From 8374a4f5bf7fadd71cd2c7b141a78ba6b6632637 Mon Sep 17 00:00:00 2001
From: xiaojunnuo <xiaojunnuo@qq.com>
Date: Sun, 4 Jan 2026 23:45:55 +0800
Subject: [PATCH 1/7] =?UTF-8?q?chore:=20=E9=BB=98=E8=AE=A4=E5=AF=86?=
 =?UTF-8?q?=E7=A0=81=E7=99=BB=E5=BD=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../src/system/settings/service/models.ts     |  1 +
 .../src/locales/langs/en-US/authentication.ts |  4 ++
 .../src/locales/langs/zh-CN/authentication.ts |  4 ++
 .../src/locales/langs/zh-CN/certd.ts          |  1 +
 .../src/store/settings/api.basic.ts           |  1 +
 .../src/views/framework/login/index.vue       | 46 +++++++++++--------
 .../src/views/sys/settings/tabs/register.vue  | 19 +++++++-
 7 files changed, 55 insertions(+), 21 deletions(-)

diff --git a/packages/libs/lib-server/src/system/settings/service/models.ts b/packages/libs/lib-server/src/system/settings/service/models.ts
index 699eb1f72..df8bc8835 100644
--- a/packages/libs/lib-server/src/system/settings/service/models.ts
+++ b/packages/libs/lib-server/src/system/settings/service/models.ts
@@ -21,6 +21,7 @@ export class SysPublicSettings extends BaseSettings {
   usernameRegisterEnabled = true;
   mobileRegisterEnabled = false;
   smsLoginEnabled = false;
+  useSmsLoginDefault = true;
   emailRegisterEnabled = false;
   selfServicePasswordRetrievalEnabled = false;
 
diff --git a/packages/ui/certd-client/src/locales/langs/en-US/authentication.ts b/packages/ui/certd-client/src/locales/langs/en-US/authentication.ts
index 4bd0bbb91..f22ace42a 100644
--- a/packages/ui/certd-client/src/locales/langs/en-US/authentication.ts
+++ b/packages/ui/certd-client/src/locales/langs/en-US/authentication.ts
@@ -53,6 +53,10 @@ export default {
     alignLeft: "Align Left",
     alignRight: "Align Right",
   },
+  loginType: {
+    password: "Password Login",
+    sms: "Mobile Login",
+  },
   usernamePlaceholder: "Please enter username/email/phone number",
   passwordPlaceholder: "Please enter your password",
   mobilePlaceholder: "Please enter your mobile number",
diff --git a/packages/ui/certd-client/src/locales/langs/zh-CN/authentication.ts b/packages/ui/certd-client/src/locales/langs/zh-CN/authentication.ts
index 5e6bedf4c..c51d85a56 100644
--- a/packages/ui/certd-client/src/locales/langs/zh-CN/authentication.ts
+++ b/packages/ui/certd-client/src/locales/langs/zh-CN/authentication.ts
@@ -53,6 +53,10 @@ export default {
     alignLeft: "居左",
     alignRight: "居右",
   },
+  loginType: {
+    password: "密码登录",
+    sms: "手机号登录",
+  },
   usernamePlaceholder: "请输入用户名/邮箱/手机号",
   passwordPlaceholder: "请输入密码",
   mobilePlaceholder: "请输入手机号",
diff --git a/packages/ui/certd-client/src/locales/langs/zh-CN/certd.ts b/packages/ui/certd-client/src/locales/langs/zh-CN/certd.ts
index 26399a773..34faa0dbb 100644
--- a/packages/ui/certd-client/src/locales/langs/zh-CN/certd.ts
+++ b/packages/ui/certd-client/src/locales/langs/zh-CN/certd.ts
@@ -620,6 +620,7 @@ export default {
   proFeature: "专业版功能",
   emailServerSetup: "设置邮箱服务器",
   enableSmsLoginRegister: "开启手机号登录、注册",
+  defaultLoginType: "默认登录方式",
   commFeature: "商业版功能",
   smsProvider: "短信提供商",
   aliyunSms: "阿里云短信",
diff --git a/packages/ui/certd-client/src/store/settings/api.basic.ts b/packages/ui/certd-client/src/store/settings/api.basic.ts
index 91ded0fad..1c7d99a90 100644
--- a/packages/ui/certd-client/src/store/settings/api.basic.ts
+++ b/packages/ui/certd-client/src/store/settings/api.basic.ts
@@ -36,6 +36,7 @@ export type SysPublicSetting = {
   emailRegisterEnabled?: boolean;
   passwordLoginEnabled?: boolean;
   smsLoginEnabled?: boolean;
+  defaultLoginType?: string;
   selfServicePasswordRetrievalEnabled?: boolean;
 
   limitUserPipelineCount?: number;
diff --git a/packages/ui/certd-client/src/views/framework/login/index.vue b/packages/ui/certd-client/src/views/framework/login/index.vue
index 6e17ae2c2..85124081f 100644
--- a/packages/ui/certd-client/src/views/framework/login/index.vue
+++ b/packages/ui/certd-client/src/views/framework/login/index.vue
@@ -4,25 +4,6 @@
       <!--      <div class="login-title">登录</div>-->
