOdbF+e/dpXNNW7Rx2hZ4sTIPyybbxyNqTUs=
+go.uber.org/automaxprocs v1.6.0/go.mod h1:ifeIMSnPZuznNm6jmdzmU3/bfk01Fe2fotchwEFJ8r8=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
+go.uber.org/mock v0.5.1 h1:ASgazW/qBmR+A32MYFDB6E2POoTgOwT509VP0CT/fjs=
+go.uber.org/mock v0.5.1/go.mod h1:ge71pBPLYDk7QIi1LupWxdAykm7KIEFchiOqd6z7qMM=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
@@ -497,8 +532,8 @@ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5y
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
-golang.org/x/crypto v0.29.0 h1:L5SG1JTTXupVV3n6sUqMTeWbjAyfPwoda2DLX8J8FrQ=
-golang.org/x/crypto v0.29.0/go.mod h1:+F4F4N5hv6v38hfeYwTdx20oUvLLc+QfrE9Ax9HtgRg=
+golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
+golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20220428152302-39d4317da171/go.mod h1:lgLbSvA5ygNOMpwM/9anMpWVlVJ7Z+cHWq/eFuinpGE=
 golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f h1:XdNn9LlyWAhLVp6P/i8QYBW+hlyhrhei9uErw2B5GJo=
@@ -512,8 +547,8 @@ golang.org/x/mod v0.5.1/go.mod h1:5OXOZSfqPIIbmVBIIKWRFfZjPR0E5r58TLhUjH0a2Ro=
 golang.org/x/mod v0.6.0-dev.0.20211013180041-c96bc1413d57/go.mod h1:3p9vT2HGsQu2K1YbXdKPJLVgG5VJdoTa1poYQBtP1AY=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.22.0 h1:D4nJWe9zXqHOmWqj4VMOJhvzj7bEZg4wEYa759z1pH4=
-golang.org/x/mod v0.22.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY=
+golang.org/x/mod v0.24.0 h1:ZfthKaKaT4NrhGVZHO1/WDTwGES4De8KtWO0SIbNJMU=
+golang.org/x/mod v0.24.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -535,8 +570,8 @@ golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.7.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
-golang.org/x/net v0.31.0 h1:68CPQngjLL0r2AlUKiSxtQFKvzRVbnzLwMUn5SzcLHo=
-golang.org/x/net v0.31.0/go.mod h1:P4fl1q7dY2hnZFxEk4pPSkDHF+QqjitcnDjUQyMM+pM=
+golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
+golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -550,8 +585,8 @@ golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.9.0 h1:fEo0HyrW1GIgZdpbhCRO0PkJajUS5H9IFUztCgEo2jQ=
-golang.org/x/sync v0.9.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.13.0 h1:AauUjRAJ9OSnvULf/ARrrVywoJDy0YS2AwQ98I37610=
+golang.org/x/sync v0.13.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -590,17 +625,15 @@ golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.11.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.27.0 h1:wBqf8DvsY9Y/2P8gAfPDEYNuS30J4lPHJxXSb/nJZ+s=
-golang.org/x/sys v0.27.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
-golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
+golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
-golang.org/x/term v0.26.0 h1:WEQa6V3Gja/BhNxg540hBip/kkaYtRg3cxg4oXSw4AU=
-golang.org/x/term v0.26.0/go.mod h1:Si5m1o57C5nBNQo5z1iq+XDijt21BDBDp2bK0QI8e3E=
+golang.org/x/term v0.31.0 h1:erwDkOK1Msy6offm1mOgvspSkslFnIGsFnxOKoufg3o=
+golang.org/x/term v0.31.0/go.mod h1:R4BeIy7D95HzImkxGkTW1UQTtP54tio2RyHz7PwK0aw=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@@ -609,8 +642,8 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
-golang.org/x/text v0.20.0 h1:gK/Kv2otX8gz+wn7Rmb3vT96ZwuoxnQlY+HlJVj7Qug=
-golang.org/x/text v0.20.0/go.mod h1:D4IsuqiFMhST5bX19pQ9ikHC2GsaKyk/oF+pn3ducp4=
+golang.org/x/text v0.24.0 h1:dd5Bzh4yt5KYA8f9CJHCP4FB4D51c2c6JvN37xJJkJ0=
+golang.org/x/text v0.24.0/go.mod h1:L8rBsPeo2pSS+xqN0d5u2ikmjtmoJbDBT1b7nHvFCdU=
 golang.org/x/time v0.8.0 h1:9i3RxcPv3PZnitoVGMPDKZSq1xW1gK1Xy3ArNOGZfEg=
 golang.org/x/time v0.8.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
 golang.org/x/tools v0.0.0-20180828015842-6cd1fcedba52/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
@@ -624,8 +657,8 @@ golang.org/x/tools v0.0.0-20201124115921-2c860bdd6e78/go.mod h1:emZCQorbCU4vsT4f
 golang.org/x/tools v0.1.8-0.20211029000441-d6a9af8af023/go.mod h1:nABZi5QlRsZVlzPpHl034qft6wpY4eDcsTt5AaioBiU=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.27.0 h1:qEKojBykQkQ4EynWy4S8Weg69NumxKdn40Fce3uc/8o=
-golang.org/x/tools v0.27.0/go.mod h1:sUi0ZgbwW9ZPAq26Ekut+weQPR5eIM6GQLQ1Yjm1H0Q=
+golang.org/x/tools v0.32.0 h1:Q7N1vhpkQv7ybVzLFtTjvQya2ewbwNDZzUgfXGqtMWU=
+golang.org/x/tools v0.32.0/go.mod h1:ZxrU41P/wAbZD8EDa6dDCa6XfpkhJ7HFMjHJXfBDu8s=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -646,6 +679,8 @@ google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miE
 google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
 google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
 google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
+google.golang.org/protobuf v1.36.5 h1:tPhr+woSbjfYvY6/GPufUoYizxw1cF/yFoxJ2fmpwlM=
+google.golang.org/protobuf v1.36.5/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -667,6 +702,8 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gotest.tools/v3 v3.5.1 h1:EENdUnS3pdur5nybKYIh2Vfgc8IUNBjxDPSjtiJcOzU=
+gotest.tools/v3 v3.5.1/go.mod h1:isy3WKz7GK6uNw/sbHzfKBLvlvXwUyV06n6brMxxopU=
 honnef.co/go/tools v0.0.0-20180728063816-88497007e858/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 lukechampine.com/blake3 v1.3.0 h1:sJ3XhFINmHSrYCgl958hscfIa3bw8x4DqMP3u1YvoYE=
@@ -24,8 +24,10 @@ type DefaultFileController struct {

 func NewController() *Controller {
 	return &Controller{
-		GetConfig:      func(v any) {},
-		GetProxy:       func(requestProxy *base.RequestProxy) func(*http.Request) (*url.URL, error) { return nil },
+		GetConfig: func(v any) {},
+		GetProxy: func(requestProxy *base.RequestProxy) func(*http.Request) (*url.URL, error) {
+			return requestProxy.ToHandler()
+		},
 		FileController: &DefaultFileController{},
 	}
 }
@@ -4,7 +4,7 @@ type config struct {
 	ListenPort int      `json:"listenPort"`
 	Trackers   []string `json:"trackers"`
 	// SeedKeep is always keep seeding after downloading is complete, unless manually stopped.
-	SeedKeep bool `json:"seedKeep`
+	SeedKeep bool `json:"seedKeep"`
 	// SeedRatio is the ratio of uploaded data to downloaded data to seed.
 	SeedRatio float64 `json:"seedRatio"`
 	// SeedTime is the time in seconds to seed after downloading is complete.
@@ -4,13 +4,6 @@ import (
 	"bytes"
 	"context"
 	"fmt"
-	"github.com/GopeedLab/gopeed/internal/controller"
-	"github.com/GopeedLab/gopeed/internal/fetcher"
-	"github.com/GopeedLab/gopeed/pkg/base"
-	"github.com/GopeedLab/gopeed/pkg/protocol/bt"
-	"github.com/GopeedLab/gopeed/pkg/util"
-	"github.com/anacrolix/torrent"
-	"github.com/anacrolix/torrent/metainfo"
 	"io"
 	"net/url"
 	"os"
@@ -19,6 +12,14 @@ import (
 	"sync"
 	"sync/atomic"
 	"time"
+
+	"github.com/GopeedLab/gopeed/internal/controller"
+	"github.com/GopeedLab/gopeed/internal/fetcher"
+	"github.com/GopeedLab/gopeed/pkg/base"
+	"github.com/GopeedLab/gopeed/pkg/protocol/bt"
+	"github.com/GopeedLab/gopeed/pkg/util"
+	"github.com/anacrolix/torrent"
+	"github.com/anacrolix/torrent/metainfo"
 )

 var (
@@ -100,9 +101,6 @@ func (f *Fetcher) initClient() (err error) {
 }

 func (f *Fetcher) Resolve(req *base.Request) error {
-	if err := base.ParseReqExtra[bt.ReqExtra](req); err != nil {
-		return err
-	}
 	f.meta.Req = req
 	if err := f.addTorrent(req, false); err != nil {
 		return err
@@ -355,10 +353,14 @@ func (f *Fetcher) WaitUpload() (err error) {
 }

 func (f *Fetcher) addTorrent(req *base.Request, fromUpload bool) (err error) {
+	if err = base.ParseReqExtra[bt.ReqExtra](req); err != nil {
+		return
+	}
 	if err = f.initClient(); err != nil {
 		return
 	}
 	schema := util.ParseSchema(req.URL)
+	privateTorrent := false
 	if schema == "MAGNET" {
 		f.torrent, err = client.AddMagnet(req.URL)
 	} else {
@@ -388,34 +390,46 @@ func (f *Fetcher) addTorrent(req *base.Request, fromUpload bool) (err error) {
 		if err != nil && !strings.Contains(err.Error(), "expected EOF") {
 			return err
 		}
+
+		info, er := metaInfo.UnmarshalInfo()
+		if er != nil {
+			return er
+		}
+
+		if info.Private != nil && *info.Private {
+			privateTorrent = true
+		}
 		f.torrent, err = client.AddTorrent(metaInfo)
 	}
 	if err != nil {
 		return
 	}

-	// use map to deduplicate
-	trackers := make(map[string]bool)
-	if req.Extra != nil {
-		extra := req.Extra.(*bt.ReqExtra)
-		if len(extra.Trackers) > 0 {
-			for _, tracker := range extra.Trackers {
+	// Do not add external tracker to a private torrent.
+	if !privateTorrent {
+		// use map to deduplicate
+		trackers := make(map[string]bool)
+		if req.Extra != nil {
+			extra := req.Extra.(*bt.ReqExtra)
+			if len(extra.Trackers) > 0 {
+				for _, tracker := range extra.Trackers {
+					trackers[tracker] = true
+				}
+			}
+		}
+		if len(f.config.Trackers) > 0 {
+			for _, tracker := range f.config.Trackers {
 				trackers[tracker] = true
 			}
 		}
-	}
-	if len(f.config.Trackers) > 0 {
-		for _, tracker := range f.config.Trackers {
-			trackers[tracker] = true
+		if len(trackers) > 0 {
+			announceList := make([][]string, 0)
+			for tracker := range trackers {
+				announceList = append(announceList, []string{tracker})
+			}
+			f.torrent.AddTrackers(announceList)
 		}
 	}
-	if len(trackers) > 0 {
-		announceList := make([][]string, 0)
-		for tracker := range trackers {
-			announceList = append(announceList, []string{tracker})
-		}
-		f.torrent.AddTrackers(announceList)
-	}
 	<-f.torrent.GotInfo()
 	f.torrentReady.Store(true)

@@ -16,6 +16,7 @@ import (
 	"path"
 	"strconv"
 	"strings"
+	"sync"
 	"time"

 	"github.com/GopeedLab/gopeed/internal/controller"
@@ -26,8 +27,11 @@ import (
 	"golang.org/x/sync/errgroup"
 )

-const connectTimeout = 15 * time.Second
-const readTimeout = 15 * time.Second
+const (
+	connectTimeout = 15 * time.Second
+	readTimeout    = 15 * time.Second
+	helpMinSize    = 1 * 1024 * 1024
+)

 type RequestError struct {
 	Code int
@@ -46,11 +50,22 @@ type chunk struct {
 	Begin      int64
 	End        int64
 	Downloaded int64
+}
+
+type connection struct {
+	Chunk      *chunk
+	Downloaded int64
+	Completed  bool

 	failed     bool
 	retryTimes int
 }

+// get remain to download bytes
+func (c *chunk) remain() int64 {
+	return c.End - c.Begin + 1 - c.Downloaded
+}
+
 func newChunk(begin int64, end int64) *chunk {
 	return &chunk{
 		Begin: begin,
@@ -63,8 +78,11 @@ type Fetcher struct {
 	config *config
 	doneCh chan error

-	meta   *fetcher.FetcherMeta
-	chunks []*chunk
+	meta         *fetcher.FetcherMeta
+	connections  []*connection
+	helpLock     sync.Mutex
+	redirectURL  string
+	redirectLock sync.Mutex

 	file   *os.File
 	cancel context.CancelFunc
@@ -156,6 +174,12 @@ func (f *Fetcher) Resolve(req *base.Request) error {
 			} else {
 				file.Name = filename
 			}
+		} else {
+			substr := "attachment; filename="
+			index := strings.Index(contentDisposition, substr)
+			if index != -1 {
+				file.Name = contentDisposition[index+len(substr):]
+			}
 		}
 	}
 	// get file filePath by URL
@@ -217,9 +241,10 @@ func (f *Fetcher) Start() (err error) {
 		return err
 	}

-	if f.chunks == nil {
-		f.chunks = f.splitChunk()
+	if f.connections == nil {
+		f.connections = f.splitConnection()
 	}
+	f.redirectURL = ""
 	f.fetch()
 	return
 }
@@ -246,16 +271,26 @@ func (f *Fetcher) Meta() *fetcher.FetcherMeta {
 }

 func (f *Fetcher) Stats() any {
-	// todo http download health
-	return &fhttp.Stats{}
+	statsConnections := make([]*fhttp.StatsConnection, 0)
+	for _, connection := range f.connections {
+		statsConnections = append(statsConnections, &fhttp.StatsConnection{
+			Downloaded: connection.Downloaded,
+			Completed:  connection.Completed,
+			Failed:     connection.failed,
+			RetryTimes: connection.retryTimes,
+		})
+	}
+	return &fhttp.Stats{
+		Connections: statsConnections,
+	}
 }

 func (f *Fetcher) Progress() fetcher.Progress {
 	p := make(fetcher.Progress, 0)
-	if len(f.chunks) > 0 {
+	if len(f.connections) > 0 {
 		total := int64(0)
-		for _, chunk := range f.chunks {
-			total += chunk.Downloaded
+		for _, connection := range f.connections {
+			total += connection.Downloaded
 		}
 		p = append(p, total)
 	}
@@ -270,16 +305,16 @@ func (f *Fetcher) fetch() {
 	var ctx context.Context
 	ctx, f.cancel = context.WithCancel(context.Background())
 	f.eg, _ = errgroup.WithContext(ctx)
-	chunkErrs := make([]error, len(f.chunks))
-	for i := 0; i < len(f.chunks); i++ {
+	connectionErrs := make([]error, len(f.connections))
+	for i := 0; i < len(f.connections); i++ {
 		i := i
 		f.eg.Go(func() error {
-			err := f.fetchChunk(i, ctx)
+			err := f.run(i, ctx)
 			// if canceled, fail fast
 			if errors.Is(err, context.Canceled) {
 				return err
 			}
-			chunkErrs[i] = err
+			connectionErrs[i] = err
 			return nil
 		})
 	}
@@ -291,7 +326,7 @@ func (f *Fetcher) fetch() {
 			return
 		}
 		// check all fetch results, if any error, return
-		for _, chunkErr := range chunkErrs {
+		for _, chunkErr := range connectionErrs {
 			if chunkErr != nil {
 				err = chunkErr
 				break
@@ -307,107 +342,192 @@ func (f *Fetcher) fetch() {
 	}()
 }

-func (f *Fetcher) fetchChunk(index int, ctx context.Context) (err error) {
-	chunk := f.chunks[index]
-	chunk.failed = false
-	chunk.retryTimes = 0
-
+func (f *Fetcher) run(index int, ctx context.Context) (err error) {
+	connection := f.connections[index]
+	connection.failed = false
+	connection.retryTimes = 0
 	var (
 		client = f.buildClient()
 		buf    = make([]byte, 8192)
 	)
-	// retry until all remain chunks failed
-	for {
-		// if chunk is completed, return
-		if f.meta.Res.Range && chunk.Downloaded >= chunk.End-chunk.Begin+1 {
-			return nil
-		}
-		// if all chunks failed, return
-		if chunk.failed {
-			allFailed := true
-			for _, c := range f.chunks {
-				if !c.failed {
-					allFailed = false
-					break
-				}
-			}
-			if allFailed {
-				if chunk.retryTimes >= 3 {
-					return
-				} else {
-					chunk.retryTimes++
-				}
-			}
-		}

