OkHTTP中SOCKS5代理认证失败问题求助

你遇到的问题根源在于：OkHTTP的proxyAuthenticator是专门为HTTP代理设计的，它通过添加HTTP头Proxy-Authorization完成认证，但SOCKS5的认证机制是在TCP连接握手阶段实现的，和HTTP协议无关，所以直接替换代理类型会认证失败。

下面提供两种可行的解决方案：

方法一：全局设置SOCKS代理认证 #

利用Java自带的java.net.Authenticator设置全局SOCKS认证，这种方式简单直接，但会影响整个JVM内的所有网络请求。

// 设置全局SOCKS代理认证逻辑
java.net.Authenticator.setDefault(new java.net.Authenticator() {
    @Override
    protected PasswordAuthentication getPasswordAuthentication() {
        // 判断是否为代理请求
        if (getRequestorType() == RequestorType.PROXY) {
            String proxyHost = getRequestingHost();
            int proxyPort = getRequestingPort();
            // 匹配目标SOCKS代理地址，返回认证信息
            if ("host".equals(proxyHost) && proxyPort == 1000) {
                return new PasswordAuthentication("username", "password".toCharArray());
            }
        }
        return null;
    }
});

// 配置OkHTTP使用SOCKS代理
Proxy proxy = new Proxy(Proxy.Type.SOCKS, new InetSocketAddress("host", 1000));
OkHttpClient client = defaultClient(key, timeout)
        .newBuilder()
        .proxy(proxy)
        .build();

方法二：自定义SocketFactory（仅针对当前OkHTTP客户端） #

如果不想全局影响其他请求，可以自定义SocketFactory，通过反射给SOCKS Socket注入认证信息，只对当前OkHTTP客户端生效。

1. 实现自定义SocketFactory #

import java.io.IOException;
import java.lang.reflect.Field;
import java.net.*;

public class SocksAuthSocketFactory extends SocketFactory {
    private final SocketFactory defaultFactory;
    private final String username;
    private final String password;

    public SocksAuthSocketFactory(String username, String password) {
        this.defaultFactory = SocketFactory.getDefault();
        this.username = username;
        this.password = password;
    }

    @Override
    public Socket createSocket() throws IOException {
        Socket socket = defaultFactory.createSocket();
        setupSocksAuth(socket);
        return socket;
    }

    @Override
    public Socket createSocket(String host, int port) throws IOException, UnknownHostException {
        Socket socket = defaultFactory.createSocket(host, port);
        setupSocksAuth(socket);
        return socket;
    }

    @Override
    public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException {
        Socket socket = defaultFactory.createSocket(host, port, localHost, localPort);
        setupSocksAuth(socket);
        return socket;
    }

    @Override
    public Socket createSocket(InetAddress host, int port) throws IOException {
        Socket socket = defaultFactory.createSocket(host, port);
        setupSocksAuth(socket);
        return socket;
    }

    @Override
    public Socket createSocket(InetAddress host, int port, InetAddress localHost, int localPort) throws IOException {
        Socket socket = defaultFactory.createSocket(host, port, localHost, localPort);
        setupSocksAuth(socket);
        return socket;
    }

    private void setupSocksAuth(Socket socket) throws IOException {
        if (socket instanceof SocksSocketImpl) {
            try {
                // 通过反射设置SOCKS用户名
                Field userField = SocksSocketImpl.class.getDeclaredField("username");
                userField.setAccessible(true);
                userField.set(socket, username);

                // 通过反射设置SOCKS密码
                Field passField = SocksSocketImpl.class.getDeclaredField("password");
                passField.setAccessible(true);
                passField.set(socket, password);
            } catch (NoSuchFieldException | IllegalAccessException e) {
                throw new IOException("SOCKS5认证配置失败", e);
            }
        }
    }
}

2. 在OkHTTP中使用自定义SocketFactory #

Proxy proxy = new Proxy(Proxy.Type.SOCKS, new InetSocketAddress("host", 1000));
SocksAuthSocketFactory socksSocketFactory = new SocksAuthSocketFactory("username", "password");

OkHttpClient client = defaultClient(key, timeout)
        .newBuilder()
        .proxy(proxy)
        .socketFactory(socksSocketFactory)
        .build();

注意：这种方法依赖JDK内部的SocksSocketImpl类，不同JDK版本（如OpenJDK、Oracle JDK）可能存在字段名差异，需要根据实际环境调整反射逻辑。

内容的提问来源于stack exchange，提问作者Zizma