       <template v-if="!isOauthOnly">
         <a-tabs v-model:active-key="formState.loginType" :tab-bar-style="{ textAlign: 'center', borderBottom: 'unset' }">
-          <a-tab-pane v-if="sysPublicSettings.smsLoginEnabled === true" key="sms" :tab="t('authentication.smsTab')">
-            <template v-if="formState.loginType === 'sms'">
-              <a-form-item has-feedback name="mobile" :rules="rules.mobile">
-                <a-input v-model:value="formState.mobile" :placeholder="t('authentication.mobilePlaceholder')" autocomplete="off">
-                  <template #prefix>
-                    <fs-icon icon="ion:phone-portrait-outline"></fs-icon>
-                  </template>
-                </a-input>
-              </a-form-item>
-
-              <a-form-item has-feedback name="smsCaptcha">
-                <CaptchaInput v-model:model-value="formState.smsCaptcha" @keydown.enter="handleFinish"></CaptchaInput>
-              </a-form-item>
-
-              <a-form-item name="smsCode" :rules="rules.smsCode">
-                <sms-code v-model:value="formState.smsCode" :captcha="formState.smsCaptcha" :mobile="formState.mobile" :phone-code="formState.phoneCode" @error="formState.smsCaptcha = null" />
-              </a-form-item>
-            </template>
-          </a-tab-pane>
           <a-tab-pane key="password" :tab="t('authentication.passwordTab')" :disabled="sysPublicSettings.passwordLoginEnabled !== true">
             <template v-if="formState.loginType === 'password'">
               <!--      <div class="login-title">登录</div>-->
@@ -46,6 +27,25 @@
               </a-form-item>
             </template>
           </a-tab-pane>
+          <a-tab-pane v-if="sysPublicSettings.smsLoginEnabled === true" key="sms" :tab="t('authentication.smsTab')">
+            <template v-if="formState.loginType === 'sms'">
+              <a-form-item has-feedback name="mobile" :rules="rules.mobile">
+                <a-input v-model:value="formState.mobile" :placeholder="t('authentication.mobilePlaceholder')" autocomplete="off">
+                  <template #prefix>
+                    <fs-icon icon="ion:phone-portrait-outline"></fs-icon>
+                  </template>
+                </a-input>
+              </a-form-item>
+
+              <a-form-item has-feedback name="smsCaptcha">
+                <CaptchaInput v-model:model-value="formState.smsCaptcha" @keydown.enter="handleFinish"></CaptchaInput>
+              </a-form-item>
+
+              <a-form-item name="smsCode" :rules="rules.smsCode">
+                <sms-code v-model:value="formState.smsCode" :captcha="formState.smsCaptcha" :mobile="formState.mobile" :phone-code="formState.phoneCode" @error="formState.smsCaptcha = null" />
+              </a-form-item>
+            </template>
+          </a-tab-pane>
         </a-tabs>
         <a-form-item>
           <a-button type="primary" size="large" html-type="button" :loading="loading" class="login-button" @click="handleFinish">
@@ -120,12 +120,18 @@ export default defineComponent({
     const userStore = useUserStore();
     const settingStore = useSettingStore();
     const formRef = ref();
+    let defaultLoginType = settingStore.sysPublic.defaultLoginType || "password";
+    if (defaultLoginType === "sms") {
+      if (!settingStore.sysPublic.smsLoginEnabled || !settingStore.isComm) {
+        defaultLoginType = "password";
+      }
+    }
     const formState = reactive({
       username: "",
       phoneCode: "86",
       mobile: "",
       password: "",
-      loginType: urlLoginType || settingStore.sysPublic.smsLoginEnabled ? "sms" : "password", //password
+      loginType: urlLoginType || settingStore.sysPublic.defaultLoginType, //password
       smsCode: "",
       captcha: null,
       smsCaptcha: null,
diff --git a/packages/ui/certd-client/src/views/sys/settings/tabs/register.vue b/packages/ui/certd-client/src/views/sys/settings/tabs/register.vue
index 5912d7868..28c2e68dd 100644
--- a/packages/ui/certd-client/src/views/sys/settings/tabs/register.vue
