From 9cd206c773259a76d5dcd7f81380643e22391c8f Mon Sep 17 00:00:00 2001
From: oruke <orukefeng@gmail.com>
Date: Thu, 30 Apr 2026 11:03:40 +0800
Subject: [PATCH] =?UTF-8?q?fix(clash):=20=E8=A1=A5=E5=85=A8=20Google=20OAu?=
 =?UTF-8?q?th=20=E7=BC=BA=E5=A4=B1=E5=9F=9F=E5=90=8D=EF=BC=8C=E4=BF=AE?=
 =?UTF-8?q?=E5=A4=8D=E7=AC=AC=E4=B8=89=E6=96=B9=E7=99=BB=E5=BD=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

根因：Loyalsoldier direct 列表把 recaptcha.net / pki.goog 等
不含'google'关键字的 Google 基础设施域名标记为直连，
导致这些域名在国内不可达，OAuth 流程中断。

新增:
- DOMAIN-SUFFIX,goog (Google TLD，覆盖 pki.goog/floonet.goog)
- DOMAIN-SUFFIX,recaptcha.net (reCAPTCHA 人机验证)
- DOMAIN-SUFFIX,1e100.net (Google 内部基础设施)
- DOMAIN-SUFFIX,gvt2.com (漏掉的 Google CDN)
---
 clash/config.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/clash/config.yaml b/clash/config.yaml
index bb21561..900c6cf 100644
--- a/clash/config.yaml
+++ b/clash/config.yaml
@@ -481,16 +481,23 @@ rules:
   - PROCESS-NAME,tailscaled,DIRECT
   - RULE-SET,tailscale-custom,Tailscale
 
-  # ─── Google 全家桶 (必须在 reject 之前！reject 可能误拦 OAuth 需要的域名) ───
+  # ─── Google 全家桶 (必须在 reject/direct 之前！) ───
+  # DOMAIN-KEYWORD,google 抓不到不含"google"的 Google 基础设施域名
+  # recaptcha.net / pki.goog 等被 Loyalsoldier direct 列表标记为直连 → 国内不可达
   - DOMAIN-KEYWORD,google,Google
   - DOMAIN-SUFFIX,googleapis.com,Google
   - DOMAIN-SUFFIX,gstatic.com,Google
   - DOMAIN-SUFFIX,googleusercontent.com,Google
   - DOMAIN-SUFFIX,gvt1.com,Google
+  - DOMAIN-SUFFIX,gvt2.com,Google
   - DOMAIN-SUFFIX,ggpht.com,Google
   - DOMAIN-SUFFIX,youtube.com,Google
   - DOMAIN-SUFFIX,ytimg.com,Google
   - DOMAIN-SUFFIX,youtu.be,Google
+  # 不含"google"的 Google 域名
+  - DOMAIN-SUFFIX,goog,Google
+  - DOMAIN-SUFFIX,recaptcha.net,Google
+  - DOMAIN-SUFFIX,1e100.net,Google
 
   # ─── 广告拦截 ───
   - RULE-SET,reject,REJECT