perf: 支持部署到AcePanel

2026-07-02 17:47:32 +08:00 · 2026-02-01 01:58:21 +08:00
parent 1089aeab9e
commit 1661caed05
5 changed files with 402 additions and 0 deletions
@@ -0,0 +1,242 @@
+import {AccessInput, BaseAccess, IsAccess, Pager, PageSearch} from "@certd/pipeline";
+import {HttpRequestConfig} from "@certd/basic";
+import crypto from "crypto";
+import url from "url";
+
+
+
+/**
+ */
+@IsAccess({
+  name: "acepanel",
+  title: "ACEPanel授权",
+  desc: "",
+  icon: "svg:icon-lucky"
+})
+export class AcepanelAccess extends BaseAccess {
+
+  @AccessInput({
+    title: "ACEPanel管理地址",
+    component: {
+      placeholder: "http://127.0.0.1:25475/entrance",
+    },
+    helper:"请输入ACEPanel管理地址，格式为http://127.0.0.1:25475/entrance, 要带安全入口，最后面不要加/",
+    required: true,
+  })
+  endpoint = '';
+
+  @AccessInput({
+    title: '访问令牌ID',
+    component: {
+      name: "a-input-number",
+      vModel: "value",
+    },
+    helper: "AcePanel控制台->设置->用户->访问令牌->创建访问令牌",
+    required: true,
+  })
+  tokenId :number;
+
+  @AccessInput({
+    title: '访问令牌',
+    component: {
+      placeholder: 'AccessToken',
+    },
+    helper: "创建访问令牌后复制该令牌填到这里",
+    required: true,
+    encrypt: true,
+  })
+  accessToken = '';
+
+ @AccessInput({
+    title: "忽略证书校验",
+    value: true,
+    component: {
+      name: "a-switch",
+      vModel: "checked",
+    },
+    helper: "如果面板的url是https，且使用的是自签名证书，则需要开启此选项，其他情况可以关闭",
+  })
+  skipSslVerify: boolean;
+
+  @AccessInput({
+    title: "测试",
+    component: {
+      name: "api-test",
+      action: "TestRequest"
+    },
+    helper: "点击测试接口是否正常"
+  })
+  testRequest = true;
+
+  async onTestRequest() {
+    await this.testApi();
+    return "ok"
+  }
+
+
+
+/**
+ * 计算字符串的SHA256哈希值
+ */
+ sha256Hash(text: string) {
+    return crypto.createHash('sha256').update(text || '').digest('hex');
+}
+
+/**
+ * 使用HMAC-SHA256算法计算签名
+ */
+ hmacSha256(key: string, message: string) {
+    return crypto.createHmac('sha256', key).update(message).digest('hex');
+}
+
+/**
+ * 为API请求生成签名
+ */
+ signRequest(method: string, apiUrl: string, body: string, id: number, token: string) {
+    // 解析URL
+    const parsedUrl = new url.URL(apiUrl);
+    const path = parsedUrl.pathname;
+    const query = parsedUrl.search.slice(1); // 移除开头的'?'
+
+    // 规范化路径
+    let canonicalPath = path;
+    if (!path.startsWith('/api')) {
+        const apiPos = path.indexOf('/api');
+        if (apiPos !== -1) {
+            canonicalPath = path.slice(apiPos);
+        }
+    }
+
+    // 构造规范化请求
+    const canonicalRequest = [
+        method,
+        canonicalPath,
+        query,
+        this.sha256Hash(body || '')
+    ].join('\n');
+
+    // 获取当前时间戳
+    const timestamp = Math.floor(Date.now() / 1000);
+
+    // 构造待签名字符串
+    const stringToSign = [
+        'HMAC-SHA256',
+        timestamp,
+        this.sha256Hash(canonicalRequest)
+    ].join('\n');
+
+    // 计算签名
+    const signature = this.hmacSha256(token, stringToSign);
+
+    return {
+        timestamp,
+        signature,
+        id
+    };
+}
+
+
+  async doRequest(req: HttpRequestConfig) {
+    let endpoint = this.endpoint
+    if (endpoint.endsWith('/')) {
+      endpoint = endpoint.slice(0, -1);
+    }
+    const fullUrl = endpoint + req.url;
+
+
+    const method = req.method || 'GET';
+    const body = req.data ? JSON.stringify(req.data) : '';
+    const token = this.accessToken;
+    const tokenId = this.tokenId;
+    const signingData = this.signRequest(method, fullUrl, body, tokenId, token);
+
+    // 准备HTTP请求头
+    const headers = {
+        'Content-Type': 'application/json',
+        'X-Timestamp': signingData.timestamp,
+        'Authorization': `HMAC-SHA256 Credential=${signingData.id}, Signature=${signingData.signature}`
+    };
+
+    // 发送请求
+    const res = await this.ctx.http.request({
+      ...req,
+      method,
+      headers,
+      url: fullUrl,
+      // baseURL: this.endpoint,
+      logRes: false,
+      skipSslVerify: this.skipSslVerify,
+    });
+
+    return res;
+
+  }
+
+  async testApi() {
+    
+    await this.getWebSiteList({
+      pageNo: 1,
+      pageSize: 1,
+    })
+
+    return "ok"
+  }
+
+  async getWebSiteList(opts: PageSearch) {
+    const pager = new Pager(opts);
+    const req = {
+      url: `/api/website?limit=${pager.pageSize}&page=${pager.pageNo}&type=all`,
+      method: "GET",
+    };
+    return await this.doRequest(req);
+  }
+
+  async uploadCert(cert: string, key: string) {
+    const req = {
+      url: "/api/cert/cert/upload",
+      method: "POST",
+      data: {
+        cert,
+        key
+      }
+    };
+    return await this.doRequest(req);
+  }
+
+  async deployCert(certId: number, websiteId: number) {
+    const req = {
+      url: `/api/cert/cert/${certId}/deploy`,
+      method: "POST",
+      data: {
+        id: certId,
+        website_id: websiteId
+      }
+    };
+    return await this.doRequest(req);
+  }
+
+  async updatePanelCert(cert: string, key: string) {
+
+    const oldSettingRes = await this.doRequest({
+      url: "/api/setting",
+      method: "GET",
+    });
+
+    const oldSetting = oldSettingRes.data || {};
+    const req = {
+      url: "/api/setting",
+      method: "POST",
+      data: {
+        ...oldSetting,
+        acme: false,
+        https: true,
+        cert,
+        key
+      }
+    };
+    return await this.doRequest(req);
+  }
+
+}
+
+new AcepanelAccess();