+++ b/packages/ui/certd-client/src/views/sys/settings/tabs/register.vue
@@ -28,6 +28,11 @@
             <router-link to="/sys/settings/email">{{ t("certd.emailServerSetup") }}</router-link>
           </div>
         </a-form-item>
+        <a-form-item :label="t('certd.defaultLoginType')" :name="['public', 'defaultLoginType']" required>
+          <div class="flex-o">
+            <a-radio-group v-model:value="formState.public.defaultLoginType" :options="loginTypeOptions" :title="t('certd.commFeature')" />
+          </div>
+        </a-form-item>
         <a-form-item :label="t('certd.enableSmsLoginRegister')" :name="['public', 'smsLoginEnabled']">
           <div class="flex-o">
             <a-switch v-model:checked="formState.public.smsLoginEnabled" :disabled="!settingsStore.isComm" :title="t('certd.commFeature')" />
@@ -65,7 +70,7 @@
 <script setup lang="tsx">
 import { notification } from "ant-design-vue";
 import { merge } from "lodash-es";
-import { reactive, ref, Ref } from "vue";
+import { computed, reactive, ref, Ref } from "vue";
 import { useSettingStore } from "/@/store/settings";
 import * as api from "/@/views/sys/settings/api";
 import { SysSettings } from "/@/views/sys/settings/api";
@@ -187,6 +192,18 @@ const onFinish = async (form: any) => {
     saveLoading.value = false;
   }
 };
+
+const loginTypeOptions = computed(() => [
+  {
+    label: t("authentication.loginType.password"),
+    value: "password",
+  },
+  {
+    label: t("authentication.loginType.sms"),
+    value: "sms",
+    disabled: !formState.public.smsLoginEnabled,
+  },
+]);
 </script>
 <style lang="less">
 .sys-settings-register {

From 42436224148d6fffe5da8e5e0185a698e079032b Mon Sep 17 00:00:00 2001
From: xiaojunnuo <xiaojunnuo@qq.com>
Date: Mon, 5 Jan 2026 00:20:18 +0800
Subject: [PATCH 2/7] =?UTF-8?q?perf:=20=E6=96=B0=E5=A2=9E=E9=83=A8?=
 =?UTF-8?q?=E7=BD=B21panel=E9=9D=A2=E6=9D=BF=E8=AF=81=E4=B9=A6=E6=8F=92?=
 =?UTF-8?q?=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docs/guide/plugins/deploy.md                  |  11 +-
 .../certd-server/metadata/access_wxpay.yaml   |   8 +-
 .../metadata/deploy_1PanelDeployToPanel.yaml  |  77 +++++++++
 .../1panel/plugins/deploy-to-panel.ts         | 155 ++++++++++++++++++
 .../plugin-plus/1panel/plugins/index.ts       |   1 +
 5 files changed, 244 insertions(+), 8 deletions(-)
 create mode 100644 packages/ui/certd-server/metadata/deploy_1PanelDeployToPanel.yaml
 create mode 100644 packages/ui/certd-server/src/plugins/plugin-plus/1panel/plugins/deploy-to-panel.ts

diff --git a/docs/guide/plugins/deploy.md b/docs/guide/plugins/deploy.md
index bf0477fe0..ec4f424f1 100644
--- a/docs/guide/plugins/deploy.md
+++ b/docs/guide/plugins/deploy.md
@@ -1,5 +1,5 @@
 # 任务插件
-共 `109` 款任务插件    
+共 `110` 款任务插件    
 ## 1. 证书申请
 
 | 序号 | 名称 | 说明 |
@@ -63,10 +63,11 @@
 | 12.| **K8S-Ingress 证书部署** | 部署证书到k8s的Ingress | 
 | 13.| **K8S-Apply自定义yaml** | apply自定义yaml到k8s | 
 | 14.| **1Panel-部署证书到1Panel** | 更新1Panel的证书 | 
-| 15.| **Plesk-部署Plesk网站证书** |  | 
-| 16.| **雷池-更新证书** | 更新长亭雷池WAF的证书 | 
-| 17.| **lucky-更新Lucky证书** |  | 
-| 18.| **uniCloud-部署到服务空间** | 部署到服务空间 | 
+| 15.| **1Panel-部署面板证书** | 更新1Panel的面板证书 | 
+| 16.| **Plesk-部署Plesk网站证书** |  | 
+| 17.| **雷池-更新证书** | 更新长亭雷池WAF的证书 | 
+| 18.| **lucky-更新Lucky证书** |  | 
+| 19.| **uniCloud-部署到服务空间** | 部署到服务空间 | 
 ## 5. 阿里云
 
 | 序号 | 名称 | 说明 |
diff --git a/packages/ui/certd-server/metadata/access_wxpay.yaml b/packages/ui/certd-server/metadata/access_wxpay.yaml
index bed929e64..5a5d77536 100644
--- a/packages/ui/certd-server/metadata/access_wxpay.yaml
+++ b/packages/ui/certd-server/metadata/access_wxpay.yaml
@@ -15,19 +15,21 @@ input:
     required: true
     encrypt: false
   publicKey:
-    title: 公钥
+    title: 证书公钥
     component:
       name: a-textarea
       rows: 3
-      placeholder: MIIBIjANBg...
+      placeholder: '-----BEGIN CERTIFICATE-----'
+    helper: 微信商户平台—>账户设置—>API安全—>验证商户身份—>商户API证书—>管理证书—>apiclient_cert.pem
     required: true
     encrypt: true
   privateKey:
     title: 私钥
     component:
-      placeholder: MIIEvQIBADANB...