-		var (
-			httpReq *http.Request
-			resp    *http.Response
-		)
-		httpReq, err = f.buildRequest(ctx, f.meta.Req)
-		if err != nil {
-			return
-		}
-		if f.meta.Res.Range {
-			httpReq.Header.Set(base.HttpHeaderRange,
-				fmt.Sprintf(base.HttpHeaderRangeFormat, chunk.Begin+chunk.Downloaded, chunk.End))
-		} else {
-			chunk.Downloaded = 0
-		}
-		err = func() error {
-			resp, err = client.Do(httpReq)
-			if err != nil {
-				return err
+	downloadChunk := func(chunk *chunk) (err error) {
+		// retry until all remain chunks failed
+		for {
+			// if chunk is completed, return
+			if f.meta.Res.Range && chunk.remain() <= 0 {
+				return nil
 			}
-			defer resp.Body.Close()
-			if resp.StatusCode != base.HttpCodeOK && resp.StatusCode != base.HttpCodePartialContent {
-				err = NewRequestError(resp.StatusCode, resp.Status)
-				return err
-			}
-			reader := NewTimeoutReader(resp.Body, readTimeout)
-			for {
-				n, err := reader.Read(buf)
-				if n > 0 {
-					_, err := f.file.WriteAt(buf[:n], chunk.Begin+chunk.Downloaded)
-					if err != nil {
-						return err
+			// if all chunks failed, return
+			if connection.failed {
+				allFailed := true
+				for _, c := range f.connections {
+					if c.Completed {
+						continue
+					}
+					if !c.failed {
+						allFailed = false
+						break
 					}
-					chunk.Downloaded += int64(n)
 				}
-				if err != nil {
-					if err == io.EOF {
-						return nil
+				if allFailed {
+					if connection.retryTimes >= 3 {
+						return
+					} else {
+						connection.retryTimes++
 					}
+				}
+			}
+
+			err = func() error {
+				var (
+					httpReq *http.Request
+					resp    *http.Response
+				)
+				f.redirectLock.Lock()
+				if f.redirectURL != "" {
+					f.redirectLock.Unlock()
+				}
+				err = func() (err error) {
+					defer func() {
+						if f.redirectURL == "" {
+							if err == nil {
+								f.redirectURL = resp.Request.URL.String()
+							}
+							f.redirectLock.Unlock()
+						}
+					}()
+
+					httpReq, err = f.buildRequest(ctx, f.meta.Req)
+					if err != nil {
+						return
+					}
+					if f.meta.Res.Range {
+						httpReq.Header.Set(base.HttpHeaderRange,
+							fmt.Sprintf(base.HttpHeaderRangeFormat, chunk.Begin+chunk.Downloaded, chunk.End))
+					} else {
+						chunk.Downloaded = 0
+					}
+					resp, err = client.Do(httpReq)
+					if err != nil {
+						return
+					}
+					return
+				}()
+				if err != nil {
 					return err
 				}
+
+				defer resp.Body.Close()
+				if resp.StatusCode != base.HttpCodeOK && resp.StatusCode != base.HttpCodePartialContent {
+					err = NewRequestError(resp.StatusCode, resp.Status)
+					return err
+				}
+				connection.failed = false
+				reader := NewTimeoutReader(resp.Body, readTimeout)
+				for {
+					n, err := reader.Read(buf)
+					if n > 0 {
+						finished := false
+						if f.meta.Res.Range {
+							remain := chunk.remain()
+							// If downloaded bytes exceed the remain bytes, only write remain bytes
+							if remain < int64(n) {
+								n = int(remain)
+								finished = true
+							}
+						}
+
+						_, err := f.file.WriteAt(buf[:n], chunk.Begin+chunk.Downloaded)
+						if err != nil {
+							return err
+						}
+						chunk.Downloaded += int64(n)
+						connection.Downloaded += int64(n)
+
+						if finished {
+							return nil
+						}
+					}
+					if err != nil {
+						if err == io.EOF {
+							return nil
+						}
+						return err
+					}
+				}
+			}()
+			if err != nil {
+				// If canceled, do not retry
+				if errors.Is(err, context.Canceled) {
+					return
+				}
+				// retry request after 1 second
+				connection.failed = true
+				time.Sleep(time.Second)
+				continue
 			}
-		}()
-		if err != nil {
-			// If canceled, do not retry
-			if errors.Is(err, context.Canceled) {
-				return
-			}
-			// retry request after 1 second
-			chunk.failed = true
-			time.Sleep(time.Second)
+			break
+		}
+		return
+	}
+
+	for {
+		if err = downloadChunk(connection.Chunk); err != nil {
+			return
+		}
+
+		// check this connection is completed
+		if !f.meta.Res.Range || !f.helpOtherConnection(connection) {
+			connection.Completed = true
+			return
+		}
+	}
+}
+
+func (f *Fetcher) helpOtherConnection(helper *connection) bool {
+	f.helpLock.Lock()
+	defer f.helpLock.Unlock()
+
+	// find the slowest connection
+	var maxRemainConnection *connection
+	var maxRemain int64
+	for _, r := range f.connections {
+		if r == helper || r.Completed {
 			continue
 		}
-		break
+
+		remain := r.Chunk.remain()
+		if remain > maxRemain && remain > helpMinSize {
+			maxRemainConnection = r
+			maxRemain = remain
+		}
 	}
-	return
+
+	if maxRemainConnection == nil {
+		return false
+	}
+
+	// re-calculate the chunk range
+	helper.Chunk.Begin = maxRemainConnection.Chunk.End - maxRemainConnection.Chunk.remain()/2
+	helper.Chunk.End = maxRemainConnection.Chunk.End
+	helper.Chunk.Downloaded = 0
+	maxRemainConnection.Chunk.End = helper.Chunk.Begin - 1
+	return true
 }

 func (f *Fetcher) buildRequest(ctx context.Context, req *base.Request) (httpReq *http.Request, err error) {
-	url, err := url.Parse(req.URL)
-	if err != nil {
-		return
+	var reqUrl string
+	if f.redirectURL != "" {
+		reqUrl = f.redirectURL
+	} else {
+		reqUrl = req.URL
 	}

 	var (
 		method string
 		body   io.Reader
 	)
-
 	headers := http.Header{}
 	if req.Extra == nil {
 		method = http.MethodGet
@@ -420,7 +540,7 @@ func (f *Fetcher) buildRequest(ctx context.Context, req *base.Request) (httpReq
 		}
 		if len(extra.Header) > 0 {
 			for k, v := range extra.Header {
-				headers.Set(k, v)
+				headers.Set(k, strings.TrimSpace(v))
 			}
 		}
 		if extra.Body != "" {
@@ -428,13 +548,13 @@ func (f *Fetcher) buildRequest(ctx context.Context, req *base.Request) (httpReq
 		}
 	}
 	if _, ok := headers[base.HttpHeaderUserAgent]; !ok {
-		headers.Set(base.HttpHeaderUserAgent, f.config.UserAgent)
+		headers.Set(base.HttpHeaderUserAgent, strings.TrimSpace(f.config.UserAgent))
 	}

 	if ctx != nil {
-		httpReq, err = http.NewRequestWithContext(ctx, method, url.String(), body)
+		httpReq, err = http.NewRequestWithContext(ctx, method, reqUrl, body)
 	} else {
-		httpReq, err = http.NewRequest(method, url.String(), body)
+		httpReq, err = http.NewRequest(method, reqUrl, body)
 	}
 	if err != nil {
 		return
@@ -447,30 +567,33 @@ func (f *Fetcher) buildRequest(ctx context.Context, req *base.Request) (httpReq
 	return httpReq, nil
 }

-func (f *Fetcher) splitChunk() (chunks []*chunk) {
+func (f *Fetcher) splitConnection() (connections []*connection) {
 	if f.meta.Res.Range {
-		connections := f.meta.Opts.Extra.(*fhttp.OptsExtra).Connections
+		optConnections := f.meta.Opts.Extra.(*fhttp.OptsExtra).Connections
 		// 每个连接平均需要下载的分块大小
-		chunkSize := f.meta.Res.Size / int64(connections)
-		chunks = make([]*chunk, connections)
-		for i := 0; i < connections; i++ {
+		chunkSize := f.meta.Res.Size / int64(optConnections)
+		connections = make([]*connection, optConnections)
+		for i := 0; i < optConnections; i++ {
 			var (
 				begin = chunkSize * int64(i)
 				end   int64
 			)
-			if i == connections-1 {
+			if i == optConnections-1 {
 				// 最后一个分块需要保证把文件下载完
 				end = f.meta.Res.Size - 1
 			} else {
 				end = begin + chunkSize - 1
 			}
-			chunk := newChunk(begin, end)
-			chunks[i] = chunk
+			connections[i] = &connection{
+				Chunk: newChunk(begin, end),
+			}
 		}
 	} else {
 		// 只支持单连接下载
-		chunks = make([]*chunk, 1)
-		chunks[0] = newChunk(0, 0)
+		connections = make([]*connection, 1)
+		connections[0] = &connection{
+			Chunk: newChunk(0, 0),
+		}
 	}
 	return
 }
@@ -493,8 +616,16 @@ func (f *Fetcher) buildClient() *http.Client {
 	}
 }

+func decodeMangledString(mangled string) string {
+	rawBytes := make([]byte, 0, len(mangled)*3)
+	for _, r := range mangled {
+		rawBytes = append(rawBytes, byte(r))
+	}
+	return string(rawBytes)
+}
+
 type fetcherData struct {
-	Chunks []*chunk
+	Connections []*connection
 }

 type FetcherManager struct {
@@ -550,7 +681,7 @@ func (fm *FetcherManager) DefaultConfig() any {
 func (fm *FetcherManager) Store(f fetcher.Fetcher) (data any, err error) {
 	_f := f.(*Fetcher)
 	return &fetcherData{
-		Chunks: _f.chunks,
+		Connections: _f.connections,
 	}, nil
 }

@@ -562,8 +693,8 @@ func (fm *FetcherManager) Restore() (v any, f func(meta *fetcher.FetcherMeta, v
 		fetcher.meta = meta
 		base.ParseReqExtra[fhttp.ReqExtra](fetcher.meta.Req)
 		base.ParseOptsExtra[fhttp.OptsExtra](fetcher.meta.Opts)
-		if len(fd.Chunks) > 0 {
-			fetcher.chunks = fd.Chunks
+		if len(fd.Connections) > 0 {
+			fetcher.connections = fd.Connections
 		}
 		return fetcher
 	}
@@ -47,6 +47,16 @@ func TestFetcher_Resolve(t *testing.T) {
 			},
 		},
 	}, t)
+	testResolve(test.StartTestCustomServer, "no-encode", &base.Resource{
+		Size:  test.BuildSize,
+		Range: false,
+		Files: []*base.FileInfo{
+			{
+				Name: "测试.zip",
+				Size: test.BuildSize,
+			},
+		},
+	}, t)
 	testResolve(test.StartTestCustomServer, "%E6%B5%8B%E8%AF%95.zip", &base.Resource{
 		Size:  0,
 		Range: false,
@@ -95,6 +105,21 @@ func TestFetcher_ResolveWithHostHeader(t *testing.T) {
 	}
 }

+func TestFetcher_ResolveWithInvalidHeader(t *testing.T) {
+	fetcher := buildFetcher()
+	err := fetcher.Resolve(&base.Request{
+		URL: "https://bing.com",
+		Extra: &http.ReqExtra{
+			Header: map[string]string{
+				"Referer": "\rtest",
+			},
+		},
+	})
+	if err != nil {
+		t.Errorf("Resolve() got = %v, want nil", err)
+	}
+}
+
 func testResolve(startTestServer func() net.Listener, path string, want *base.Resource, t *testing.T) {
 	listener := startTestServer()
 	defer listener.Close()
@@ -176,6 +201,14 @@ func TestFetcher_DownloadResponseBodyReadTimeout(t *testing.T) {
 	downloadError(listener, 4, t)
 }

+func TestFetcher_DownloadOnBugFileServer(t *testing.T) {
+	listener := test.StartTestRangeBugServer()
+	defer listener.Close()
+
+	downloadNormal(listener, 1, t)
+	downloadNormal(listener, 4, t)
+}
+
 func TestFetcher_DownloadResume(t *testing.T) {
 	listener := test.StartTestFileServer()
 	defer listener.Close()
@@ -238,6 +271,33 @@ func TestFetcher_ConfigUseServerCtime(t *testing.T) {
 	}
 }

+func TestFetcher_Stats(t *testing.T) {
+	listener := test.StartTestFileServer()
+	defer listener.Close()
+	fetcher := doDownloadReady(buildConfigFetcher(config{
+		Connections: 16,
+	}), listener, 0, t)
+	err := fetcher.Start()
+	if err != nil {
+		t.Fatal(err)
+	}
+	err = fetcher.Wait()
+	if err != nil {
+		t.Fatal(err)
+	}
+	stats := fetcher.Stats().(*http.Stats)
+	if len(stats.Connections) != 16 {
+		t.Errorf("Stats() got = %v, want %v", len(stats.Connections), 16)
+	}
+	totalDownloaded := int64(0)
+	for _, conn := range stats.Connections {
+		totalDownloaded += conn.Downloaded
+	}
+	if totalDownloaded != test.BuildSize {
+		t.Errorf("Stats() got = %v, want %v", totalDownloaded, test.BuildSize)
+	}
+}
+
 func TestFetcherManager_ParseName(t *testing.T) {
 	type args struct {
 		u string
@@ -102,6 +102,17 @@ func StartTestCustomServer() net.Listener {
 			defer file.Close()
 			io.Copy(writer, file)
 		})
+		mux.HandleFunc("/no-encode", func(writer http.ResponseWriter, request *http.Request) {
+			writer.Header().Set("Content-Disposition", "attachment; filename=测试.zip")
+			writer.Header().Set("Content-Type", "application/octet-stream")
+			writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
+			file, err := os.Open(BuildFile)
+			if err != nil {
+				panic(err)
+			}
+			defer file.Close()
+			io.Copy(writer, file)
+		})
 		return mux
 	})
 }
@@ -180,68 +191,98 @@ func StartTestLimitServer(maxConnections int32, delay int64) net.Listener {
 				writer.WriteHeader(403)
 				return
 			}
-
-			r := request.Header.Get("Range")
-			if r == "" {
-				writer.Header().Set("Content-Length", fmt.Sprintf("%d", BuildSize))
-				writer.WriteHeader(200)
-				(writer.(http.Flusher)).Flush()
-
-				file, err := os.Open(BuildFile)
-				if err != nil {
-					panic(err)
-				}
-				defer file.Close()
-				slowCopy(sl, writer, file, delay)
-			} else {
-				// split range
-				s := strings.Split(r, "=")
-				if len(s) != 2 {
-					writer.WriteHeader(400)
-					return
-				}
-				s = strings.Split(s[1], "-")
-				if len(s) != 2 {
-					writer.WriteHeader(400)
-					return
-				}
-				start, err := strconv.ParseInt(s[0], 10, 64)
-				if err != nil {
-					writer.WriteHeader(400)
-					return
-				}
-				end, err := strconv.ParseInt(s[1], 10, 64)
-				if err != nil {
-					writer.WriteHeader(400)
-					return
-				}
-				if start < 0 || end < 0 || start > end {
-					writer.WriteHeader(400)
-					return
-				}
-				if end >= BuildSize {
-					end = BuildSize - 1
-				}
-				writer.Header().Set("Content-Length", fmt.Sprintf("%d", end-start+1))
-				writer.Header().Set("Content-Range", fmt.Sprintf("bytes %d-%d/%d", start, end, BuildSize))
-				writer.Header().Set("Accept-Ranges", "bytes")
-				writer.WriteHeader(206)
-				(writer.(http.Flusher)).Flush()
-
-				file, err := os.Open(BuildFile)
-				if err != nil {
-					writer.WriteHeader(500)
-					return
-				}
-				defer file.Close()
-				file.Seek(start, 0)
-				slowCopyN(sl, writer, file, end-start+1, delay)
-			}
+			rangeFileHandle(
+				writer,
+				request,
+				nil,
+				func(file *os.File, n int64) {
+					slowCopyN(sl, writer, file, n, delay)
+				},
+			)
 		})
 		return mux
 	})
 }

+// StartTestRangeBugServer simulate bug server:
+// Don't follow Range request rules, always return more data than range, e.g. Range: bytes=0-100, return 150 bytes
+func StartTestRangeBugServer() net.Listener {
+	return startTestServer(func(sl *shutdownListener) http.Handler {
+		mux := http.NewServeMux()
+		mux.HandleFunc("/"+BuildName, func(writer http.ResponseWriter, request *http.Request) {
+			rangeFileHandle(
+				writer,
+				request,
+				func(end int64) int64 {
+					var bugEnd = end
+					if end != 0 {
+						bugEnd = end + 50
+						if bugEnd >= BuildSize {
+							bugEnd = end
+						}
+					}
+					return bugEnd
+				},
+				func(file *os.File, n int64) {
+					io.CopyN(writer, file, n)
+				},
+			)
+		})
+		return mux
+	})
+}
+
+func rangeFileHandle(writer http.ResponseWriter, request *http.Request, modifyEnd func(end int64) int64, iocpN func(file *os.File, n int64)) {
+	r := request.Header.Get("Range")
+	// split range
+	s := strings.Split(r, "=")
+	if len(s) != 2 {
+		writer.WriteHeader(400)
+		return
+	}
+	s = strings.Split(s[1], "-")
+	if len(s) != 2 {
+		writer.WriteHeader(400)
+		return
+	}
+	start, err := strconv.ParseInt(s[0], 10, 64)
+	if err != nil {
+		writer.WriteHeader(400)
+		return
+	}
+	end, err := strconv.ParseInt(s[1], 10, 64)
+	if err != nil {
+		writer.WriteHeader(400)
+		return
+	}
+	if start < 0 || end < 0 || start > end {
+		writer.WriteHeader(400)
+		return
+	}
+	if end >= BuildSize {
+		end = BuildSize - 1
+	}
+
+	if modifyEnd != nil {
+		end = modifyEnd(end)
+	}
+
+	writer.Header().Set("Content-Length", fmt.Sprintf("%d", end-start+1))
+	writer.Header().Set("Content-Range", fmt.Sprintf("bytes %d-%d/%d", start, end, BuildSize))
+	writer.Header().Set("Accept-Ranges", "bytes")
+	writer.WriteHeader(206)
+	(writer.(http.Flusher)).Flush()
+
+	file, err := os.Open(BuildFile)
+	if err != nil {
+		writer.WriteHeader(500)
+		return
+	}
+	defer file.Close()
+	file.Seek(start, 0)
+	iocpN(file, end-start+1)
+}
+
 // slowCopyN copies n bytes from src to dst, speed limit is bytes per second
 func slowCopy(sl *shutdownListener, dst io.Writer, src io.Reader, delay int64) (written int64, err error) {
 	buf := make([]byte, 32*1024)
@@ -163,6 +163,16 @@ func ParseOptsExtra[E any](opts *Options) error {
 	return nil
 }

