feat: 支持dns-persist-01持久化验证方式申请证书，优化Acme账号的存储方式

2026-07-29 08:37:36 +08:00 · 2026-05-24 05:42:51 +08:00
parent 8edb6f8727
commit 67b05e2d75
51 changed files with 3352 additions and 110 deletions
@@ -0,0 +1,59 @@
+import assert from "assert";
+import { AcmeAccountAccess } from "./acme-account-access.js";
+import { AcmeService } from "../plugin/cert-plugin/acme.js";
+
+describe("AcmeAccountAccess", () => {
+  it("requires generated account payload before use", () => {
+    const access = new AcmeAccountAccess();
+
+    assert.throws(() => access.getAccount(), /ACME账号信息无效/);
+  });
+
+  it("parses generated account payload", () => {
+    const access = new AcmeAccountAccess();
+    access.account = JSON.stringify({
+      accountKey: "private-key",
+      accountUri: "https://example.com/acct/1",
+      caType: "letsencrypt",
+      email: "user@example.com",
+      directoryUrl: "https://example.com/directory",
+    });
+
+    const account = access.getAccount();
+
+    assert.equal(account.accountKey, "private-key");
+    assert.equal(account.accountUri, "https://example.com/acct/1");
+  });
+
+  it("generates account payload through acme service", async () => {
+    const original = AcmeService.prototype.getAcmeClient;
+    const calls: string[] = [];
+    AcmeService.prototype.getAcmeClient = async function (email: string) {
+      calls.push(email);
+      await this.userContext.setObj(this.buildAccountKey(email), { key: "generated-key" });
+      return {
+        getAccountUrl() {
+          return "https://example.com/acct/2";
+        },
+      } as any;
+    };
+
+    try {
+      const access = new AcmeAccountAccess();
+      access.caType = "google";
+      access.email = "user@example.com";
+      access.eabKid = "kid-1";
+      access.eabHmacKey = "hmac-1";
+
+      const account = JSON.parse(await access.onGenerateAccount());
+
+      assert.equal(calls[0], "user@example.com");
+      assert.equal(account.accountKey, "generated-key");
+      assert.equal(account.accountUri, "https://example.com/acct/2");
+      assert.equal(account.caType, "google");
+      assert.equal(account.email, "user@example.com");
+    } finally {
+      AcmeService.prototype.getAcmeClient = original;
+    }
+  });
+});