+      placeholder: '-----BEGIN PRIVATE KEY-----'
       name: a-textarea
       rows: 3
+    helper: 证书私钥 apiclient_key.pem
     required: true
     encrypt: true
   key:
diff --git a/packages/ui/certd-server/metadata/deploy_1PanelDeployToPanel.yaml b/packages/ui/certd-server/metadata/deploy_1PanelDeployToPanel.yaml
new file mode 100644
index 000000000..d87bf7487
--- /dev/null
+++ b/packages/ui/certd-server/metadata/deploy_1PanelDeployToPanel.yaml
@@ -0,0 +1,77 @@
+showRunStrategy: false
+default:
+  strategy:
+    runStrategy: 1
+name: 1PanelDeployToPanel
+title: 1Panel-部署面板证书
+icon: svg:icon-onepanel
+desc: 更新1Panel的面板证书
+group: panel
+needPlus: false
+input:
+  cert:
+    title: 域名证书
+    helper: 请选择前置任务输出的域名证书
+    component:
+      name: output-selector
+      from:
+        - ':cert:'
+    required: true
+    order: 0
+  certDomains:
+    title: 当前证书域名
+    component:
+      name: cert-domains-getter
+    mergeScript: |2-
+
+              return {
+                component:{
+                    inputKey: ctx.compute(({form})=>{
+                      return form.cert
+                    }),
+                }
+              }
+              
+    template: false
+    required: true
+    order: 0
+  accessId:
+    title: 1Panel授权
+    helper: 1Panel授权
+    component:
+      name: access-selector
+      type: 1panel
+    required: true
+    order: 0
+  currentNode:
+    title: 1Panel节点
+    component:
+      name: remote-select
+      vModel: value
+      mode: tags
+      type: plugin
+      typeName: OnePanelDeployToPanelPlugin
+      action: onGetNodes
+      search: false
+      pager: false
+      watches:
+        - certDomains
+        - accessId
+    value: local
+    required: true
+    mergeScript: |2-
+
+                return {
+                  component:{
+                    form: ctx.compute(({form})=>{
+                      return form
+                    })
+                  },
+               }
+              
+    helper: 要更新的1Panel证书的节点信息，目前只有v2存在此概念
+    order: 0
+output: {}
+pluginType: deploy
+type: builtIn
+scriptFilePath: /plugins/plugin-plus/1panel/plugins/deploy-to-panel.js
diff --git a/packages/ui/certd-server/src/plugins/plugin-plus/1panel/plugins/deploy-to-panel.ts b/packages/ui/certd-server/src/plugins/plugin-plus/1panel/plugins/deploy-to-panel.ts
new file mode 100644
index 000000000..2f934d376
--- /dev/null
+++ b/packages/ui/certd-server/src/plugins/plugin-plus/1panel/plugins/deploy-to-panel.ts
@@ -0,0 +1,155 @@
+import { AbstractTaskPlugin, IsTaskPlugin, pluginGroups, RunStrategy, TaskInput } from "@certd/pipeline";
+
+import { CertApplyPluginNames, CertInfo } from "@certd/plugin-cert";
+import { OnePanelAccess } from "../access.js";
+import { CertReader, createCertDomainGetterInputDefine, createRemoteSelectInputDefine } from "@certd/plugin-lib";
+import { OnePanelClient } from "../client.js";
+
+@IsTaskPlugin({
+  name: "1PanelDeployToPanel",
+  title: "1Panel-部署面板证书",
+  icon: "svg:icon-onepanel",
+  desc: "更新1Panel的面板证书",
+  group: pluginGroups.panel.key,
+  default: {
+    strategy: {
+      runStrategy: RunStrategy.SkipWhenSucceed,
+    },
+  },
+  needPlus: false,
+})
+export class OnePanelDeployToPanelPlugin extends AbstractTaskPlugin {
+  //证书选择，此项必须要有
+  @TaskInput({
+    title: "域名证书",
+    helper: "请选择前置任务输出的域名证书",
+    component: {
+      name: "output-selector",
+      from: [...CertApplyPluginNames],
+    },
+    required: true,
+  })
+  cert!: CertInfo;
+
+  @TaskInput(createCertDomainGetterInputDefine())
+  certDomains!: string[];
+
+  //授权选择框
+  @TaskInput({
+    title: "1Panel授权",
+    helper: "1Panel授权",
+    component: {
+      name: "access-selector",
+      type: "1panel",
+    },
+    required: true,
+  })
+  accessId!: string;
+
+  @TaskInput(
+    createRemoteSelectInputDefine({
+      title: "1Panel节点",
+      helper: "要更新的1Panel证书的节点信息，目前只有v2存在此概念",