+type CreateTaskBatch struct {
+	Reqs []*CreateTaskBatchItem `json:"reqs"`
+	Opts *Options               `json:"opts"`
+}
+
+type CreateTaskBatchItem struct {
+	Req  *Request `json:"req"`
+	Opts *Options `json:"opts"`
+}
+
 // DownloaderStoreConfig is the config that can restore the downloader.
 type DownloaderStoreConfig struct {
 	FirstLoad bool `json:"-"` // FirstLoad is the flag that the config is first time init and not from store
@@ -148,6 +148,7 @@ func (d *Downloader) Setup() error {
 				tasks = append(tasks[:i], tasks[i+1:]...)
 				continue
 			}
+			d.assignFetcherManager(task)
 			initTask(task)
 			if task.Status != base.DownloadStatusDone && task.Status != base.DownloadStatusError {
 				task.Status = base.DownloadStatusPause
@@ -208,7 +209,7 @@ func (d *Downloader) Setup() error {
 						if task.Status == base.DownloadStatusRunning {
 							downloadDataChanged = current != task.Progress.Downloaded
 							task.Progress.Used = task.timer.Used()
-							task.Progress.Speed = task.calcSpeed(task.speedArr, current-task.Progress.Downloaded, tick)
+							task.Progress.Speed = task.updateSpeed(current-task.Progress.Downloaded, tick)
 							task.Progress.Downloaded = current
 						}

@@ -217,7 +218,7 @@ func (d *Downloader) Setup() error {
 							uploader := task.fetcher.(fetcher.Uploader)
 							currentUploaded := uploader.UploadedBytes()
 							uploadDataChanged = currentUploaded != task.Progress.Uploaded
-							task.Progress.UploadSpeed = task.calcSpeed(task.uploadSpeedArr, currentUploaded-task.Progress.Uploaded, tick)
+							task.Progress.UploadSpeed = task.updateUploadSpeed(currentUploaded-task.Progress.Uploaded, tick)
 							task.Progress.Uploaded = currentUploaded
 						}
 						d.emit(EventKeyProgress, task)
@@ -358,10 +359,14 @@ func (d *Downloader) CreateDirect(req *base.Request, opts *base.Options) (taskId
 	return d.doCreate(fetcher, opts)
 }

-func (d *Downloader) CreateDirectBatch(reqs []*base.Request, opts *base.Options) (taskId []string, err error) {
+func (d *Downloader) CreateDirectBatch(req *base.CreateTaskBatch) (taskId []string, err error) {
 	taskIds := make([]string, 0)
-	for _, req := range reqs {
-		taskId, err := d.CreateDirect(req, opts.Clone())
+	for _, ir := range req.Reqs {
+		opts := ir.Opts
+		if opts == nil {
+			opts = req.Opts
+		}
+		taskId, err := d.CreateDirect(ir.Req, opts.Clone())
 		if err != nil {
 			return nil, err
 		}
@@ -573,15 +578,19 @@ func (d *Downloader) Delete(filter *TaskFilter, force bool) (err error) {
 }

 func (d *Downloader) deleteAll() (err error) {
+	var deleteTasksTemp []*Task
 	func() {
 		d.lock.Lock()
 		defer d.lock.Unlock()

+		for _, task := range d.tasks {
+			deleteTasksTemp = append(deleteTasksTemp, task)
+		}
 		d.tasks = make([]*Task, 0)
 		d.waitTasks = make([]*Task, 0)
 	}()

-	for _, task := range d.tasks {
+	for _, task := range deleteTasksTemp {
 		if err = d.doDelete(task, true); err != nil {
 			return
 		}
@@ -892,18 +901,7 @@ func (d *Downloader) restoreTask(task *Task) error {
 }

 func (d *Downloader) restoreFetcher(task *Task) error {
-	var fm fetcher.FetcherManager
-	for _, f := range d.cfg.FetchManagers {
-		if f.Name() == task.Protocol {
-			fm = f
-			break
-		}
-	}
-	if fm == nil {
-		return ErrUnSupportedProtocol
-	}
-	task.fetcherManager = fm
-	v, f := fm.Restore()
+	v, f := task.fetcherManager.Restore()
 	if v != nil {
 		err := d.storage.Pop(bucketSave, task.ID, v)
 		if err != nil {
@@ -943,9 +941,9 @@ func (d *Downloader) doCreate(f fetcher.Fetcher, opts *base.Options) (taskId str
 	}

 	// if enable white download directory, check if the download directory is in the white list
-	if len(d.cfg.DownloadDirWhiteList) > 0 {
+	if len(d.cfg.WhiteDownloadDirs) > 0 {
 		inWhiteList := false
-		for _, dir := range d.cfg.DownloadDirWhiteList {
+		for _, dir := range d.cfg.WhiteDownloadDirs {
 			if match, err := filepath.Match(dir, opts.Path); match && err == nil {
 				inWhiteList = true
 				break
@@ -1145,6 +1143,15 @@ func logPanic(logDir string) {
 	debug.SetCrashOutput(f, debug.CrashOptions{})
 }

+func (d *Downloader) assignFetcherManager(task *Task) error {
+	fm, err := d.parseFm(task.Meta.Req.URL)
+	if err != nil {
+		return err
+	}
+	task.fetcherManager = fm
+	return nil
+}
+
 func (d *Downloader) buildFetcher(url string) (fetcher.Fetcher, error) {
 	fm, err := d.parseFm(url)
 	if err != nil {
@@ -91,7 +91,7 @@ func TestDownloader_CreateNotInWhite(t *testing.T) {
 	defer listener.Close()

 	downloader := NewDownloader(&DownloaderConfig{
-		DownloadDirWhiteList: []string{"./downloads"},
+		WhiteDownloadDirs: []string{"./downloads"},
 	})
 	if err := downloader.Setup(); err != nil {
 		t.Fatal(err)
@@ -137,13 +137,15 @@ func TestDownloader_CreateDirectBatch(t *testing.T) {
 		downloader.Clear()
 	}()

-	reqs := make([]*base.Request, 0)
+	reqs := make([]*base.CreateTaskBatchItem, 0)
 	fileNames := make([]string, 0)
 	for i := 0; i < 5; i++ {
 		req := &base.Request{
 			URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
 		}
-		reqs = append(reqs, req)
+		reqs = append(reqs, &base.CreateTaskBatchItem{
+			Req: req,
+		})
 		if i == 0 {
 			fileNames = append(fileNames, test.DownloadName)
 		} else {
@@ -160,11 +162,14 @@ func TestDownloader_CreateDirectBatch(t *testing.T) {
 		}
 	})

-	_, err := downloader.CreateDirectBatch(reqs, &base.Options{
-		Path: test.Dir,
-		Name: test.DownloadName,
-		Extra: http.OptsExtra{
-			Connections: 4,
+	_, err := downloader.CreateDirectBatch(&base.CreateTaskBatch{
+		Reqs: reqs,
+		Opts: &base.Options{
+			Path: test.Dir,
+			Name: test.DownloadName,
+			Extra: http.OptsExtra{
+				Connections: 4,
+			},
 		},
 	})
 	if err != nil {
@@ -499,13 +504,15 @@ func TestDownloader_GetTasksByFilter(t *testing.T) {
 		downloader.Clear()
 	}()

-	reqs := make([]*base.Request, 0)
+	reqs := make([]*base.CreateTaskBatchItem, 0)
 	fileNames := make([]string, 0)
 	for i := 0; i < 10; i++ {
 		req := &base.Request{
 			URL: "http://" + listener.Addr().String() + "/" + test.BuildName,
 		}
-		reqs = append(reqs, req)
+		reqs = append(reqs, &base.CreateTaskBatchItem{
+			Req: req,
+		})
 		if i == 0 {
 			fileNames = append(fileNames, test.DownloadName)
 		} else {
@@ -522,11 +529,14 @@ func TestDownloader_GetTasksByFilter(t *testing.T) {
 		}
 	})

-	taskIds, err := downloader.CreateDirectBatch(reqs, &base.Options{
-		Path: test.Dir,
-		Name: test.DownloadName,
-		Extra: http.OptsExtra{
-			Connections: 4,
+	taskIds, err := downloader.CreateDirectBatch(&base.CreateTaskBatch{
+		Reqs: reqs,
+		Opts: &base.Options{
+			Path: test.Dir,
+			Name: test.DownloadName,
+			Extra: http.OptsExtra{
+				Connections: 4,
+			},
 		},
 	})
 	if err != nil {
@@ -205,6 +205,31 @@ function testTimeout(){
 		xhr.send();
 	});
 }
+
+async function testFingerprint(fingerprint,ua){
+	__gopeed_setFingerprint(fingerprint);
+	const resp = await fetch(host+'/ua');
+	const data = await resp.json();
+	if(!data.user_agent.includes(ua)){
+		throw new Error('fingerprint test failed, user agent: ' + data.user_agent);
+	}
+}
+
+async function testFingerprintDefault(){
+	await testFingerprint('none', 'Go')
+}
+
+async function testFingerprintChrome(){
+	await testFingerprint('chrome', 'Chrome')
+}
+
+async function testFingerprintFirefox(){
+	await testFingerprint('firefox', 'Firefox')
+}
+
+async function testFingerprintSafari(){
+	await testFingerprint('safari', 'Safari')
+}
 `)
 	if err != nil {
 		t.Fatal(err)
@@ -288,6 +313,19 @@ function testTimeout(){
 	if err == nil || err.Error() != "timeout" {
 		t.Fatalf("timeout test failed, want %s, got %s", "timeout", err)
 	}
+
+	_, err = callTestFun(engine, "testFingerprintChrome")
+	if err != nil {
+		t.Fatal("testFingerprintChrome test failed", err)
+	}
+	_, err = callTestFun(engine, "testFingerprintFirefox")
+	if err != nil {
+		t.Fatal("testFingerprintFirefox test failed", err)
+	}
+	_, err = callTestFun(engine, "testFingerprintSafari")
+	if err != nil {
+		t.Fatal("testFingerprintSafari test failed", err)
+	}
 }

 func TestFetchWithProxy(t *testing.T) {
@@ -470,6 +508,15 @@ func startServer() net.Listener {
 			w.Write([]byte("ok"))
 		}
 	})
+	mux.HandleFunc("/ua", func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		data := map[string]any{
+			"user_agent": r.UserAgent(),
+		}
+		buf, _ := json.Marshal(data)
+		w.WriteHeader(http.StatusOK)
+		w.Write(buf)
+	})
 	server.Handler = mux
 	go server.Serve(listener)
 	return listener
@@ -15,6 +15,7 @@ import (
 	"github.com/GopeedLab/gopeed/pkg/download/engine/inject/formdata"
 	"github.com/GopeedLab/gopeed/pkg/download/engine/util"
 	"github.com/dop251/goja"
+	"github.com/imroc/req/v3"
 )

 const (
@@ -129,7 +130,7 @@ type XMLHttpRequest struct {
 	requestHeaders  http.Header
 	responseHeaders http.Header
 	aborted         bool
-	proxyHandler    func(r *http.Request) (*url.URL, error)
+	client          *req.Client

 	WithCredentials bool                  `json:"withCredentials"`
 	Upload          *XMLHttpRequestUpload `json:"upload"`
@@ -163,25 +164,39 @@ func (xhr *XMLHttpRequest) SetRequestHeader(key, value string) {
 }

 func (xhr *XMLHttpRequest) Send(data goja.Value) {
-	var req *http.Request
-	var err error
+	setFingerprint(xhr.client)
+
 	d := xhr.parseData(data)
 	var (
 		contentType   string
 		contentLength int64
 		isStringBody  bool
 	)
-	if d == nil || xhr.method == "GET" || xhr.method == "HEAD" {
-		req, err = http.NewRequest(xhr.method, xhr.url, nil)
-	} else {
+
+	// Create request using req library
+	reqBuilder := xhr.client.R()
+
+	// Set headers first
+	if xhr.requestHeaders != nil {
+		for key, values := range xhr.requestHeaders {
+			if len(values) > 0 {
+				// Merge multiple values with comma separator (HTTP standard)
+				mergedValue := strings.Join(values, ", ")
+				reqBuilder.SetHeader(key, mergedValue)
+			}
+		}
+	}
+
+	// Handle request body
+	if d != nil && xhr.method != "GET" && xhr.method != "HEAD" {
 		switch v := d.(type) {
 		case string:
-			req, err = http.NewRequest(xhr.method, xhr.url, bytes.NewBufferString(v))
+			reqBuilder.SetBody(v)
 			contentType = "text/plain;charset=UTF-8"
 			contentLength = int64(len(v))
 			isStringBody = true
 		case *file.File:
-			req, err = http.NewRequest(xhr.method, xhr.url, v.Reader)
+			reqBuilder.SetBody(v.Reader)
 			contentType = "application/octet-stream"
 			contentLength = v.Size
 		case *formdata.FormData:
@@ -203,43 +218,38 @@ func (xhr *XMLHttpRequest) Send(data goja.Value) {
 				defer mw.Close()
 				mw.Send()
 			}()
-			req, err = http.NewRequest(xhr.method, xhr.url, pr)
+			reqBuilder.SetBody(pr)
 			contentType = mw.FormDataContentType()
 			contentLength = mw.Size()
 		}
 	}
-	if err != nil {
-		xhr.callOnerror()
-		return
-	}
-	req.Header = xhr.requestHeaders
+
 	// Only string body can specify Content-Type header by user
-	if contentType != "" && (!isStringBody || req.Header.Get("Content-Type") == "") {
-		req.Header.Set("Content-Type", contentType)
+	if contentType != "" && (!isStringBody || xhr.requestHeaders.Get("Content-Type") == "") {
+		reqBuilder.SetHeader("Content-Type", contentType)
 	}
-	if contentLength > 0 {
-		req.ContentLength = contentLength
+
+	// Set timeout
+	if xhr.Timeout > 0 {
+		xhr.client.SetTimeout(time.Duration(xhr.Timeout) * time.Millisecond)
 	}
-	transport := &http.Transport{
-		Proxy: xhr.proxyHandler,
-	}
-	client := &http.Client{
-		Transport: transport,
-		Timeout:   time.Duration(xhr.Timeout) * time.Millisecond,
-		CheckRedirect: func(req *http.Request, via []*http.Request) error {
-			if xhr.Redirect == redirectManual {
-				return http.ErrUseLastResponse
-			}
-			if xhr.Redirect == redirectError {
-				return errors.New("redirect failed")
-			}
-			if len(via) > 20 {
-				return errors.New("too many redirects")
-			}
-			return nil
-		},
-	}
-	resp, err := client.Do(req)
+
+	// Configure redirect behavior
+	xhr.client.SetRedirectPolicy(func(req *http.Request, via []*http.Request) error {
+		if xhr.Redirect == redirectManual {
+			return http.ErrUseLastResponse
+		}
+		if xhr.Redirect == redirectError {
+			return errors.New("redirect failed")
+		}
+		if len(via) > 20 {
+			return errors.New("too many redirects")
+		}
+		return nil
+	})
+
+	// Execute request
+	resp, err := reqBuilder.Send(xhr.method, xhr.url)
 	if err != nil {
 		// handle timeout error
 		var ne net.Error
@@ -254,35 +264,37 @@ func (xhr *XMLHttpRequest) Send(data goja.Value) {
 		xhr.callOnerror()
 		return
 	}
-	defer resp.Body.Close()
+
 	xhr.Upload.callOnprogress(contentLength, contentLength)
 	if !xhr.aborted {
 		xhr.Upload.callOnload()
 	}

-	responseUrl := resp.Request.URL
-	responseUrl.Fragment = ""
-	xhr.ResponseUrl = responseUrl.String()
+	// Set response URL (final URL after redirects)
+	if resp.Response != nil && resp.Response.Request != nil && resp.Response.Request.URL != nil {
+		responseUrl := resp.Response.Request.URL
+		responseUrl.Fragment = ""
+		xhr.ResponseUrl = responseUrl.String()
+	} else {
+		xhr.ResponseUrl = xhr.url
+	}

+	// Set response headers
 	xhr.responseHeaders = resp.Header
 	xhr.Status = resp.StatusCode
 	xhr.StatusText = resp.Status
 	xhr.doReadystatechange(2)
-	buf, err := io.ReadAll(resp.Body)
-	if err != nil {
-		xhr.callOnerror()
-		return
-	}
+
+	bodyBytes := resp.Bytes()
 	xhr.doReadystatechange(3)
-	xhr.Response = string(buf)
+	xhr.Response = string(bodyBytes)
 	xhr.ResponseText = xhr.Response
 	xhr.doReadystatechange(4)
-	respBodyLen := int64(len(buf))
+	respBodyLen := int64(len(bodyBytes))
 	xhr.callOnprogress(respBodyLen, respBodyLen)
 	if !xhr.aborted {
 		xhr.callOnload()
 	}
-	return
 }

 func (xhr *XMLHttpRequest) Abort() {
@@ -293,6 +305,9 @@ func (xhr *XMLHttpRequest) Abort() {
 }

 func (xhr *XMLHttpRequest) GetResponseHeader(key string) string {
+	if xhr.responseHeaders == nil {
+		return ""
+	}
 	return strings.Join(xhr.responseHeaders.Values(key), ", ")
 }

@@ -359,8 +374,14 @@ func Enable(runtime *goja.Runtime, proxyHandler func(r *http.Request) (*url.URL,
 		return instanceValue
 	})
 	xhr := runtime.ToValue(func(call goja.ConstructorCall) *goja.Object {
+		// Create req client with proxy support
+		client := req.C()
+		if proxyHandler != nil {
+			client.SetProxy(proxyHandler)
+		}
+
 		instance := &XMLHttpRequest{
-			proxyHandler: proxyHandler,
+			client: client,
 			Upload: &XMLHttpRequestUpload{
 				EventProp: &EventProp{
 					eventListeners: make(map[string]func(event *ProgressEvent)),
@@ -374,6 +395,9 @@ func Enable(runtime *goja.Runtime, proxyHandler func(r *http.Request) (*url.URL,
 		instanceValue.SetPrototype(call.This.Prototype())
 		return instanceValue
 	})
+	runtime.Set("__gopeed_setFingerprint", func(fingerprint Fingerprint) {
+		currentFingerprint = fingerprint
+	})
 	if err := runtime.Set("ProgressEvent", progressEvent); err != nil {
 		return err
 	}
@@ -0,0 +1,26 @@
+package xhr
+
+import (
+	"github.com/imroc/req/v3"
+)
+
+type Fingerprint string
+
+const (
+	fingerprintChrome  Fingerprint = "chrome"
+	fingerprintFirefox Fingerprint = "firefox"
+	fingerprintSafari  Fingerprint = "safari"
+)
+
+var currentFingerprint Fingerprint = ""
+
+func setFingerprint(client *req.Client) {
+	switch currentFingerprint {
+	case fingerprintChrome:
+		client.ImpersonateChrome()
+	case fingerprintFirefox:
+		client.ImpersonateFirefox()
+	case fingerprintSafari:
+		client.ImpersonateSafari()
+	}
+}
@@ -100,16 +100,27 @@ func (t *Task) clone() *Task {
 	return util.DeepClone(t)
 }

