perf: 密钥备份

packages/ui/certd-server/src/controller/pipeline/cert-controller.ts

@@ -0,0 +1,21 @@
+import { Controller, Inject, Post, Provide, Query } from '@midwayjs/core';
+import { PipelineService } from '../../modules/pipeline/service/pipeline-service.js';
+import { BaseController, Constants } from '@certd/lib-server';
+import { StorageService } from '../../modules/pipeline/service/storage-service.js';
+
+@Provide()
+@Controller('/api/pi/cert')
+export class CertController extends BaseController {
+  @Inject()
+  pipelineService: PipelineService;
+  @Inject()
+  storeService: StorageService;
+
+  @Post('/get', { summary: Constants.per.authOnly })
+  async getCert(@Query('id') id: number) {
+    const userId = this.getUserId();
+    await this.pipelineService.checkUserId(id, userId);
+    const privateVars = this.storeService.getPipelinePrivateVars(id);
+    return this.ok(privateVars);
+  }
+}

packages/ui/certd-server/src/controller/sys/settings/sys-settings-controller.ts

@@ -80,8 +80,8 @@ export class SysSettingsController extends CrudController<SysSettingsService> {
   @Post('/getSysSettings', { summary: 'sys:settings:edit' })
   async getSysSettings() {
     const publicSettings = await this.service.getPublicSettings();
-    const privateSettings = await this.service.getPrivateSettings();
-    privateSettings.removeSecret();
+    let privateSettings = await this.service.getPrivateSettings();
+    privateSettings = privateSettings.removeSecret();
     return this.ok({ public: publicSettings, private: privateSettings });
   }
 

packages/ui/certd-server/src/modules/auto/auto-init-site.ts

@@ -43,6 +43,8 @@ export class AutoInitSite {
       await this.sysSettingsService.saveSetting(privateInfo);
     }
 
+    await this.sysSettingsService.backupSecret();
+
     await this.sysSettingsService.reloadPrivateSettings();
 
     // 授权许可

packages/ui/certd-server/src/modules/pipeline/service/storage-service.ts

@@ -44,6 +44,9 @@ export class StorageService extends BaseService<StorageEntity> {
   }
 
   async findPipelineVars(pipelineIds: number[]) {
+    if (pipelineIds == null || pipelineIds.length === 0) {
+      throw new Error('pipelineIds 不能为空');
+    }
     return await this.repository.find({
       where: {
         scope: 'pipeline',
@@ -52,4 +55,17 @@ export class StorageService extends BaseService<StorageEntity> {
       },
     });
   }
+
+  async getPipelinePrivateVars(pipelineId: number) {
+    if (pipelineId == null) {
+      throw new Error('pipelineId 不能为空');
+    }
+    return await this.repository.find({
+      where: {
+        scope: 'pipeline',
+        namespace: pipelineId + '',
+        key: 'privateVars',
+      },
+    });
+  }
 }