+      typeName: "OnePanelDeployToPanelPlugin",
+      action: OnePanelDeployToPanelPlugin.prototype.onGetNodes.name,
+      value: "local",
+      required: true,
+    })
+  )
+  currentNode!: string;
+
+
+  access: OnePanelAccess;
+  async onInstance() {
+    this.access = await this.getAccess(this.accessId);
+  }
+  //http://xxx:xxxx/1panel/swagger/index.html#/App/get_apps__key
+  async execute(): Promise<void> {
+
+    const client = new OnePanelClient({
+      access: this.access,
+      http: this.http,
+      logger: this.logger,
+      utils: this.ctx.utils,
+    });
+
+
+    const certReader = new CertReader(this.cert);
+    const domain = certReader.getMainDomain();
+
+    if (this.access.apiVersion === "v1") {
+      const uploadRes = await client.doRequest({
+        // api/v1/settings/ssl/update
+        url: `/api/v1/settings/ssl/update`,
+        method: "post",
+        data: {
+          cert: this.cert.crt,
+          key: this.cert.key,
+          domain: domain,
+          ssl: "enable",
+          sslID: null,
+          sslType: "import-paste",
+        },
+        currentNode: this.currentNode,
+      });
+      console.log("uploadRes", JSON.stringify(uploadRes));
+    } else {
+      const uploadRes = await client.doRequest({
+        // api/v2/core/settings/ssl/update
+        url: `/api/v2/core/settings/ssl/update`,
+        method: "post",
+        data: {
+          cert: this.cert.crt,
+          key: this.cert.key,
+          domain: domain,
+          ssl: "Enable",
+          sslID: null,
+          sslType: "import-paste",
+        },
+        currentNode: this.currentNode,
+      });
+      console.log("uploadRes", JSON.stringify(uploadRes));
+    }
+
+    await this.ctx.utils.sleep(10000);
+    this.logger.info(`证书更新完成`);
+
+  }
+
+  isNeedUpdate(certRes: any) {
+    if (certRes.pem === this.cert.crt && certRes.key === this.cert.key) {
+      this.logger.info(`证书(id:${certRes.id})已经是最新的了，不需要更新`);
+      return false;
+    }
+    return true;
+  }
+
+
+
+  async onGetNodes() {
+    const options = [{ label: "主节点", value: "local" }];
+    if (this.access.apiVersion === "v1") {
+      return options;
+    }
+    if (!this.access) {
+      throw new Error("请先选择授权");
+    }
+    const client = new OnePanelClient({
+      access: this.access,
+      http: this.http,
+      logger: this.logger,
+      utils: this.ctx.utils,
+    });
+
+    const resp = await client.doRequest({
+      url: `/api/${this.access.apiVersion}/core/nodes/list`,
+      method: "post",
+      data: {},
+    });
+
+    // console.log('resp', resp)
+    return [...options, ...(resp?.map(item => ({ label: `${item.addr}(${item.name})`, value: item.name })) || [])];
+  }
+
+}
+new OnePanelDeployToPanelPlugin();
diff --git a/packages/ui/certd-server/src/plugins/plugin-plus/1panel/plugins/index.ts b/packages/ui/certd-server/src/plugins/plugin-plus/1panel/plugins/index.ts
index 1c360e693..85177a80d 100644
--- a/packages/ui/certd-server/src/plugins/plugin-plus/1panel/plugins/index.ts
+++ b/packages/ui/certd-server/src/plugins/plugin-plus/1panel/plugins/index.ts
@@ -1 +1,2 @@
 export * from "./deploy-to-website.js";
+export * from "./deploy-to-panel.js";
\ No newline at end of file

From 9ba6c838215d0750cda925778a47002a521f05e9 Mon Sep 17 00:00:00 2001
From: xiaojunnuo <xiaojunnuo@qq.com>
Date: Mon, 5 Jan 2026 01:00:46 +0800
Subject: [PATCH 3/7] =?UTF-8?q?perf:=20zenlayer=E8=AF=81=E4=B9=A6=E6=9B=B4?=
 =?UTF-8?q?=E6=96=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../src/views/framework/login/index.vue       |   2 +-
 packages/ui/certd-server/.env                 |   2 +-
 packages/ui/certd-server/src/plugins/index.ts |   3 +-
 .../src/plugins/plugin-zenlayer/access.ts     | 377 ++++++++++++++++++
 .../src/plugins/plugin-zenlayer/client.ts     |   0
 .../src/plugins/plugin-zenlayer/index.ts      |   2 +