-func (t *Task) calcSpeed(speedArr []int64, downloaded int64, usedTime float64) int64 {
-	speedArr = append(speedArr, downloaded)
-	if len(speedArr) > 6 {
-		speedArr = speedArr[1:]
+func (t *Task) updateSpeed(downloaded int64, usedTime float64) int64 {
+	return calcSpeed(&t.speedArr, downloaded, usedTime)
+}
+
+func (t *Task) updateUploadSpeed(downloaded int64, usedTime float64) int64 {
+	return calcSpeed(&t.uploadSpeedArr, downloaded, usedTime)
+}
+
+func calcSpeed(speedArr *[]int64, downloaded int64, usedTime float64) int64 {
+	*speedArr = append(*speedArr, downloaded)
+	// Record last 5 seconds of download speed to calculate the average speed
+	if len(*speedArr) > int(5.0/usedTime) {
+		*speedArr = (*speedArr)[1:]
 	}
+
 	var total int64
-	for _, v := range speedArr {
+	for _, v := range *speedArr {
 		total += v
 	}
-	return int64(float64(total) / float64(len(speedArr)) / usedTime)
+
+	return int64(float64(total) / float64(len(*speedArr)) / usedTime)
 }

 type TaskFilter struct {
@@ -126,10 +137,10 @@ type DownloaderConfig struct {
 	Controller    *controller.Controller
 	FetchManagers []fetcher.FetcherManager

-	RefreshInterval      int `json:"refreshInterval"` // RefreshInterval time duration to refresh task progress(ms)
-	Storage              Storage
-	StorageDir           string
-	DownloadDirWhiteList []string `json:"downloadDirWhiteList"`
+	RefreshInterval   int // RefreshInterval time duration to refresh task progress(ms)
+	Storage           Storage
+	StorageDir        string
+	WhiteDownloadDirs []string

 	ProductionMode bool

@@ -14,6 +14,12 @@ type OptsExtra struct {

 // Stats for download
 type Stats struct {
-	// http stats
-	// health indicators of http
+	Connections []*StatsConnection `json:"connections"`
+}
+
+type StatsConnection struct {
+	Downloaded int64 `json:"downloaded"`
+	Completed  bool  `json:"completed"`
+	Failed     bool  `json:"failed"`
+	RetryTimes int   `json:"retryTimes"`
 }
@@ -58,13 +58,13 @@ func CreateTask(w http.ResponseWriter, r *http.Request) {
 }

 func CreateTaskBatch(w http.ResponseWriter, r *http.Request) {
-	var req model.CreateTaskBatch
+	var req base.CreateTaskBatch
 	if ReadJson(r, w, &req) {
 		if len(req.Reqs) == 0 {
 			WriteJson(w, model.NewErrorResult("param invalid: reqs", model.CodeInvalidParam))
 			return
 		}
-		taskIds, err := Downloader.CreateDirectBatch(req.Reqs, req.Opt)
+		taskIds, err := Downloader.CreateDirectBatch(&req)
 		if err != nil {
 			WriteJson(w, model.NewErrorResult(err.Error()))
 			return
@@ -309,6 +309,8 @@ func DoProxy(w http.ResponseWriter, r *http.Request) {
 	r.RequestURI = ""
 	r.URL = targetUrl
 	r.Host = targetUrl.Host
+	r.Header.Del("Authorization")
+	r.Header.Del("X-Target-Uri")
 	resp, err := http.DefaultClient.Do(r)
 	if err != nil {
 		writeError(w, err.Error())
@@ -0,0 +1,34 @@
+package rest
+
+import (
+	"compress/gzip"
+	"io"
+	"net/http"
+	"strings"
+)
+
+type gzipResponseWriter struct {
+	io.Writer
+	http.ResponseWriter
+}
+
+func (g gzipResponseWriter) Write(b []byte) (int, error) {
+	return g.Writer.Write(b)
+}
+
+func gzipMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if !strings.Contains(r.Header.Get("Accept-Encoding"), "gzip") {
+			next.ServeHTTP(w, r)
+			return
+		}
+
+		w.Header().Set("Content-Encoding", "gzip")
+		w.Header().Add("Vary", "Accept-Encoding")
+
+		gz := gzip.NewWriter(w)
+		defer gz.Close()
+
+		next.ServeHTTP(gzipResponseWriter{Writer: gz, ResponseWriter: w}, r)
+	})
+}
@@ -1,7 +1,6 @@
 package model

 import (
-	"encoding/base64"
 	"github.com/GopeedLab/gopeed/pkg/base"
 	"io/fs"
 )
@@ -25,9 +24,9 @@ type StartConfig struct {

 	ProductionMode bool

-	WebEnable    bool
-	WebFS        fs.FS
-	WebBasicAuth *WebBasicAuth
+	WebEnable bool
+	WebFS     fs.FS
+	WebAuth   *WebAuth
 }

 func (cfg *StartConfig) Init() *StartConfig {
@@ -49,13 +48,7 @@ func (cfg *StartConfig) Init() *StartConfig {
 	return cfg
 }

-type WebBasicAuth struct {
+type WebAuth struct {
 	Username string
 	Password string
 }
-
-// Authorization returns the value of the Authorization header to be used in HTTP requests.
-func (cfg *WebBasicAuth) Authorization() string {
-	userId := cfg.Username + ":" + cfg.Password
-	return "Basic " + base64.StdEncoding.EncodeToString([]byte(userId))
-}
@@ -7,8 +7,3 @@ type CreateTask struct {
 	Req *base.Request `json:"req"`
 	Opt *base.Options `json:"opt"`
 }
-
-type CreateTaskBatch struct {
-	Reqs []*base.Request `json:"reqs"`
-	Opt  *base.Options   `json:"opt"`
-}
@@ -2,6 +2,10 @@ package rest

 import (
 	"context"
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/rand"
+	"encoding/base64"
 	"encoding/json"
 	"fmt"
 	"github.com/GopeedLab/gopeed/pkg/download"
@@ -10,17 +14,22 @@ import (
 	"github.com/gorilla/handlers"
 	"github.com/gorilla/mux"
 	"github.com/pkg/errors"
+	"io"
+	"io/fs"
 	"net"
 	"net/http"
 	"os"
 	"path/filepath"
 	"regexp"
+	"strconv"
 	"strings"
+	"time"
 )

 var (
 	srv         *http.Server
 	runningPort int
+	aesKey      []byte

 	Downloader *download.Downloader
 )
@@ -74,8 +83,9 @@ func BuildServer(startCfg *model.StartConfig) (*http.Server, net.Listener, error
 	startCfg.Init()

 	downloadCfg := &download.DownloaderConfig{
-		ProductionMode:  startCfg.ProductionMode,
-		RefreshInterval: startCfg.RefreshInterval,
+		ProductionMode:    startCfg.ProductionMode,
+		RefreshInterval:   startCfg.RefreshInterval,
+		WhiteDownloadDirs: startCfg.WhiteDownloadDirs,
 	}
 	if startCfg.Storage == model.StorageBolt {
 		downloadCfg.Storage = download.NewBoltStorage(startCfg.StorageDir)
@@ -93,6 +103,13 @@ func BuildServer(startCfg *model.StartConfig) (*http.Server, net.Listener, error
 		util.SafeRemove(startCfg.Address)
 	}

+	if startCfg.WebEnable {
+		aesKey = make([]byte, 32)
+		if _, err := rand.Read(aesKey); err != nil {
+			return nil, nil, errors.Wrap(err, "generate aes key failed")
+		}
+	}
+
 	listener, err := net.Listen(startCfg.Network, startCfg.Address)
 	if err != nil {
 		return nil, nil, err
@@ -123,27 +140,94 @@ func BuildServer(startCfg *model.StartConfig) (*http.Server, net.Listener, error
 	r.Methods(http.MethodGet).Path("/api/v1/extensions/{identity}/update").HandlerFunc(UpdateCheckExtension)
 	r.Methods(http.MethodPost).Path("/api/v1/extensions/{identity}/update").HandlerFunc(UpdateExtension)
 	r.Path("/api/v1/proxy").HandlerFunc(DoProxy)
+
+	enableApiToken := startCfg.ApiToken != ""
+	enableBasicAuth := startCfg.WebEnable && startCfg.WebAuth != nil
 	if startCfg.WebEnable {
+		if enableBasicAuth {
+			r.Methods(http.MethodPost).Path("/api/web/login").HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+				var loginReq model.WebAuth
+				if ReadJson(r, w, &loginReq) {
+					if loginReq.Username == startCfg.WebAuth.Username && loginReq.Password == startCfg.WebAuth.Password {
+						// Generate a login token, Username:Password:Timestamp
+						timestamp := time.Now().Unix()
+						tokenData := fmt.Sprintf("%s:%s:%d", loginReq.Username, loginReq.Password, timestamp)
+						token, err := aesEncrypt(aesKey, []byte(tokenData))
+						if err != nil {
+							WriteJson(w, model.NewErrorResult(err.Error()))
+							return
+						}
+
+						WriteJson(w, model.NewOkResult(token))
+						return
+					}
+				}
+				WriteStatusJson(w, http.StatusUnauthorized, model.NewErrorResult("unauthorized", model.CodeUnauthorized))
+			})
+		}
 		r.PathPrefix("/fs/tasks").Handler(http.FileServer(new(taskFileSystem)))
 		r.PathPrefix("/fs/extensions").Handler(http.FileServer(new(extensionFileSystem)))
-		r.PathPrefix("/").Handler(http.FileServer(http.FS(startCfg.WebFS)))
+		r.PathPrefix("/").Handler(gzipMiddleware(http.FileServer(newEmbedCacheFileSystem(http.FS(startCfg.WebFS)))))
 	}
+	if enableApiToken || enableBasicAuth {
+		writeUnauthorized := func(w http.ResponseWriter, r *http.Request) {
+			WriteStatusJson(w, http.StatusUnauthorized, model.NewErrorResult("unauthorized", model.CodeUnauthorized))
+		}

-	if startCfg.ApiToken != "" || (startCfg.WebEnable && startCfg.WebBasicAuth != nil) {
 		r.Use(func(h http.Handler) http.Handler {
 			return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-				if startCfg.ApiToken != "" && r.Header.Get("X-Api-Token") == startCfg.ApiToken {
-					h.ServeHTTP(w, r)
-					return
+				if enableApiToken {
+					apiTokenHeader := r.Header["X-Api-Token"]
+					// If api token header is set, only check api token ignore basic auth
+					if len(apiTokenHeader) > 0 {
+						if apiTokenHeader[0] == startCfg.ApiToken {
+							h.ServeHTTP(w, r)
+							return
+						}
+
+						writeUnauthorized(w, r)
+						return
+					}
 				}
-				if startCfg.WebEnable && startCfg.WebBasicAuth != nil {
-					if r.Header.Get("Authorization") == startCfg.WebBasicAuth.Authorization() {
+
+				if enableBasicAuth {
+					if r.URL.Path == "/api/web/login" {
 						h.ServeHTTP(w, r)
 						return
 					}
-					w.Header().Set("WWW-Authenticate", "Basic realm=\"gopeed web\"")
+
+					token := r.Header.Get("Authorization")
+					if token == "" {
+						writeUnauthorized(w, r)
+						return
+					}
+
+					token = strings.TrimPrefix(token, "Bearer ")
+					tokenData, err := aesDecrypt(aesKey, token)
+					if err != nil {
+						writeUnauthorized(w, r)
+						return
+					}
+					parts := strings.SplitN(string(tokenData), ":", 3)
+					username := parts[0]
+					password := parts[1]
+					timestamp, _ := strconv.Atoi(parts[2])
+
+					if username != startCfg.WebAuth.Username || password != startCfg.WebAuth.Password {
+						writeUnauthorized(w, r)
+						return
+					}
+
+					// Check if the token is expired (7 days)
+					if time.Now().Unix()-int64(timestamp) > 7*24*3600 {
+						writeUnauthorized(w, r)
+						return
+					}
+
+					h.ServeHTTP(w, r)
+					return
 				}
-				WriteStatusJson(w, http.StatusUnauthorized, model.NewErrorResult("unauthorized", model.CodeUnauthorized))
+				writeUnauthorized(w, r)
 			})
 		})
 	}
@@ -163,9 +247,10 @@ func BuildServer(startCfg *model.StartConfig) (*http.Server, net.Listener, error
 	})

 	srv = &http.Server{Handler: handlers.CORS(
-		handlers.AllowedHeaders([]string{"Content-Type", "X-Api-Token", "X-Target-Uri"}),
+		handlers.AllowedHeaders([]string{"Content-Type", "Authorization", "X-Api-Token", "X-Target-Uri"}),
 		handlers.AllowedMethods([]string{"GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"}),
 		handlers.AllowedOrigins([]string{"*"}),
+		handlers.AllowCredentials(),
 	)(r)}
 	return srv, listener, nil
 }
@@ -222,6 +307,68 @@ func (e *extensionFileSystem) Open(name string) (http.File, error) {
 	return os.Open(filepath.Join(extensionPath, path))
 }

+type embedCacheFileSystem struct {
+	fs          http.FileSystem
+	lastModTime time.Time
+}
+
+func newEmbedCacheFileSystem(fs http.FileSystem) *embedCacheFileSystem {
+	efs := &embedCacheFileSystem{
+		fs:          fs,
+		lastModTime: time.Now(),
+	}
+
+	exe, err := os.Executable()
+	if err != nil {
+		return efs
+	}
+
+	fi, err := os.Stat(exe)
+	if err != nil {
+		return efs
+	}
+
+	efs.lastModTime = fi.ModTime()
+	return efs
+}
+
+func (e *embedCacheFileSystem) Open(name string) (http.File, error) {
+	file, err := e.fs.Open(name)
+	if err != nil {
+		return nil, err
+	}
+
+	return &embedFile{
+		File:        file,
+		lastModTime: e.lastModTime,
+	}, nil
+}
+
+type embedFile struct {
+	http.File
+	lastModTime time.Time
+}
+
+type embedFileInfo struct {
+	fs.FileInfo
+	lastModTime time.Time
+}
+
+func (e *embedFileInfo) ModTime() time.Time {
+	return e.lastModTime
+}
+
+func (e *embedFile) Stat() (fs.FileInfo, error) {
+	fi, err := e.File.Stat()
+	if err != nil {
+		return nil, err
+	}
+	return &embedFileInfo{
+		FileInfo:    fi,
+		lastModTime: e.lastModTime,
+	}, nil
+}
+
 func ReadJson(r *http.Request, w http.ResponseWriter, v any) bool {
 	if err := json.NewDecoder(r.Body).Decode(v); err != nil {
 		WriteJson(w, model.NewErrorResult(err.Error()))
@@ -239,3 +386,47 @@ func WriteStatusJson(w http.ResponseWriter, statusCode int, v any) {
 	w.WriteHeader(statusCode)
 	json.NewEncoder(w).Encode(v)
 }
+
+func aesEncrypt(key, data []byte) (string, error) {
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return "", err
+	}
+
+	gcm, err := cipher.NewGCM(block)
+	if err != nil {
+		return "", err
+	}
+
+	nonce := make([]byte, gcm.NonceSize())
+	if _, err := io.ReadFull(rand.Reader, nonce); err != nil {
+		return "", err
+	}
+
+	cipherText := gcm.Seal(nonce, nonce, data, nil)
+	return base64.StdEncoding.EncodeToString(cipherText), nil
+}
+
+func aesDecrypt(key []byte, encryptedData string) ([]byte, error) {
+	cipherText, err := base64.StdEncoding.DecodeString(encryptedData)
+	if err != nil {
+		return nil, err
+	}
+
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+
+	gcm, err := cipher.NewGCM(block)
+	if err != nil {
+		return nil, err
+	}
+
+	if len(cipherText) < gcm.NonceSize() {
+		return nil, errors.New("ciphertext too short")
+	}
+
+	nonce, cipherText := cipherText[:gcm.NonceSize()], cipherText[gcm.NonceSize():]
+	return gcm.Open(nil, nonce, cipherText, nil)
+}
@@ -14,7 +14,9 @@ import (
 	"net"
 	"net/http"
 	"os"
+	"path/filepath"
 	"reflect"
+	"strings"
 	"sync"
 	"testing"
 	"time"
@@ -139,11 +141,13 @@ func TestCreateDirectTask(t *testing.T) {

 func TestCreateDirectTaskBatch(t *testing.T) {
 	doTest(func() {
-		reqs := make([]*base.Request, 0)
+		reqs := make([]*base.CreateTaskBatchItem, 0)
 		for i := 0; i < 5; i++ {
-			reqs = append(reqs, createReq.Req)
+			reqs = append(reqs, &base.CreateTaskBatchItem{
+				Req: createReq.Req,
+			})
 		}
-		taskIds := httpRequestCheckOk[[]string](http.MethodPost, "/api/v1/tasks/batch", &model.CreateTaskBatch{
+		taskIds := httpRequestCheckOk[[]string](http.MethodPost, "/api/v1/tasks/batch", &base.CreateTaskBatch{
 			Reqs: reqs,
 		})
 		if len(taskIds) != len(reqs) {
@@ -152,6 +156,45 @@ func TestCreateDirectTaskBatch(t *testing.T) {
 	})
 }