 .../plugins/plugin-zenlayer/plugins/index.ts  |   1 +
 .../plugins/plugin-refresh-cert.ts            | 108 +++++
 8 files changed, 492 insertions(+), 3 deletions(-)
 create mode 100644 packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
 create mode 100644 packages/ui/certd-server/src/plugins/plugin-zenlayer/client.ts
 create mode 100644 packages/ui/certd-server/src/plugins/plugin-zenlayer/index.ts
 create mode 100644 packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/index.ts
 create mode 100644 packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/plugin-refresh-cert.ts

diff --git a/packages/ui/certd-client/src/views/framework/login/index.vue b/packages/ui/certd-client/src/views/framework/login/index.vue
index 85124081f..1b971806a 100644
--- a/packages/ui/certd-client/src/views/framework/login/index.vue
+++ b/packages/ui/certd-client/src/views/framework/login/index.vue
@@ -131,7 +131,7 @@ export default defineComponent({
       phoneCode: "86",
       mobile: "",
       password: "",
-      loginType: urlLoginType || settingStore.sysPublic.defaultLoginType, //password
+      loginType: urlLoginType || defaultLoginType, //password
       smsCode: "",
       captcha: null,
       smsCaptcha: null,
diff --git a/packages/ui/certd-server/.env b/packages/ui/certd-server/.env
index 345247b4a..2a245bd94 100644
--- a/packages/ui/certd-server/.env
+++ b/packages/ui/certd-server/.env
@@ -1,2 +1,2 @@
 LEGO_VERSION=4.30.1
-certd_plugin_loadmode=metadata
\ No newline at end of file
+certd_plugin_loadmode=dev
\ No newline at end of file
diff --git a/packages/ui/certd-server/src/plugins/index.ts b/packages/ui/certd-server/src/plugins/index.ts
index d4d275ee5..1644c5952 100644
--- a/packages/ui/certd-server/src/plugins/index.ts
+++ b/packages/ui/certd-server/src/plugins/index.ts
@@ -43,4 +43,5 @@ export * from './plugin-ucloud/index.js'
 export * from './plugin-goedge/index.js'
 export * from './plugin-lib/index.js'
 export * from './plugin-plus/index.js'
-export * from './plugin-cert/index.js'
\ No newline at end of file
+export * from './plugin-cert/index.js'
+export * from './plugin-zenlayer/index.js'
\ No newline at end of file
diff --git a/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts b/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
new file mode 100644
index 000000000..495e77180
--- /dev/null
+++ b/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
@@ -0,0 +1,377 @@
+import { HttpRequestConfig } from '@certd/basic';
+import { IsAccess, AccessInput, BaseAccess, PageSearch } from '@certd/pipeline';
+import qs from 'qs';
+
+export type ZenlayerRequest = HttpRequestConfig & {
+  action: string;
+  version?: string;
+}
+/**
+ * 这个注解将注册一个授权配置
+ * 在certd的后台管理系统中，用户可以选择添加此类型的授权
+ */
+@IsAccess({
+  name: 'zenlayer',
+  title: 'Zenlayer授权',
+  icon: 'svg:icon-zenlayer',
+  desc: 'Zenlayer授权',
+})
+export class ZenlayerAccess extends BaseAccess {
+
+  /**
+   * 授权属性配置
+   */
+  @AccessInput({
+    title: 'AccessKeyId',
+    component: {
+      placeholder: '访问密钥ID',
+    },
+    helper: "[访问密钥管理](https://console.zenlayer.com/accessKey)获取",
+    required: true,
+    encrypt: false,
+  })
+  accessKeyId = '';
+
+
+  /**
+   * 授权属性配置
+   */
+  @AccessInput({
+    title: 'AccessKey Password',
+    component: {
+      placeholder: '访问密钥密码',
+    },
+    required: true,
+    encrypt: true,
+  })
+  accessKeyPassword = '';
+
+
+
+
+  @AccessInput({
+    title: "测试",
+    component: {
+      name: "api-test",
+      action: "TestRequest"
+    },
+    helper: "点击测试接口是否正常"
+  })
+  testRequest = true;
+
+  client: any;
+
+  async onTestRequest() {
+    await this.getCertList();
+    return "ok";
+  }
+
+
+  async getCertList(req: PageSearch = {}) {
+    const pageNo = req.pageNo ?? 1;
+    const pageSize = req.pageSize ?? 100;
+    const res = await this.doRequest({
+      url: "/",
+      baseURL: "https://console.zenlayer.com/api/v2/cdn",
+      action: "DescribeCertificates",
+      data: {
+        PageNum: pageNo,
+        PageSize: pageSize
+      }
+    });
+    return res;
+  }
+
+
+  /**
+   * 申请安全凭证
+本文使用的安全凭证为密钥，密钥包括 accessKeyId 和 accessKeyPassword。
+
+AccessKeyId：用于标识 API 调用者身份，可以简单类比为用户名。
+
+AccessKeyPassword：用于验证 API 调用者的身份，可以简单类比为密码。
+
+用户必须严格保管安全凭证，避免泄露，否则将危及财产安全。如已泄漏，请立刻禁用该安全凭证。
+
+你可以根据Zenlayer的用户指南文档来获取你的安全凭证。
+
+签名过程v2
+Zenlayer Open API V2 支持 Post 请求，仅支持 Content-Type: application/json。 接口使用json格式进行调用。
+
+下面以裸机云查询实例列表为例：
+
+
+复制
+curl -X POST https://console.zenlayer.com/api/v2/bmc \
+-H "Authorization: ZC2-HMAC-SHA256 Credential=0D9UtpyKYcHxms5v, SignedHeaders=content-type;host, Signature=efb356c32e55c781e10dc676da59462c22596d82e91c57803666243379555b2f" \
+-H "Content-Type: application/json; charset=utf-8" \
+-H "X-ZC-Action: DescribeInstances" \
+-H "X-ZC-Timestamp: 1673361177" \
+-H "X-ZC-Signature-Method: ZC2-HMAC-SHA256" \
+-H "X-ZC-Version: 2022-11-20" \
+-d '{"pageSize":10,"pageNum":1,"zoneId":"HKG-A"}'
+Request Headers:
+
+Key
+说明
+示例
+X-ZC-Timestamp
+
+请求的时间戳，精确到秒
+
+1673361177
+
+X-ZC-Version
+
+请求的API版本
+
+2022-11-20
+
+X-ZC-Action
+
+请求的动作
+
+DescribeInstances
+
+X-ZC-Signature-Method
+
+签名方法
+
+ZC2-HMAC-SHA256
+
+Authorization
+
+签名认证
+
+1. 拼接规范请求串
+按如下伪代码格式拼接规范请求串（CanonicalRequest）：
+
+
+复制
+CanonicalRequest = 
+  HTTPRequestMethod + '\n' + 
+  CanonicalURI + '\n' + 
+  CanonicalQueryString + '\n' + 
+  CanonicalHeaders + '\n' + 
+  SignedHeaders + '\n' + 
+  HexEncode(Hash(RequestPayload))
+字段名称
+解释
+HTTPRequestMethod
+
+HTTP 请求方法。
+
+固定为POST。
+
+CanonicalURI
+
+URI 参数。
+
+API 固定为正斜杠（/）。
+
+CanonicalQueryString
+
+发起 HTTP 请求 URL 中的查询字符串。
+
+对于 POST 请求，固定为空字符串""。
+
+CanonicalHeaders
+
+参与签名的头部信息，可加入自定义的头部参与签名以提高自身请求的唯一性和安全性。
+
+拼接规则：头部 key 和 value 统一转成小写，并去掉首尾空格，按照 key:value\n 格式拼接（注意最后包含'\n'）；多个头部，按照头部 key（小写）的 ASCII 升序进行拼接。此示例计算结果是：
+
+content-type:application/json; charset=utf-8\nhost:console.zenlayer.com。
+
+SignedHeaders
+
+参与签名的头部信息。
+
+说明此次请求有哪些头部参与了签名，和 CanonicalHeaders 包含的头部内容是一一对应的。content-type 和 host 为必选头部。 拼接规则：头部 key 统一转成小写；多个头部 key（小写）按照 ASCII 升序进行拼接，并且以分号（;）分隔。此示例为content-type;host。
+
+HashedRequestPayload
+
+请求正文（payload，即 body)。
+
+此示例为{"pageSize":10,"pageNum":1,"zoneId":"HKG-A"}）的哈希值，计算伪代码为 HexEncode(Hash(RequestPayload))，即对 HTTP 请求正文做 SHA256 哈希，然后十六进制编码。此示例的计算结果是 ：5f714687ba91c606d503467766151206392474accd137ffea6dce2420b67c29a。
+
+2. 拼接待签字符串
+
+复制
+StringToSign =
+    Algorithm + \n +           # 指定签名算法。对于 SHA256，算法为 ZC2-HMAC-SHA256。
+    RequestDateTime + \n +     # 指定请求时间戳。
+    HashedCanonicalRequest 
+字段名称
+解释
+Algorithm
+
+签名算法。
+
+目前固定为 ZC2-HMAC-SHA256。
+
+RequestTimestamp
+
+请求时间戳。
+
+即请求头部的公共参数 X-ZC-Timestamp 取值，取当前时间 UNIX 时间戳，精确到秒。此示例取值为1673361177。
+
+HashedCanonicalRequest
+
+前述步骤拼接所得规范请求串的哈希值。
+
+计算伪代码为 Lowercase(HexEncode(Hash.SHA256(CanonicalRequest)))。此示例计算结果是： 29396f9dfa0f03820b931e8aa06e20cda197e73285ebd76aceb83f7dede493ee。
+
+根据以上规则，示例中得到的待签名字符串如下：
+
+
+复制
+ZC2-HMAC-SHA256
+1673361177
+29396f9dfa0f03820b931e8aa06e20cda197e73285ebd76aceb83f7dede493ee
+3. 基于 AK 和 StringToSign 计算出签名
+计算签名，伪代码如下：
+
+
+复制
+Signature = HexEncode(HMAC_SHA256(AccessKeyPassword, StringToSign))
+字段名称
+解释
+AccessKeyPassword
+
+原始的 AccessKeyPassword。
+
+如 Gu5t9xGARNpq86cd98joQYCN3。
+
+StringToSign
+
+步骤二获得的结果。
+
+4. 拼接 Authorization
+按如下格式拼接 Authorization：
+
+
+复制
+Authorization =
+    Algorithm + ' ' +
+    'Credential=' + AccessKeyId +  ', ' +
+    'SignedHeaders=' + SignedHeaders + ', ' +
+    'Signature=' + Signature
+字段名称
+解释
+Algorithm
+
+签名算法。
+
+目前为 ZC2-HMAC-SHA256。
+
+AccessKeyId
+
+密钥对中的 AccessKeyId。
+
+如 0D9UtpyKYcHxms5v。
+
+SignedHeaders
+
+见上文，参与签名的头部信息。
+
+此示例取值为 content-type;host。
+
+Signature
+
+签名值。
+
+根据以上方法，此示例计算结果是 efb356c32e55c781e10dc676da59462c22596d82e91c57803666243379555b2f。
+   */
+
+
+  async getAuthorizationHeaders(req: ZenlayerRequest) {
+
+    /**
+     * CanonicalRequest = 