+func TestCreateDirectTaskBatchWithOpt(t *testing.T) {
+	doTest(func() {
+		reqs := make([]*base.CreateTaskBatchItem, 0)
+		for i := 0; i < 5; i++ {
+			item := &base.CreateTaskBatchItem{
+				Req: createReq.Req,
+			}
+			if i == 0 {
+				item.Opts = &base.Options{
+					Name: "spe_opt.data",
+				}
+			}
+			reqs = append(reqs, item)
+		}
+		taskIds := httpRequestCheckOk[[]string](http.MethodPost, "/api/v1/tasks/batch", &base.CreateTaskBatch{
+			Reqs: reqs,
+			Opts: &base.Options{
+				Name: "default_opt.data",
+			},
+		})
+		if len(taskIds) != len(reqs) {
+			t.Errorf("CreateDirectTaskBatch() got = %v, want %v", len(taskIds), len(reqs))
+		}
+
+		for i, taskId := range taskIds {
+			task := httpRequestCheckOk[*download.Task](http.MethodGet, "/api/v1/tasks/"+taskId, nil)
+			if i == 0 {
+				if !strings.Contains(task.Name(), "spe_opt") {
+					t.Errorf("CreateDirectTaskBatch() got = %v, want %v", task.Name(), "spe_opt.data")
+				}
+			} else {
+				if !strings.Contains(task.Name(), "default_opt") {
+					t.Errorf("CreateDirectTaskBatch() got = %v, want %v", task.Name(), "default_opt.data")
+				}
+			}
+		}
+	})
+}
+
 func TestCreateDirectTaskWithResoled(t *testing.T) {
 	doTest(func() {
 		var wg sync.WaitGroup
@@ -478,6 +521,66 @@ func TestFsExtensionFail(t *testing.T) {
 	})
 }

+func TestWebFsEnhance(t *testing.T) {
+	indexHtml := `
+<!DOCTYPE html>
+<html lang="en">
+<head>
+	<meta charset="UTF-8">
+	<title>index</title>
+</head>
+<body>
+	<h1>index</h1>
+</body>
+</html>
+`
+	webDistPath := "dist"
+	os.MkdirAll("dist", os.ModePerm)
+	if err := os.WriteFile(filepath.Join(webDistPath, "index.html"), []byte(indexHtml), os.ModePerm); err != nil {
+		panic(err)
+	}
+	defer os.RemoveAll(webDistPath)
+
+	doTest0(func(cfg *model.StartConfig) {
+		cfg.WebFS = os.DirFS(webDistPath)
+	}, func() {
+		// First request no cache
+		code, header, _ := doHttpRequest1(http.MethodGet, "/index.html", map[string]string{
+			"Accept-Encoding": "gzip",
+		}, nil)
+		if code != http.StatusOK {
+			t.Errorf("TestWebFsEnhance() got = %v, want %v", code, http.StatusOK)
+		}
+		// Check header last-modified
+		if _, ok := header["Last-Modified"]; !ok {
+			t.Errorf("TestWebFsEnhance() missing key = %v", "Last-Modified")
+		}
+		// Check gzip compress
+		if _, ok := header["Content-Encoding"]; !ok || header["Content-Encoding"] != "gzip" {
+			t.Errorf("TestWebFsEnhance() no gzip compress")
+		}
+
+		// Request with If-Modified-Since
+		ifModifiedSince := header["Last-Modified"]
+		code, _, _ = doHttpRequest1(http.MethodGet, "/index.html", map[string]string{
+			"If-Modified-Since": ifModifiedSince,
+		}, nil)
+		if code != http.StatusNotModified {
+			t.Errorf("TestWebFsEnhance() got = %v, want %v", code, http.StatusNotModified)
+		}
+
+		// Request with un gzip
+		code, header, _ = doHttpRequest1(http.MethodGet, "/index.html?t=123", nil, nil)
+		if code != http.StatusOK {
+			t.Errorf("TestWebFsEnhance() got = %v, want %v", code, http.StatusOK)
+		}
+		// Check no gzip compress
+		if _, ok := header["Content-Encoding"]; ok && header["Content-Encoding"] == "gzip" {
+			t.Errorf("TestWebFsEnhance() has gzip compress")
+		}
+	})
+}
+
 func TestDoProxy(t *testing.T) {
 	doTest(func() {
 		code, respBody := doHttpRequest0(http.MethodGet, "/api/v1/proxy", map[string]string{
@@ -534,7 +637,7 @@ func TestAuthorization(t *testing.T) {
 	cfg.Init()
 	cfg.ApiToken = "123456"
 	cfg.WebEnable = true
-	cfg.WebBasicAuth = &model.WebBasicAuth{
+	cfg.WebAuth = &model.WebAuth{
 		Username: "admin",
 		Password: "123456",
 	}
@@ -546,14 +649,61 @@ func TestAuthorization(t *testing.T) {
 		Stop()
 	}()

-	status, _ := doHttpRequest0(http.MethodGet, "/api/v1/config", nil, nil)
+	status, _ := doHttpRequest0(http.MethodPost, "/api/web/login", nil, &model.WebAuth{
+		Username: "xxx",
+		Password: "xxx",
+	})
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	token := httpRequestCheckOk[string](http.MethodPost, "/api/web/login", cfg.WebAuth)
+	authToken := fmt.Sprintf("Bearer %s", token)
+	authHeaders := map[string]string{
+		"Authorization": authToken,
+	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", nil, nil)
 	if status != http.StatusUnauthorized {
 		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
 	}

 	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
-		"Authorization": cfg.WebBasicAuth.Authorization(),
+		"Authorization": "xxx",
 	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": "xxx",
+	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	buildToken := func(username, password string, ts int64) string {
+		token, _ := aesEncrypt(aesKey, []byte(fmt.Sprintf("%s:%s:%d", username, password, ts)))
+		return token
+	}
+
+	fakeToken := buildToken("fake", "fake", time.Now().Unix())
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": fmt.Sprintf("Bearer %s", fakeToken),
+	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	expireToken := buildToken(cfg.WebAuth.Username, cfg.WebAuth.Password, time.Now().Add(-time.Hour*8*24).Unix())
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": fmt.Sprintf("Bearer %s", expireToken),
+	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", authHeaders, nil)
 	if status != http.StatusOK {
 		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusOK)
 	}
@@ -564,15 +714,38 @@ func TestAuthorization(t *testing.T) {
 	if status != http.StatusOK {
 		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusOK)
 	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": authToken,
+		"X-Api-Token":   cfg.ApiToken,
+	}, nil)
+	if status != http.StatusOK {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusOK)
+	}
+
+	status, _ = doHttpRequest0(http.MethodGet, "/api/v1/config", map[string]string{
+		"Authorization": authToken,
+		"X-Api-Token":   "",
+	}, nil)
+	if status != http.StatusUnauthorized {
+		t.Errorf("TestAuthorization() got = %v, want %v", status, http.StatusUnauthorized)
+	}
 }

 func doTest(handler func()) {
+	doTest0(nil, handler)
+}
+
+func doTest0(onStart func(cfg *model.StartConfig), handler func()) {
 	testFunc := func(storage model.Storage) {
 		var cfg = &model.StartConfig{}
 		cfg.Init()
 		cfg.Storage = storage
 		cfg.StorageDir = ".test_storage"
 		cfg.WebEnable = true
+		if onStart != nil {
+			onStart(cfg)
+		}
 		fileListener := doStart(cfg)
 		defer func() {
 			if err := fileListener.Close(); err != nil {
@@ -582,6 +755,7 @@ func doTest(handler func()) {
 			Downloader.Clear()
 		}()
 		defer func() {
+			time.Sleep(500 * time.Millisecond)
 			Downloader.Pause(nil)
 			Downloader.Delete(nil, true)
 			os.RemoveAll(cfg.StorageDir)
@@ -603,6 +777,11 @@ func doStart(cfg *model.StartConfig) net.Listener {
 }

 func doHttpRequest0(method string, path string, headers map[string]string, body any) (int, []byte) {
+	r1, _, r3 := doHttpRequest1(method, path, headers, body)
+	return r1, r3
+}
+
+func doHttpRequest1(method string, path string, headers map[string]string, body any) (int, map[string]string, []byte) {
 	var reader io.Reader
 	if body != nil {
 		buf, _ := json.Marshal(body)
@@ -623,12 +802,18 @@ func doHttpRequest0(method string, path string, headers map[string]string, body
 		panic(err)
 	}
 	defer response.Body.Close()
+
+	respHeader := make(map[string]string)
+	for k, vv := range response.Header {
+		respHeader[k] = vv[0]
+	}
+
 	respBody, err := io.ReadAll(response.Body)
 	if err != nil {
 		panic(err)
 	}

-	return response.StatusCode, respBody
+	return response.StatusCode, respHeader, respBody
 }

 func doHttpRequest[T any](method string, path string, headers map[string]string, body any) (int, *model.Result[T]) {
@@ -3,19 +3,24 @@ import 'dart:io';
 import 'package:dio/dio.dart';
 import 'package:dio/io.dart';
 import 'package:flutter/foundation.dart';
-import 'package:gopeed/api/model/extension.dart';
-import 'package:gopeed/api/model/install_extension.dart';
-import 'package:gopeed/api/model/switch_extension.dart';
+import 'package:get/get.dart' as getx;

+import '../app/routes/app_pages.dart';
+import '../database/database.dart';
 import '../util/util.dart';
 import 'model/create_task.dart';
+import 'model/create_task_batch.dart';
 import 'model/downloader_config.dart';
+import 'model/extension.dart';
+import 'model/install_extension.dart';
+import 'model/login.dart';
 import 'model/request.dart';
 import 'model/resolve_result.dart';
 import 'model/result.dart';
+import 'model/switch_extension.dart';
 import 'model/task.dart';
-import 'model/update_extension_settings.dart';
 import 'model/update_check_extension_resp.dart';
+import 'model/update_extension_settings.dart';

 class _Client {
  static _Client? _instance;
@@ -29,12 +34,12 @@ class _Client {
      _instance = _Client._internal();
      var dio = Dio();
      final isUnixSocket = network == 'unix';
-      var baseUrl = 'http://127.0.0.1';
+      var baseUrl = 'http://127.0.0.1/';
      if (!isUnixSocket) {
        if (Util.isWeb()) {
-          baseUrl = kDebugMode ? 'http://127.0.0.1:9999' : '';
+          baseUrl = kDebugMode ? 'http://127.0.0.1:9999/' : '';
        } else {
-          baseUrl = 'http://$address';
+          baseUrl = 'http://$address/';
        }
      }
      dio.options.baseUrl = baseUrl;
@@ -42,12 +47,27 @@ class _Client {
      dio.options.sendTimeout = const Duration(seconds: 5);
      dio.options.connectTimeout = const Duration(seconds: 5);
      dio.options.receiveTimeout = const Duration(seconds: 60);
-      dio.interceptors.add(InterceptorsWrapper(onRequest: (options, handler) {
-        if (apiToken.isNotEmpty) {
-          options.headers['X-Api-Token'] = apiToken;
-        }
-        handler.next(options);
-      }));
+      dio.interceptors.add(InterceptorsWrapper(
+        onRequest: (options, handler) {
+          if (apiToken.isNotEmpty) {
+            options.headers['X-Api-Token'] = apiToken;
+          }
+          if (Util.isWeb()) {
+            final token = Database.instance.getWebToken();
+            if (token != null) {
+              options.headers['Authorization'] = 'Bearer $token';
+            }
+          }
+          handler.next(options);
+        },
+        onError: (error, handler) {
+          // Only web version has a login page
+          if (Util.isWeb() && error.response?.statusCode == 401) {
+            getx.Get.rootDelegate.offAndToNamed(Routes.LOGIN);
+          }
+          handler.next(error);
+        },
+      ));

      _instance!.dio = dio;
      if (isUnixSocket) {
@@ -95,7 +115,8 @@ Future<T> _parse<T>(
  } on DioException catch (e) {
    if (e.type == DioExceptionType.sendTimeout ||
        e.type == DioExceptionType.receiveTimeout ||
-        e.type == DioExceptionType.connectionTimeout) {
+        e.type == DioExceptionType.connectionTimeout ||
+        e.type == DioExceptionType.connectionError) {
      throw TimeoutException("request timeout");
    }
    throw Exception(Result(code: 1000, msg: e.message));
@@ -104,16 +125,22 @@ Future<T> _parse<T>(

 Future<ResolveResult> resolve(Request request) async {
  return _parse<ResolveResult>(
-      () => _client.dio.post("/api/v1/resolve", data: request),
+      () => _client.dio.post("api/v1/resolve", data: request),
      (data) => ResolveResult.fromJson(data));
 }

 Future<String> createTask(CreateTask createTask) async {
  return _parse<String>(
-      () => _client.dio.post("/api/v1/tasks", data: createTask),
+      () => _client.dio.post("api/v1/tasks", data: createTask),
      (data) => data as String);
 }

+Future<List<String>> createTaskBatch(CreateTaskBatch createTaskBatch) async {
+  return _parse<List<String>>(
+      () => _client.dio.post("api/v1/tasks/batch", data: createTaskBatch),
+      (data) => (data as List).map((e) => e as String).toList());
+}
+
 Future<List<Task>> getTasks(List<Status> statuses) async {
  return _parse<List<Task>>(
      () => _client.dio.get(
@@ -122,16 +149,16 @@ Future<List<Task>> getTasks(List<Status> statuses) async {
 }

 Future<void> pauseTask(String id) async {
-  return _parse(() => _client.dio.put("/api/v1/tasks/$id/pause"), null);
+  return _parse(() => _client.dio.put("api/v1/tasks/$id/pause"), null);
 }

 Future<void> continueTask(String id) async {
-  return _parse(() => _client.dio.put("/api/v1/tasks/$id/continue"), null);
+  return _parse(() => _client.dio.put("api/v1/tasks/$id/continue"), null);
 }

 Future<void> pauseAllTasks(List<String>? ids) async {
  return _parse(
-      () => _client.dio.put("/api/v1/tasks/pause", queryParameters: {
+      () => _client.dio.put("api/v1/tasks/pause", queryParameters: {
            "id": ids,
          }),
      null);
@@ -139,7 +166,7 @@ Future<void> pauseAllTasks(List<String>? ids) async {

 Future<void> continueAllTasks(List<String>? ids) async {
  return _parse(
-      () => _client.dio.put("/api/v1/tasks/continue", queryParameters: {
+      () => _client.dio.put("api/v1/tasks/continue", queryParameters: {
            "id": ids,
          }),
      null);
@@ -147,12 +174,12 @@ Future<void> continueAllTasks(List<String>? ids) async {

 Future<void> deleteTask(String id, bool force) async {
  return _parse(
-      () => _client.dio.delete("/api/v1/tasks/$id?force=$force"), null);
+      () => _client.dio.delete("api/v1/tasks/$id?force=$force"), null);
 }

 Future<void> deleteTasks(List<String>? ids, bool force) async {
  return _parse(
-      () => _client.dio.delete("/api/v1/tasks", queryParameters: {
+      () => _client.dio.delete("api/v1/tasks", queryParameters: {
            "id": ids,
            "force": force,
          }),
@@ -160,29 +187,29 @@ Future<void> deleteTasks(List<String>? ids, bool force) async {
 }

 Future<DownloaderConfig> getConfig() async {
-  return _parse(() => _client.dio.get("/api/v1/config"),
+  return _parse(() => _client.dio.get("api/v1/config"),
      (data) => DownloaderConfig.fromJson(data));
 }

 Future<void> putConfig(DownloaderConfig config) async {
-  return _parse(() => _client.dio.put("/api/v1/config", data: config), null);
+  return _parse(() => _client.dio.put("api/v1/config", data: config), null);
 }

 Future<void> installExtension(InstallExtension installExtension) async {
  return _parse(
-      () => _client.dio.post("/api/v1/extensions", data: installExtension),
+      () => _client.dio.post("api/v1/extensions", data: installExtension),
      null);
 }

 Future<List<Extension>> getExtensions() async {
-  return _parse<List<Extension>>(() => _client.dio.get("/api/v1/extensions"),
+  return _parse<List<Extension>>(() => _client.dio.get("api/v1/extensions"),
      (data) => (data as List).map((e) => Extension.fromJson(e)).toList());
 }

 Future<void> updateExtensionSettings(
    String identity, UpdateExtensionSettings updateExtensionSettings) async {
  return _parse(
-      () => _client.dio.put("/api/v1/extensions/$identity/settings",
+      () => _client.dio.put("api/v1/extensions/$identity/settings",
          data: updateExtensionSettings),
      null);
 }
@@ -191,22 +218,27 @@ Future<void> switchExtension(
    String identity, SwitchExtension switchExtension) async {
  return _parse(
      () => _client.dio
-          .put("/api/v1/extensions/$identity/switch", data: switchExtension),
+          .put("api/v1/extensions/$identity/switch", data: switchExtension),
      null);
 }

 Future<void> deleteExtension(String identity) async {
-  return _parse(() => _client.dio.delete("/api/v1/extensions/$identity"), null);
+  return _parse(() => _client.dio.delete("api/v1/extensions/$identity"), null);
 }

 Future<UpdateCheckExtensionResp> upgradeCheckExtension(String identity) async {
-  return _parse(() => _client.dio.get("/api/v1/extensions/$identity/update"),
+  return _parse(() => _client.dio.get("api/v1/extensions/$identity/update"),
      (data) => UpdateCheckExtensionResp.fromJson(data));
 }

 Future<void> updateExtension(String identity) async {
  return _parse(
-      () => _client.dio.post("/api/v1/extensions/$identity/update"), null);
+      () => _client.dio.post("api/v1/extensions/$identity/update"), null);
+}
+
+Future<String> login(LoginReq loginReq) async {
+  return _parse(() => _client.dio.post("api/web/login", data: loginReq),
+      (data) => data as String);
 }

 Future<Response<String>> proxyRequest<T>(String uri,
@@ -223,5 +255,9 @@ Future<Response<String>> proxyRequest<T>(String uri,
 }

 String join(String path) {
-  return "${_client.dio.options.baseUrl}/${Util.cleanPath(path)}";
+  final baseUrl = _client.dio.options.baseUrl;
+  final cleanBaseUrl = baseUrl.endsWith('/')
+      ? baseUrl.substring(0, baseUrl.length - 1)
+      : baseUrl;
+  return "$cleanBaseUrl/${Util.cleanPath(path)}";
 }
@@ -0,0 +1,39 @@
+import 'package:json_annotation/json_annotation.dart';
+
+import 'options.dart';
+import 'request.dart';
+
+part 'create_task_batch.g.dart';
+
+@JsonSerializable(explicitToJson: true)
+class CreateTaskBatch {
+  List<CreateTaskBatchItem>? reqs;
+  Options? opt;
+
+  CreateTaskBatch({
+    this.reqs,
+    this.opt,
+  });
+
+  factory CreateTaskBatch.fromJson(
+    Map<String, dynamic> json,
+  ) =>
+      _$CreateTaskBatchFromJson(json);
+
+  Map<String, dynamic> toJson() => _$CreateTaskBatchToJson(this);
+}
+
+@JsonSerializable()
+class CreateTaskBatchItem {
+  Request? req;
+  Options? opts;
+
+  CreateTaskBatchItem({
+    this.req,
+    this.opts,
+  });
+
+  factory CreateTaskBatchItem.fromJson(Map<String, dynamic> json) =>
+      _$CreateTaskBatchItemFromJson(json);
+  Map<String, dynamic> toJson() => _$CreateTaskBatchItemToJson(this);
+}
@@ -0,0 +1,55 @@
+// GENERATED CODE - DO NOT MODIFY BY HAND
+
+part of 'create_task_batch.dart';
+
+// **************************************************************************
+// JsonSerializableGenerator
+// **************************************************************************
+
+CreateTaskBatch _$CreateTaskBatchFromJson(Map<String, dynamic> json) =>
+    CreateTaskBatch(
+      reqs: (json['reqs'] as List<dynamic>?)
+          ?.map((e) => CreateTaskBatchItem.fromJson(e as Map<String, dynamic>))
+          .toList(),
+      opt: json['opt'] == null
+          ? null
+          : Options.fromJson(json['opt'] as Map<String, dynamic>),
+    );
+
+Map<String, dynamic> _$CreateTaskBatchToJson(CreateTaskBatch instance) {
+  final val = <String, dynamic>{};
+
+  void writeNotNull(String key, dynamic value) {
+    if (value != null) {
+      val[key] = value;
+    }
+  }
+
+  writeNotNull('reqs', instance.reqs?.map((e) => e.toJson()).toList());
+  writeNotNull('opt', instance.opt?.toJson());
+  return val;
+}
+
+CreateTaskBatchItem _$CreateTaskBatchItemFromJson(Map<String, dynamic> json) =>
+    CreateTaskBatchItem(
+      req: json['req'] == null
+          ? null
+          : Request.fromJson(json['req'] as Map<String, dynamic>),
+      opts: json['opts'] == null
+          ? null
+          : Options.fromJson(json['opts'] as Map<String, dynamic>),
+    );
+
+Map<String, dynamic> _$CreateTaskBatchItemToJson(CreateTaskBatchItem instance) {
+  final val = <String, dynamic>{};
+
+  void writeNotNull(String key, dynamic value) {
+    if (value != null) {
+      val[key] = value;
+    }
+  }
+
+  writeNotNull('req', instance.req);
+  writeNotNull('opts', instance.opts);
+  return val;
+}
@@ -0,0 +1,18 @@
+import 'package:json_annotation/json_annotation.dart';
+
+part 'login.g.dart';
+
+@JsonSerializable()
+class LoginReq {
+  String username;
+  String password;
+
+  LoginReq({
+    required this.username,
+    required this.password,
+  });
+
+  factory LoginReq.fromJson(Map<String, dynamic> json) =>
+      _$LoginReqFromJson(json);
+  Map<String, dynamic> toJson() => _$LoginReqToJson(this);
+}
@@ -0,0 +1,17 @@
+// GENERATED CODE - DO NOT MODIFY BY HAND
+
+part of 'login.dart';
+
+// **************************************************************************
+// JsonSerializableGenerator
+// **************************************************************************
+
+LoginReq _$LoginReqFromJson(Map<String, dynamic> json) => LoginReq(
+      username: json['username'] as String,
+      password: json['password'] as String,
+    );
+
+Map<String, dynamic> _$LoginReqToJson(LoginReq instance) => <String, dynamic>{
+      'username': instance.username,
+      'password': instance.password,
+    };
@@ -11,6 +11,7 @@ import 'package:rounded_loading_button_plus/rounded_loading_button.dart';

 import '../../../../api/api.dart';
 import '../../../../api/model/create_task.dart';
+import '../../../../api/model/create_task_batch.dart';
 import '../../../../api/model/options.dart';
 import '../../../../api/model/request.dart';
 import '../../../../api/model/resolve_result.dart';
@@ -869,18 +870,20 @@ class CreateView extends GetView<CreateController> {
                          if (createFormKey.currentState!.validate()) {
                            if (rr.id.isEmpty) {
                              // from extension resolve result
-                              await Future.wait(
+                              final reqs =
                                  controller.selectedIndexes.map((index) {
                                final file = rr.res.files[index];
-                                return createTask(CreateTask(
+                                return CreateTaskBatchItem(
                                    req: file.req!..proxy = parseProxy(),
-                                    opt: Options(
+                                    opts: Options(
                                        name: file.name,
                                        path: path.join(_pathController.text,
                                            rr.res.name, file.path),
                                        selectFiles: [],
-                                        extra: optExtra)));
-                              }));
+                                        extra: optExtra));
+                              }).toList();
+                              await createTaskBatch(
+                                  CreateTaskBatch(reqs: reqs));
                            } else {
                              await createTask(CreateTask(
                                  rid: rr.id,
@@ -16,6 +16,7 @@ import '../../../../api/model/extension.dart';
 import '../../../../api/model/install_extension.dart';
 import '../../../../api/model/switch_extension.dart';
 import '../../../../api/model/update_extension_settings.dart';
+import '../../../../database/database.dart';
 import '../../../../util/message.dart';
 import '../../../../util/util.dart';
 import '../../../views/icon_button_loading.dart';
@@ -135,6 +136,10 @@ class ExtensionView extends GetView<ExtensionController> {
                                                  '/fs/extensions/${extension.identity}/${extension.icon}'),
                                              width: 48,
                                              height: 48,
+                                              headers: {
+                                                'Authorization':
+                                                    'Bearer ${Database.instance.getWebToken()}'
+                                              },
                                            )
                                          : Image.file(
                                              extension.devMode
@@ -0,0 +1,12 @@
+import 'package:get/get.dart';
+
+import '../controllers/login_controller.dart';
+
+class LoginBinding extends Bindings {
+  @override
+  void dependencies() {
+    Get.lazyPut<LoginController>(
+      () => LoginController(),
+    );
+  }
+}
@@ -0,0 +1,61 @@
+import 'package:flutter/material.dart';
+import 'package:get/get.dart';
+
+import '../../../../api/api.dart' as api;
+import '../../../../api/api.dart';
+import '../../../../api/model/login.dart';
+import '../../../../database/database.dart';
+import '../../../../util/message.dart';
+import '../../../routes/app_pages.dart';
+import '../../app/controllers/app_controller.dart';
+
+class LoginController extends GetxController {
+  final formKey = GlobalKey<FormState>();
+  final usernameController = TextEditingController();
+  final passwordController = TextEditingController();
+
+  final isLoading = false.obs;
+  final passwordVisible = false.obs;
+
+  @override
+  void onClose() {
+    usernameController.dispose();
+    passwordController.dispose();
+    super.onClose();
+  }
+
+  void togglePasswordVisibility() {
+    passwordVisible.value = !passwordVisible.value;
+  }
+
+  Future<void> login() async {
+    if (!formKey.currentState!.validate()) {
+      return;
+    }
+
+    isLoading.value = true;
+    try {
+      final loginReq = LoginReq(
+        username: usernameController.text.trim(),
+        password: passwordController.text,
+      );
+
+      final token = await api.login(loginReq);
+      // Login successful, save the token
+      Database.instance.saveWebToken(token);
+      // Reload config
+      final controller = Get.put(AppController());
+      await controller.loadDownloaderConfig();
+      // Navigate to home page
+      Get.rootDelegate.offAndToNamed(Routes.HOME);
+    } catch (e) {
+      if (e is TimeoutException) {
+        showMessage('error'.tr, 'login_failed_network'.tr);
+      } else {
+        showMessage('error'.tr, 'login_failed'.tr);
+      }
+    } finally {
+      isLoading.value = false;
+    }
+  }
+}
@@ -0,0 +1,350 @@
+import 'package:flutter/material.dart';
+import 'package:flutter_svg/flutter_svg.dart';
+import 'package:get/get.dart';
+
+import '../../../views/responsive_builder.dart';
+import '../controllers/login_controller.dart';
+
+class LoginView extends GetView<LoginController> {
+  const LoginView({Key? key}) : super(key: key);
+
+  @override
+  Widget build(BuildContext context) {
+    final isNarrow = ResponsiveBuilder.isNarrow(context);
+
+    return Scaffold(
+      body: Container(
+        decoration: BoxDecoration(
+          gradient: LinearGradient(
+            begin: Alignment.topLeft,
+            end: Alignment.bottomRight,
+            colors: [
+              Get.theme.colorScheme.surface,
+              Get.theme.colorScheme.surface.withOpacity(0.8),
+              Get.theme.colorScheme.surface.withOpacity(0.9),
+            ],
+          ),
+        ),
+        child: Center(
+          child: SingleChildScrollView(
+            padding: EdgeInsets.symmetric(
+              horizontal: isNarrow ? 16.0 : 32.0,
+              vertical: isNarrow ? 24.0 : 32.0,
+            ),
+            child: Card(
+              elevation: 12,
+              shadowColor: Get.theme.colorScheme.shadow.withOpacity(0.3),
+              shape: RoundedRectangleBorder(
+                borderRadius: BorderRadius.circular(isNarrow ? 20 : 24),
+              ),
+              color: Get.theme.colorScheme.surface,
+              child: Container(
+                constraints: BoxConstraints(
+                  maxWidth: isNarrow ? double.infinity : 420,
+                ),
+                padding: EdgeInsets.all(isNarrow ? 24.0 : 40.0),
+                decoration: BoxDecoration(
+                  borderRadius: BorderRadius.circular(isNarrow ? 20 : 24),
+                  border: Border.all(
+                    color: Get.theme.colorScheme.outline.withOpacity(0.1),
+                    width: 1,
+                  ),
+                ),
+                child: FocusTraversalGroup(
+                  policy: OrderedTraversalPolicy(),
+                  child: Form(
+                    key: controller.formKey,
+                    child: Column(
+                      mainAxisSize: MainAxisSize.min,
+                      crossAxisAlignment: CrossAxisAlignment.stretch,
+                      children: [
+                        // Logo/Title Section
+                        Container(
+                          alignment: Alignment.center,
+                          margin: EdgeInsets.only(bottom: isNarrow ? 32 : 48),
+                          child: Column(
+                            children: [
+                              Container(
+                                padding: EdgeInsets.all(isNarrow ? 8 : 12),
+                                decoration: BoxDecoration(
+                                  borderRadius:
+                                      BorderRadius.circular(isNarrow ? 20 : 24),
+                                  boxShadow: [
+                                    BoxShadow(
+                                      color: Get.theme.colorScheme.primary
+                                          .withOpacity(0.2),
+                                      blurRadius: isNarrow ? 16 : 24,
+                                      offset: Offset(0, isNarrow ? 8 : 12),
+                                      spreadRadius: isNarrow ? 1 : 2,
+                                    ),
+                                  ],
+                                ),
+                                child: ClipRRect(
+                                  borderRadius:
+                                      BorderRadius.circular(isNarrow ? 16 : 20),
+                                  child: SvgPicture.asset(
+                                    'assets/icon/icon.svg',
+                                    width: isNarrow ? 56 : 72,
+                                    height: isNarrow ? 56 : 72,
+                                    fit: BoxFit.cover,
+                                  ),
+                                ),
+                              ),
+                              const SizedBox(height: 8),
+                              Text(
+                                'Gopeed',
+                                style: Get.textTheme.headlineLarge?.copyWith(
+                                  fontWeight: FontWeight.w900,
+                                  color: Get.theme.colorScheme.onSurface,
+                                  letterSpacing: 2.0,
+                                  fontSize: isNarrow ? 28 : 36,
+                                ),
+                              ),
+                            ],
+                          ),
+                        ),
+
+                        // Username Field
+                        FocusTraversalOrder(
+                          order: const NumericFocusOrder(1.0),
+                          child: TextFormField(
+                            controller: controller.usernameController,
+                            autofillHints: const [
+                              AutofillHints.username,
+                            ],
+                            autofocus: true,
+                            textInputAction: TextInputAction.done,
+                            onFieldSubmitted: (_) => controller.login(),
+                            decoration: InputDecoration(
+                              labelText: 'username'.tr,
+                              labelStyle: TextStyle(
+                                color: Get.theme.colorScheme.onSurface
+                                    .withOpacity(0.7),
+                                fontWeight: FontWeight.w500,
+                                fontSize: 16,
+                              ),
+                              prefixIcon: Container(
+                                margin: const EdgeInsets.all(12),
+                                padding: const EdgeInsets.all(8),
+                                decoration: BoxDecoration(
+                                  color: Get.theme.colorScheme.primary
+                                      .withOpacity(0.1),
+                                  borderRadius: BorderRadius.circular(12),
+                                ),
+                                child: Icon(
+                                  Icons.person_outline_rounded,
+                                  color: Get.theme.colorScheme.primary,
+                                  size: 20,
+                                ),
+                              ),
+                              border: OutlineInputBorder(
+                                borderRadius: BorderRadius.circular(18),
+                                borderSide: BorderSide(
+                                  color: Get.theme.colorScheme.outline
+                                      .withOpacity(0.2),
+                                  width: 1,
+                                ),
+                              ),
+                              enabledBorder: OutlineInputBorder(
+                                borderRadius: BorderRadius.circular(18),
+                                borderSide: BorderSide(
+                                  color: Get.theme.colorScheme.outline
+                                      .withOpacity(0.3),
+                                  width: 1.5,
+                                ),
+                              ),
+                              focusedBorder: OutlineInputBorder(
+                                borderRadius: BorderRadius.circular(18),
+                                borderSide: BorderSide(
+                                  color: Get.theme.colorScheme.primary,
+                                  width: 2.5,
+                                ),
+                              ),
+                              errorBorder: OutlineInputBorder(
+                                borderRadius: BorderRadius.circular(18),
+                                borderSide: BorderSide(
+                                  color: Get.theme.colorScheme.error,
+                                  width: 2,
+                                ),
+                              ),
+                              focusedErrorBorder: OutlineInputBorder(
+                                borderRadius: BorderRadius.circular(18),
+                                borderSide: BorderSide(
+                                  color: Get.theme.colorScheme.error,
+                                  width: 2.5,
+                                ),
+                              ),
+                              filled: true,
+                              fillColor: Get
+                                  .theme.colorScheme.surfaceContainerHighest
+                                  .withOpacity(0.8),
+                              contentPadding: const EdgeInsets.symmetric(
+                                horizontal: 24,
+                                vertical: 20,
+                              ),
+                            ),
+                            validator: (value) {
+                              if (value == null || value.trim().isEmpty) {
+                                return 'username_required'.tr;
+                              }
+                              return null;
+                            },
+                          ),
+                        ),
+
+                        SizedBox(height: isNarrow ? 16 : 24),
+
+                        // Password Field
+                        FocusTraversalOrder(
+                          order: const NumericFocusOrder(2.0),
+                          child: Obx(() => TextFormField(
+                                controller: controller.passwordController,
+                                autofillHints: const [
+                                  AutofillHints.password,
+                                ],
+                                obscureText: !controller.passwordVisible.value,
+                                decoration: InputDecoration(
+                                  labelText: 'password'.tr,
+                                  labelStyle: TextStyle(
+                                    color: Get.theme.colorScheme.onSurface
+                                        .withOpacity(0.7),
+                                    fontWeight: FontWeight.w500,
+                                    fontSize: 16,
+                                  ),
+                                  prefixIcon: Container(
+                                    margin: const EdgeInsets.all(12),
+                                    padding: const EdgeInsets.all(8),
+                                    decoration: BoxDecoration(
+                                      color: Get.theme.colorScheme.primary
+                                          .withOpacity(0.1),
+                                      borderRadius: BorderRadius.circular(12),
+                                    ),
+                                    child: Icon(
+                                      Icons.lock_outline_rounded,
+                                      color: Get.theme.colorScheme.primary,
+                                      size: 20,
+                                    ),
+                                  ),
+                                  suffixIcon: IconButton(
+                                    icon: Icon(
+                                      controller.passwordVisible.value
+                                          ? Icons.visibility_off_rounded
+                                          : Icons.visibility_rounded,
+                                      color: Get.theme.colorScheme.onSurface
+                                          .withOpacity(0.6),
+                                    ),
+                                    onPressed:
+                                        controller.togglePasswordVisibility,
+                                  ),
+                                  border: OutlineInputBorder(
+                                    borderRadius: BorderRadius.circular(18),
+                                    borderSide: BorderSide(
+                                      color: Get.theme.colorScheme.outline
+                                          .withOpacity(0.2),
+                                      width: 1,
+                                    ),
+                                  ),
+                                  enabledBorder: OutlineInputBorder(
+                                    borderRadius: BorderRadius.circular(18),
+                                    borderSide: BorderSide(
+                                      color: Get.theme.colorScheme.outline
+                                          .withOpacity(0.3),
+                                      width: 1.5,
+                                    ),
+                                  ),
+                                  focusedBorder: OutlineInputBorder(
+                                    borderRadius: BorderRadius.circular(18),
+                                    borderSide: BorderSide(
+                                      color: Get.theme.colorScheme.primary,
+                                      width: 2.5,
+                                    ),
+                                  ),
+                                  errorBorder: OutlineInputBorder(
+                                    borderRadius: BorderRadius.circular(18),
+                                    borderSide: BorderSide(
+                                      color: Get.theme.colorScheme.error,
+                                      width: 2,
+                                    ),
+                                  ),
+                                  focusedErrorBorder: OutlineInputBorder(
+                                    borderRadius: BorderRadius.circular(18),
+                                    borderSide: BorderSide(
+                                      color: Get.theme.colorScheme.error,
+                                      width: 2.5,
+                                    ),
+                                  ),
+                                  filled: true,
+                                  fillColor: Get
+                                      .theme.colorScheme.surfaceContainerHighest
+                                      .withOpacity(0.8),
+                                  contentPadding: const EdgeInsets.symmetric(
+                                    horizontal: 24,
+                                    vertical: 20,
+                                  ),
+                                ),
+                                validator: (value) {
+                                  if (value == null || value.isEmpty) {
+                                    return 'password_required'.tr;
+                                  }
+                                  return null;
+                                },
+                                textInputAction: TextInputAction.done,
+                                onFieldSubmitted: (_) => controller.login(),
+                              )),
+                        ),
+
+                        SizedBox(height: isNarrow ? 24 : 32),
+
+                        // Login Button
+                        Obx(() => ElevatedButton(
+                              onPressed: controller.isLoading.value
+                                  ? null
+                                  : controller.login,
+                              style: ElevatedButton.styleFrom(
+                                padding: EdgeInsets.symmetric(
+                                  vertical: isNarrow ? 16 : 18,
+                                ),
+                                shape: RoundedRectangleBorder(
+                                  borderRadius: BorderRadius.circular(16),
+                                ),
+                                backgroundColor: controller.isLoading.value
+                                    ? Get.theme.disabledColor
+                                    : Get.theme.colorScheme.primary,
+                                foregroundColor:
+                                    Get.theme.colorScheme.onPrimary,
+                                elevation: controller.isLoading.value ? 0 : 4,
+                                shadowColor: Get.theme.colorScheme.primary
+                                    .withOpacity(0.4),
+                              ),
+                              child: controller.isLoading.value
+                                  ? SizedBox(
+                                      height: 24,
+                                      width: 24,
+                                      child: CircularProgressIndicator(
+                                        strokeWidth: 2.5,
+                                        valueColor:
+                                            AlwaysStoppedAnimation<Color>(Get
+                                                .theme.colorScheme.onPrimary),
+                                      ),
+                                    )
+                                  : Text(
+                                      'login'.tr,
+                                      style: const TextStyle(
+                                        fontSize: 18,
+                                        fontWeight: FontWeight.w600,
+                                        letterSpacing: 0.5,
+                                      ),
+                                    ),
+                            )),
+                      ],
+                    ),
+                  ),
+                ),
+              ),
+            ),
+          ),
+        ),
+      ),
+    );
+  }
+}
@@ -6,6 +6,8 @@ import '../modules/extension/bindings/extension_binding.dart';
 import '../modules/extension/views/extension_view.dart';
 import '../modules/home/bindings/home_binding.dart';
 import '../modules/home/views/home_view.dart';
+import '../modules/login/bindings/login_binding.dart';
+import '../modules/login/views/login_view.dart';
 import '../modules/redirect/bindings/redirect_binding.dart';
 import '../modules/redirect/views/redirect_view.dart';
 import '../modules/root/bindings/root_binding.dart';
@@ -63,6 +65,12 @@ class AppPages {
                  binding: SettingBinding(),
                ),
              ]),
+          GetPage(
+            name: _Paths.LOGIN,
+            page: () => const LoginView(),
+            binding: LoginBinding(),
+            transition: Transition.fadeIn,
+          ),
          GetPage(
            name: _Paths.CREATE,
            transition: Transition.downToUp,
@@ -7,6 +7,7 @@ abstract class Routes {
  static const ROOT = _Paths.ROOT;
  static const HOME = _Paths.HOME;
  static const CREATE = _Paths.CREATE;
+  static const LOGIN = _Paths.LOGIN;
  static const TASK = _Paths.HOME + _Paths.TASK;
  static const TASK_FILES = TASK + _Paths.TASK_FILES;
  static const EXTENSION = _Paths.HOME + _Paths.EXTENSION;
@@ -20,6 +21,7 @@ abstract class _Paths {
  static const ROOT = '/';
  static const HOME = '/home';
  static const CREATE = '/create';
+  static const LOGIN = '/login';
  static const TASK = '/task';
  static const TASK_FILES = '/files';
  static const EXTENSION = '/extension';
@@ -6,10 +6,10 @@ import 'package:hive/hive.dart';
 import 'entity.dart';

 const String _startConfig = 'startConfig';
-const String _lastRunningConfig = 'lastRunningConfig';
 const String _windowState = 'windowState';
 const String _bookmark = 'bookmark';
 const String _createHistory = 'createHistory';
+const String _webToken = 'webToken';

 class Database {
  static final Database _instance = Database._internal();
@@ -82,6 +82,14 @@ class Database {
    });
  }

+  void saveWebToken(String token) {
+    save<String>(_webToken, token);
+  }
+
+  String? getWebToken() {
+    return get<String>(_webToken, (json) => json.toString());
+  }
+
  void saveCreateHistory(String url) {
    var list = getCreateHistory() ?? [];
    list.remove(url);
@@ -0,0 +1,129 @@
+const deDE = {
+  'de_DE': {
+    'label': 'Deutsch',
+    'error': 'Fehler',
+    'tip': 'Tipp',
+    'confirm': 'Bestätigen',
+    'cancel': 'Abbrechen',
+    'on': 'An',
+    'off': 'Aus',
+    'selectAll': 'Alle Auswählen',
+    'select': 'Auswählen',
+    'task': 'Aufgaben',
+    'downloading': 'Wird Heruntergeladen',
+    'downloaded': 'Heruntergeladen',
+    'setting': 'Einstellungen',
+    'donate': 'Spenden',
+    'exit': 'Beenden',
+    'create': 'Aufgabe Erstellen',
+    'directDownload': 'Direkter Download',
+    'advancedOptions': 'Erweiterte Einstellungen',
+    'followSettings': 'Einstellungen Folgen',
+    'downloadLink': 'Download Link',
+    'downloadLinkValid': 'Bitte geben Sie den Download-Link ein',
+    'downloadLinkHit': 'Bitte geben Sie den Download-Link ein, einen pro Zeile@append',
+    'downloadLinkHitDesktop': ', oder ziehen Sie die Torrent-Datei direkt hierher',
+    'download': 'Download',
+    'noFileSelected': 'Bitte wählen Sie mindestens eine Datei aus, um fortzufahren.',
+    'noStoragePermission': 'Speicherberechtigung erforderlich',
+    'selectFile': 'Datei auswählen',
+    'rename': 'Umbenennen',
+    'basic': 'Basic',
+    'advanced': 'Fortschrittlich',
+    'general': 'Allgemein',
+    'downloadDir': 'Download-Verzeichnis',
+    'downloadDirValid': 'Bitte wählen Sie das Download-Verzeichnis',
+    'connections': 'Anschlüsse',
+    'useServerCtime': 'Serverzeit für die Dateierstellung verwenden',
+    'maxRunning': 'Maximale Anzahl ausgeführter Aufgaben',
+    'defaultDirectDownload': 'Direkten Download standardmäßig aktivieren',
+    'items': '@count Artikel',
+    'subscribeTracker': 'Abonnement-Tracker',
+    'subscribeFail':
+        'Anmeldung fehlgeschlagen. Bitte überprüfen Sie das Netzwerk oder versuchen Sie es später erneut.',
+    'update': 'Aktualisieren',
+    'updateDaily': 'Tägliche Aktualisierung',
+    'lastUpdate': 'Letzte Aktualisierung: @time',
+    'addTracker': 'Tracker hinzufügen',
+    'addTrackerHit': 'Bitte geben Sie die URL des Tracker-Servers ein, eine pro Zeile',
+    'ui': 'Benutzeroberfläche',
+    'theme': 'Thema',
+    'themeSystem': 'System',
+    'themeLight': 'Lichtmodus',
+    'themeDark': 'Dunkler Modus',
+    'locale': 'Sprache',
+    'about': 'Über',
+    'homepage': 'Homepage',
+    'version': 'Version',
+    'protocol': 'Protokoll',
+    'port': 'Port',
+    'apiToken': 'API Token',
+    'notSet': 'NS',
+    'set': 'SET',
+    'portInUse': 'Port [@port] wird verwendet, bitte ändern Sie den Port',
+    'effectAfterRestart': 'Wirkung nach Neustart',
+    'developer': 'Entwickler-in',
+    'logDirectory': 'Protokollverzeichnis',
+    'show': 'Zeigen',
+    'continue': 'Weitermachen',
+    'pause': 'Pause',
+    'startAll': 'Alles starten',
+    'pauseAll': 'Alle pausieren',
+    'deleteTask': '@count Aufgaben löschen',
+    'deleteTaskTip': 'Heruntergeladene Dateien behalten',
+    'delete': 'Löschen',
+    'newVersionTitle': 'Entdecken Sie die neue Version @version',
+    'newVersionUpdate': 'Jetzt aktualisieren',
+    'newVersionLater': 'Später',
+    'extensions': 'Erweiterungen',
+    'extensionInstallUrl': 'Installations-URL',
+    'extensionInstallSuccess': 'Erfolgreich installiert',
+    'extensionUpdateSuccess': 'Erfolgreich aktualisiert',
+    'extensionDelete': 'Erweiterung löschen',
+    'extensionAlreadyLatest': 'Es ist bereits die neueste Version',
+    'extensionFind': 'Erweiterungen suchen',
+    'extensionDevelop': 'Erweiterungen entwickeln',
+    'history': 'Verlauf',
+    'clearHistory': 'Verlauf löschen',
+    'noHistoryFound': 'Kein Verlauf gefunden',
+    'serviceTitle': 'Download-Service',
+    'serviceText': 'Läuft',
+    'network': 'Netzwerk',
+    'proxy': 'Proxy',
+    'noProxy': 'Kein Proxy',
+    'systemProxy': 'System-Proxy',
+    'customProxy': 'Benutzerdefinierter Proxy',
+    'server': 'Server',
+    'username': 'Benutzername',
+    'password': 'Passwort',
+    'thanks': 'Danke',
+    'thanksDesc':
+        'Vielen Dank an alle Mitwirkenden, die beim Aufbau und der Entwicklung der Gopeed-Community geholfen haben!',
+    'browserExtension': 'Browsererweiterung',
+    'launchAtStartup': 'Beim Start starten',
+    'seedConfig': 'Seed-Konfiguration',
+    'seedKeep': 'Weiter-seeden bis manuell gestoppt',
+    'seedRatio': 'Seed Verhältniss',
+    'seedTime': 'Seed-Zeit (Minuten)',
+    'setAsDefaultBtClient': 'Als Standard-BT-Client festlegen',
+    'taskDetail': 'Aufgabendetails',
+    'taskName': 'Aufgabenname',
+    'taskUrl': 'Aufgaben-URL',
+    'downloadPath': 'Download-Pfad',
+    'skipVerifyCert': 'Zertifikatsüberprüfung überspringen',
+    'name': 'Name',
+    'size': 'Größe',
+    'unknown': 'Unbekannt',
+    'fileSelectedCount': 'Dateien: ',
+    'fileSelectedSize': 'Größe: ',
+    'httpHeaderName': 'Header-Name',
+    'httpHeaderValue': 'Header-Wert',
+    'login': 'Login',
+    'username_required': 'Bitte geben Sie Ihren Benutzernamen ein',
+    'password_required': 'Bitte geben Sie Ihr Passwort ein',
+    'login_success': 'Anmeldung erfolgreich',
+    'login_failed': 'Anmeldung fehlgeschlagen, bitte überprüfen Sie Ihren Benutzernamen und Ihr Passwort',
+    'login_failed_network':
+        'Anmeldung fehlgeschlagen, bitte überprüfen Sie Ihre Netzwerkverbindung',
+  },
+};
@@ -118,5 +118,12 @@ const enUS = {
    'fileSelectedSize': 'Size: ',
    'httpHeaderName': 'Header Name',
    'httpHeaderValue': 'Header Value',
+    'login': 'Login',
+    'username_required': 'Please enter your username',
+    'password_required': 'Please enter your password',
+    'login_success': 'Login successful',
+    'login_failed': 'Login failed, please check your username and password',
+    'login_failed_network':
+        'Login failed, please check your network connection',
  },
 };
@@ -0,0 +1,122 @@
+const ptBR = {
+  'pt_BR': {
+    'label': 'Português(Brasil)',
+    'error': 'Erro',
+    'tip': 'Dica',
+    'confirm': 'Confirmar',
+    'cancel': 'Cancelar',
+    'on': 'Ligado',
+    'off': 'Desligado',
+    'selectAll': 'Selecionar Tudo',
+    'select': 'Selecionar',
+    'task': 'Tarefas',
+    'downloading': 'baixando',
+    'downloaded': 'baixado',
+    'setting': 'Configurações',
+    'donate': 'Doação',
+    'exit': 'Sair',
+    'create': 'Criar Tarefa',
+    'directDownload': 'Download Direto',
+    'advancedOptions': 'Opções Avançadas',
+    'followSettings': 'Follow Settings',
+    'downloadLink': 'Link de Download',
+    'downloadLinkValid': 'Por favor, insira o link de download',
+    'downloadLinkHit': 'Por favor, insira o link de download, um por linha@append',
+    'downloadLinkHitDesktop': ', ou arraste o arquivo torrent aqui',
+    'download': 'Download',
+    'noFileSelected': 'Por favor, selecione ao menos um arquivo para continuar',
+    'noStoragePermission': 'Permissão de Armazenamento Necessária',
+    'selectFile': 'Selecionar Arquivo',
+    'rename': 'Renomear para',
+    'basic': 'Configurações Básica',
+    'advanced': 'Configurações Avançada',
+    'general': 'Principal',
+    'downloadDir': 'Onde você deseja salvar?',
+    'downloadDirValid': 'Por favor, selecione a pasta',
+    'connections': 'Conexões',
+    'useServerCtime': 'Use server time for file creation',
+    'maxRunning': 'Máximo de Tarefas Simultâneas',
+    'defaultDirectDownload': 'Marcar download direto por padrão',
+    'items': '@count itens',
+    'subscribeTracker': 'Assinar Rastreador',
+    'subscribeFail':
+        'Falha na Assinatura, verifique sua conexão ou tente novamente mais tarde',
+    'update': 'Atualizar',
+    'updateDaily': 'Atualizar Diariamente',
+    'lastUpdate': 'Última Atualização: @time',
+    'addTracker': 'Adicionar Rastreador',
+    'addTrackerHit': 'Por favor, insira a URL do rastreador, um por linha',
+    'ui': 'Interface',
+    'theme': 'Tema',
+    'themeSystem': 'Sistema',
+    'themeLight': 'Claro',
+    'themeDark': 'Escuro',
+    'locale': 'Idioma',
+    'about': 'Sobre',
+    'homepage': 'Site',
+    'version': 'Versão',
+    'protocol': 'Protocolo',
+    'port': 'Porta',
+    'apiToken': 'API Token',
+    'notSet': 'NS',
+    'set': 'SET',
+    'portInUse': 'Porta [@port] em uso, por favor utilize outra porta',
+    'effectAfterRestart': 'Effect after restart',
+    'developer': 'Desenvolvedor',
+    'logDirectory': 'Pasta de Logs',
+    'show': 'Mostrar',
+    'continue': 'Continuar',
+    'pause': 'Pausar',
+    'startAll': 'Iniciar Tudo',
+    'pauseAll': 'Pausar Tudo',
+    'deleteTask': 'Excluir @count tarefas',
+    'deleteTaskTip': 'Manter arquivos baixados',
+    'delete': 'Excluir',
+    'newVersionTitle': 'Nova Versão Disponível @version',
+    'newVersionUpdate': 'Atualizar Agora',
+    'newVersionLater': 'Mais Tarde',
+    'extensions': 'Extensões',
+    'extensionInstallUrl': 'Link de Instalação',
+    'extensionInstallSuccess': 'Instalado com Sucesso',
+    'extensionUpdateSuccess': 'Atualizado com Sucesso',
+    'extensionDelete': 'Excluir Extensão',
+    'extensionAlreadyLatest': 'It\'s already the latest version',
+    'extensionFind': 'Encontrar Extensões',
+    'extensionDevelop': 'Desenvolvedor',
+    'history': 'Histórico',
+    'clearHistory': 'Limpar Histórico',
+    'noHistoryFound': 'Nenhum Histório Encontrado',
+    'serviceTitle': 'Download Service',
+    'serviceText': 'Executando',
+    'network': 'Rede',
+    'proxy': 'Proxy',
+    'noProxy': 'Sem Proxy',
+    'systemProxy': 'Proxy do Sistema',
+    'customProxy': 'Proxy Personalizado',
+    'server': 'Servidor',
+    'username': 'Usuário',
+    'password': 'Senha',
+    'thanks': 'Obrigado',
+    'thanksDesc':
+        'Obrigado a todos os colaboradores que ajudaram a construir e desenvolver a comunidade Gopeed!',
+    'browserExtension': 'Extensões para Navegadores',
+    'launchAtStartup': 'Launch at Startup',
+    'seedConfig': 'Seed Config',
+    'seedKeep': 'Keep seeding until manually stopped',
+    'seedRatio': 'Seed ratio',
+    'seedTime': 'Seed time (minutes)',
+    'setAsDefaultBtClient': 'Set as the default BT client',
+    'taskDetail': 'Detalhes da Tarefa',
+    'taskName': 'Nome da Tarefa',
+    'taskUrl': 'Tarefa URL',
+    'downloadPath': 'Download Path',
+    'skipVerifyCert': 'Pular Verificação de Certificado',
+    'name': 'Nome',
+    'size': 'Tamanho',
+    'unknown': 'Desconhecido',
+    'fileSelectedCount': 'Arquivos: ',
+    'fileSelectedSize': 'Tamanho: ',
+    'httpHeaderName': 'Nome do Header',
+    'httpHeaderValue': 'Valor do Header',
+  },
+};
@@ -1,11 +1,14 @@
 const ruRU = {
  'ru_RU': {
-    'label': 'Русский(Россия)',
+    'label': 'Русский',
    'error': 'Ошибка',
    'tip': 'Подсказка',
    'confirm': 'Подтвердить',
    'cancel': 'Отмена',
+    'on': 'Вкл.',
+    'off': 'Откл.',
    'selectAll': 'Выбрать все',
+    'select': 'Выбрать',
    'task': 'Задачи',
    'downloading': 'Загрузка',
    'downloaded': 'Загружено',
@@ -13,7 +16,9 @@ const ruRU = {
    'donate': 'Пожертвовать',
    'exit': 'Выход',
    'create': 'Создать задачу',
+    'directDownload': 'Прямая загрузка',
    'advancedOptions': 'Расширенные опции',
+    'followSettings': 'По умолчанию',
    'downloadLink': 'Ссылка на скачивание',
    'downloadLinkValid': 'Пожалуйста, введите ссылку для скачивания',
    'downloadLinkHit':
@@ -30,7 +35,9 @@ const ruRU = {
    'downloadDir': 'Папка загрузки',
    'downloadDirValid': 'Пожалуйста, выберите папку для загрузки',
    'connections': 'Соединений',
+    'useServerCtime': 'Использовать время сервера для создания файла',
    'maxRunning': 'Максимальное количество активных задач',
+    'defaultDirectDownload': 'Прямая загрузка по умолчанию',
    'items': '@подсчет элементов',
    'subscribeTracker': 'Подпись трекера',
    'subscribeFail':
@@ -40,11 +47,11 @@ const ruRU = {
    'lastUpdate': 'Последнее обновление: @время',
    'addTracker': 'Добавить трекер',
    'addTrackerHit': 'Пожалуйста, введите url трекера, по одному в строке',
-    'ui': 'UI',
+    'ui': 'Интерфейс',
    'theme': 'Тема',
    'themeSystem': 'Системная',
    'themeLight': 'Светлая',
-    'themeDark': 'Темная',
+    'themeDark': 'Тёмная',
    'locale': 'Язык',
    'about': 'О приложении',
    'homepage': 'Домашняя страница',
@@ -54,7 +61,13 @@ const ruRU = {
    'apiToken': 'API Токен',
    'notSet': 'Не установлено',
    'set': 'Установлено',
+    'portInUse': 'Порт [@PORT] уже используется, пожалуйста, измените порт',
    'effectAfterRestart': 'Эффект после перезагрузки',
+    'developer': 'Разработчик',
+    'logDirectory': 'Каталог журналов',
+    'show': 'Показать',
+    'continue': 'Продолжить',
+    'pause': 'Пауза',
    'startAll': 'Запустить все',
    'pauseAll': 'Приостановить все',
    'deleteTask': 'Удалить @count задач',
@@ -64,6 +77,7 @@ const ruRU = {
    'newVersionUpdate': 'Обновить',
    'newVersionLater': 'позже',
    'extensions': 'Расширения',
+    'extensionInstallUrl': 'URL для установки',
    'extensionInstallSuccess': 'Установка завершена',
    'extensionUpdateSuccess': 'Обновление завершено',
    'extensionDelete': 'Удалить расширение',
@@ -73,10 +87,37 @@ const ruRU = {
    'history': 'История',
    'clearHistory': 'Очистить историю',
    'noHistoryFound': 'История не найдена',
+    'serviceTitle': 'Служба загрузки',
+    'serviceText': 'Работает',
+    'network': 'Сеть',
+    'proxy': 'Прокси',
+    'noProxy': 'Без прокси',
+    'systemProxy': 'Системный прокси',
+    'customProxy': 'Пользовательский прокси',
+    'server': 'Сервер',
+    'username': 'Имя пользователя',
+    'password': 'Пароль',
    'thanks': 'Благодарности',
    'thanksDesc':
        'Благодарим всех участников за их вклад в строительство и развитие сообщества Gopeed!',
    'browserExtension': 'Расширение браузера',
+    'launchAtStartup': 'Запускать при загрузке системы',
+    'seedConfig': 'Настройка раздачи',
+    'seedKeep': 'Раздавать пока не остановлю вручную',
+    'seedRatio': 'Коэффициент раздачи',
+    'seedTime': 'Время раздачи (минуты)',
+    'setAsDefaultBtClient': 'Установить как клиент BT по умолчанию',
+    'taskDetail': 'Детали задания',
+    'taskName': 'Название задачи',
+    'taskUrl': 'URL задачи',
+    'downloadPath': 'Путь загрузки',
    'skipVerifyCert': 'Пропустить проверку сертификата',
+    'name': 'Название',
+    'size': 'Размер',
+    'unknown': 'Неизвестно',
+    'fileSelectedCount': 'Файлов: ',
+    'fileSelectedSize': 'Размер: ',
+    'httpHeaderName': 'Название заголовка HTTP',
+    'httpHeaderValue': 'Значение заголовка HTTP',
  }
 };
@@ -116,5 +116,11 @@ const zhCN = {
    'fileSelectedSize': '大小：',
    'httpHeaderName': '请求头名称',
    'httpHeaderValue': '请求头值',
+    'login': '登录',
+    'username_required': '请输入用户名',
+    'password_required': '请输入密码',
+    'login_success': '登录成功',
+    'login_failed': '登录失败，请检查用户名和密码',
+    'login_failed_network': '登录失败，请检查网络连接',
  }
 };
@@ -1,5 +1,6 @@
 import 'package:get/get.dart';

+import 'langs/de_de.dart';
 import 'langs/en_us.dart';
 import 'langs/fa_ir.dart';
 import 'langs/fr_fr.dart';
@@ -16,6 +17,7 @@ import 'langs/zh_tw.dart';
 import 'langs/es_es.dart';
 import 'langs/uk_ua.dart';
 import 'langs/hu_hu.dart';
+import 'langs/pt_br.dart';

 final messages = _Messages();

@@ -39,5 +41,7 @@ class _Messages extends Translations {
        ...esES,
        ...ukUA,
        ...huHU,
+        ...ptBR,
+        ...deDE
      };
 }
@@ -1,5 +1,6 @@
 import 'dart:io';
-
+import 'package:open_dir/open_dir.dart';
+import 'package:path/path.dart' as path;
 import 'package:url_launcher/url_launcher_string.dart';

 class FileExplorer {
@@ -12,42 +13,19 @@ class FileExplorer {
  }

  static Future<void> _openDirectory(String directoryPath) async {
-    await launchUrlString("file://$directoryPath");
+    if (Platform.isWindows || Platform.isMacOS || Platform.isLinux) {
+      await OpenDir().openNativeDir(path: directoryPath);
+    } else {
+      await launchUrlString("file://$directoryPath");
+    }
  }

  static Future<void> _openFile(String filePath) async {
-    if (Platform.isWindows) {
-      Process.run('explorer.exe', ['/select,', filePath]);
-    } else if (Platform.isMacOS) {
-      Process.run('open', ['-R', filePath]);
-    } else if (Platform.isLinux) {
-      _linuxOpen(filePath);
-    }
-  }
-
-  static Future<void> _linuxOpen(String filePath) async {
-    if (await Process.run('which', ['xdg-open'])
-        .then((value) => value.exitCode == 0)) {
-      final result = await Process.run('xdg-open', [filePath]);
-      if (result.exitCode != 0) {
-        _openWithFileManager(filePath);
-      }
-    } else {
-      _openWithFileManager(filePath);
-    }
-  }
-
-  static Future<void> _openWithFileManager(String filePath) async {
-    final desktop = Platform.environment['XDG_CURRENT_DESKTOP'];
-    if (desktop == null) {
-      throw Exception('XDG_CURRENT_DESKTOP is not set');
-    }
-    if (desktop == 'GNOME') {
-      await Process.run('nautilus', ['--select', filePath]);
-    } else if (desktop == 'KDE') {
-      await Process.run('dolphin', ['--select', filePath]);
-    } else {
-      throw Exception('Unsupported desktop environment');
+    if (Platform.isWindows || Platform.isMacOS || Platform.isLinux) {
+      final fileName = path.basename(filePath);
+      final parentPath = path.dirname(filePath);
+      await OpenDir()
+          .openNativeDir(path: parentPath, highlightedFileName: fileName);
    }
  }
 }
@@ -406,7 +406,7 @@ String _getAssetName(String version) {
    case Channel.windowsPortable:
      return 'Gopeed-v$version-windows-${commonArchName()}-portable.zip';
    case Channel.macosDmg:
-      return 'Gopeed-v$version-macos.dmg';
+      return 'Gopeed-v$version-macos-${commonArchName()}.dmg';
    case Channel.linuxDeb:
      return 'Gopeed-v$version-linux-${commonArchName()}.deb';
    case Channel.androidApk:
@@ -54,7 +54,8 @@ class Util {
  static Future<void> initStorageDir() async {
    var storageDir = "";
    if (Util.isWindows()) {
-      storageDir = File(Platform.resolvedExecutable).parent.path;
+      storageDir =
+          path.join(File(Platform.resolvedExecutable).parent.path, "storage");
    } else if (!Util.isWeb()) {
      if (Util.isLinux()) {
        storageDir = File(Platform.resolvedExecutable).parent.path;
@@ -42,6 +42,7 @@ endif()
 function(APPLY_STANDARD_SETTINGS TARGET)
  target_compile_features(${TARGET} PUBLIC cxx_std_14)
  target_compile_options(${TARGET} PRIVATE -Wall -Werror)
+  target_compile_options(${TARGET} PRIVATE -Wno-error=deprecated-declarations) # Allow deprecated warnings
  target_compile_options(${TARGET} PRIVATE "$<$<NOT:$<CONFIG:Debug>>:-O3>")
  target_compile_definitions(${TARGET} PRIVATE "$<$<NOT:$<CONFIG:Debug>>:NDEBUG>")
 endfunction()
@@ -448,6 +448,14 @@ packages:
      url: "https://pub.dev"
    source: hosted
    version: "2.0.23"
+  flutter_svg:
+    dependency: "direct main"
+    description:
+      name: flutter_svg
+      sha256: c200fd79c918a40c5cd50ea0877fa13f81bdaf6f0a5d3dbcc2a13e3285d6aa1b
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.0.17"
  flutter_test:
    dependency: "direct dev"
    description: flutter
@@ -723,6 +731,46 @@ packages:
      url: "https://pub.dev"
    source: hosted
    version: "2.0.0"
+  open_dir:
+    dependency: "direct main"
+    description:
+      name: open_dir
+      sha256: a4884b00e5e5795a9b4b3d582ac6a66e9196795ed760dbc3c63b4837c70c5901
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.0.2+1"
+  open_dir_linux:
+    dependency: transitive
+    description:
+      name: open_dir_linux
+      sha256: "566cd9e02403971be06af35e1abc8057a4f3f98888c1226042e96a2af333b8bc"
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.0.2+1"
+  open_dir_macos:
+    dependency: transitive
+    description:
+      name: open_dir_macos
+      sha256: "51fdc8c3a06c9d571b599b5901045ada23d1440b24c3052c0a66cf3ee4ac901b"
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.0.2"
+  open_dir_platform_interface:
+    dependency: transitive
+    description:
+      name: open_dir_platform_interface
+      sha256: ca189abb02d8e3320f9b2493b6d58e3a33f393d5eb4ccbbef02e0bc0fd393872
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.0.2"
+  open_dir_windows:
+    dependency: transitive
+    description:
+      name: open_dir_windows
+      sha256: ec48df32ce61adb6f6cede0330d13b0d89714d2ee2df198f32ecd520e3a5d250
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.0.2+1"
  open_filex:
    dependency: "direct main"
    description:
@@ -763,6 +811,14 @@ packages:
      url: "https://pub.dev"
    source: hosted
    version: "1.9.0"
+  path_parsing:
+    dependency: transitive
+    description:
+      name: path_parsing
+      sha256: "883402936929eac138ee0a45da5b0f2c80f89913e6dc3bf77eb65b84b409c6ca"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.1.0"
  path_provider:
    dependency: "direct main"
    description:
@@ -1289,6 +1345,30 @@ packages:
      url: "https://pub.dev"
    source: hosted
    version: "4.5.1"
+  vector_graphics:
+    dependency: transitive
+    description:
+      name: vector_graphics
+      sha256: "44cc7104ff32563122a929e4620cf3efd584194eec6d1d913eb5ba593dbcf6de"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.1.18"
+  vector_graphics_codec:
+    dependency: transitive
+    description:
+      name: vector_graphics_codec
+      sha256: "99fd9fbd34d9f9a32efd7b6a6aae14125d8237b10403b422a6a6dfeac2806146"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.1.13"
+  vector_graphics_compiler:
+    dependency: transitive
+    description:
+      name: vector_graphics_compiler
+      sha256: "1b4b9e706a10294258727674a340ae0d6e64a7231980f9f9a3d12e4b42407aad"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.1.16"
  vector_math:
    dependency: transitive
    description:
@@ -15,7 +15,7 @@ publish_to: "none" # Remove this line if you wish to publish to pub.dev
 # In iOS, build-name is used as CFBundleShortVersionString while build-number used as CFBundleVersion.
 # Read more about iOS versioning at
 # https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CoreFoundationKeys.html
-version: 1.6.10+1
+version: 1.8.0+1

 environment:
  sdk: ">=3.0.0 <4.0.0"
@@ -72,10 +72,12 @@ dependencies:
  win32_registry: ^1.1.5
  share_handler: ^0.0.22
  crypto: ^3.0.6
+  open_dir: ^0.0.2+1
  install_plugin:
    git:
      url: https://github.com/hui-z/flutter_install_plugin.git
      ref: cf08af829f4a4145634f8a047108f505fdbe5eaa
+  flutter_svg: ^2.0.17
 dependency_overrides:
  permission_handler_windows:
    git:
@@ -112,6 +114,7 @@ flutter:
  assets:
    - assets/tray_icon/
    - assets/extension/
+    - assets/icon/
    # Browser extension native host binary, see https://github.com/GopeedLab/gopeed/tree/main/cmd/host
    - assets/exec/

@@ -1,21 +1,6 @@
 <!DOCTYPE html>
 <html>
 <head>
-  <!--
-    If you are serving your web app in a path other than the root, change the
-    href value below to reflect the base path you are serving from.
-
-    The path provided below has to start and end with a slash "/" in order for
-    it to work correctly.
-
-    For more details:
-    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base
-
-    This is a placeholder for base href that will be replaced by the value of
-    the `--base-href` argument provided to `flutter build`.
-  -->
-  <base href="$FLUTTER_BASE_HREF">
-
  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta name="description" content="A modern download manager.">
Author	SHA1	Message	Date
Levi	55e6bdc4f7	release: v1.8.0	2025-08-28 18:43:44 +08:00
Levi	b31b42301e	feat: update storage directory path for Windows (#1087 )	2025-08-28 08:44:18 +08:00
Levi	7ce0d876b0	feat: add environment variables configuration support (#1088 )	2025-08-28 08:21:02 +08:00
Levi	2fd2596aa0	ci: update macOS version to macos-14 (#1086 )	2025-08-26 10:07:33 +08:00
Local-Gay-Communist	e0973e4a34	feat: add german language support (#1084 )	2025-08-22 09:26:37 +08:00
Levi	4f7b8a05ad	feat: web login page (#1058 )	2025-07-16 01:02:25 +08:00
Levi	2927d1ef2b	feat(extension): TLS fingerprinting support in xhr (#1054 )	2025-07-15 23:54:51 +08:00
Levi	3451f577ab	fix: remove invalid characters in HTTP headers (#1053 )	2025-07-15 22:34:10 +08:00
Levi	06671be0d8	release: v1.7.1	2025-07-08 09:13:39 +08:00
Thiago Sabaia	8ae9363f0f	feat: Translation into Portuguese (Brazil) (#1047 )	2025-06-17 09:51:51 +08:00
unifan	5d84445f8f	feat: Open in Folder with support for 3rd file manager (#1045 )	2025-06-07 11:14:58 +08:00
Levi	7c541e4047	feat: web support relative base path (#1001 )	2025-05-15 22:07:26 +08:00
Charles Huang	3262e5a11b	fix: do not add external tracker to a private torrent (#1011 )	2025-04-23 22:53:15 +08:00
Charles Huang	ff43a373cd	fix: json syntax error in bt config (#1014 )	2025-04-23 13:48:46 +08:00
Levi	7394d948e4	ci: workaround for app_indicator_new is deprecated (#986 )	2025-04-09 22:20:16 +08:00
Levi	5afb3aa43b	ci: fix go 1.24 code coverage (#988 )	2025-04-09 22:19:50 +08:00
Levi	7705af6e68	release: v1.7.0	2025-04-08 22:22:09 +08:00
Levi	684e060ef3	chore: upgrade go to 1.24 (#984 )	2025-04-08 22:18:18 +08:00
Levi	0c67792441	ci: build separate macos packages (#967 )	2025-04-08 19:43:30 +08:00
Levi	b0ef2c2a87	fix: bt seed cause crash (#985 )	2025-04-08 18:38:17 +08:00
mak7im01	1977c2a0fc	feat: update ru_ru.dart (#982 )	2025-04-08 09:21:29 +08:00
Levi	d289708f9e	feat: use batch download api for create multitasks (#978 )	2025-04-05 22:57:17 +08:00
Levi	cd5fd45667	fix: resolve http non encode attachment filename (#975 )	2025-04-05 22:37:19 +08:00
Levi	50bc9ab129	feat: improve http download strategy to prevent speed drops near completion (#969 )	2025-04-05 22:20:35 +08:00
Levi	bfad91dcab	release: v1.6.11	2025-03-14 23:03:48 +08:00
Levi	61a959adda	ci: apk build split abi (#962 )	2025-03-14 22:58:28 +08:00
Levi	f4b839fd11	fix: http download size exceeds file size (#959 )	2025-03-14 20:07:34 +08:00
Levi	969aeb5e0a	fix: : web auth priority when api token and basic auth coexist (#960 )	2025-03-14 19:22:31 +08:00
Levi	68d42eb397	feat: web http file server caching and gzip support (#961 )	2025-03-14 18:31:05 +08:00