+  HTTPRequestMethod + '\n' + 
+  CanonicalURI + '\n' + 
+  CanonicalQueryString + '\n' + 
+  CanonicalHeaders + '\n' + 
+  SignedHeaders + '\n' + 
+  HexEncode(Hash(RequestPayload))
+     */
+    if (!req.headers) {
+      req.headers = {};
+    }
+    if (!req.headers['content-type']) {
+      req.headers['content-type'] = "application/json; charset=utf-8";
+    }
+    if (!req.headers['host']) {
+      req.headers['host'] = "console.zenlayer.com";
+    }
+
+    const CanonicalQueryString = req.method === 'POST' ? '' : qs.stringify(req.params);
+    const SignedHeaders = "content-type;host";
+    const CanonicalHeaders = `${req.headers['content-type']}\n${req.headers['host']}`;
+    const HashedRequestPayload = this.ctx.utils.hash.sha256(JSON.stringify(req.data || {}), "hex");
+    const CanonicalRequest = `${req.method}\n${req.url}\n${CanonicalQueryString}\n${CanonicalHeaders}\n${SignedHeaders}\n${HashedRequestPayload}`;
+    const timestamp = Math.floor(Date.now() / 1000);
+    const signMethod = "ZC2-HMAC-SHA256";
+
+    const StringToSign = `${signMethod}\n${timestamp}\n${this.accessKeyId}\n${CanonicalRequest}`;
+
+    const signature = this.ctx.utils.hash.hmacSha256(StringToSign, "hex");
+
+    const authorization = `${signMethod} Credential=${this.accessKeyId}, SignedHeaders=${SignedHeaders}, Signature=${signature}`;
+
+
+    /**
+     * X-ZC-Timestamp
+
+请求的时间戳，精确到秒
+
+1673361177
+
+X-ZC-Version
+
+请求的API版本
+
+2022-11-20
+
+X-ZC-Action
+
+请求的动作
+
+DescribeInstances
+
+X-ZC-Signature-Method
+
+签名方法
+
+ZC2-HMAC-SHA256
+
+Authorization
+
+签名认证
+     */
+    return {
+      ...req.headers,
+      'X-ZC-Timestamp': timestamp.toString(),
+      'X-ZC-Action': req.action,
+      'X-ZC-Version': req.version || "2022-11-20",
+      'X-ZC-Signature-Method': signMethod,
+      'Authorization': authorization,
+    };
+  }
+
+  async doRequest(req: ZenlayerRequest) {
+    const headers = await this.getAuthorizationHeaders(req);
+    req.headers = headers
+    const res = await this.ctx.http.request({
+      baseURL: req.baseURL || "https://console.zenlayer.com",
+      ...req
+    });
+    this.ctx.logger.info(`doRequest ${req.url} ${res.statusCode} ${JSON.stringify(res.data)}`);
+    return res;
+  }
+
+
+}
+
+new ZenlayerAccess();
diff --git a/packages/ui/certd-server/src/plugins/plugin-zenlayer/client.ts b/packages/ui/certd-server/src/plugins/plugin-zenlayer/client.ts
new file mode 100644
index 000000000..e69de29bb
diff --git a/packages/ui/certd-server/src/plugins/plugin-zenlayer/index.ts b/packages/ui/certd-server/src/plugins/plugin-zenlayer/index.ts
new file mode 100644
index 000000000..c49d8bf88
--- /dev/null
+++ b/packages/ui/certd-server/src/plugins/plugin-zenlayer/index.ts
@@ -0,0 +1,2 @@
+export * from './access.js';
+export * from './plugins/index.js';
diff --git a/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/index.ts b/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/index.ts
new file mode 100644
index 000000000..55ab7cf74
--- /dev/null
+++ b/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/index.ts
@@ -0,0 +1 @@
+export * from './plugin-refresh-cert.js';
diff --git a/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/plugin-refresh-cert.ts b/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/plugin-refresh-cert.ts
new file mode 100644
index 000000000..f63cca525
--- /dev/null
+++ b/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/plugin-refresh-cert.ts
@@ -0,0 +1,108 @@
+import { AbstractTaskPlugin, IsTaskPlugin, PageSearch, pluginGroups, RunStrategy, TaskInput } from "@certd/pipeline";
+import { CertApplyPluginNames, CertInfo } from "@certd/plugin-cert";
+import { createCertDomainGetterInputDefine, createRemoteSelectInputDefine } from "@certd/plugin-lib";
+
+@IsTaskPlugin({
+  //命名规范，插件类型+功能（就是目录plugin-demo中的demo），大写字母开头，驼峰命名
+  name: "ZenlayerRefreshCert",
+  title: "Zenlayer-刷新证书",
+  desc: "将证书部署到Zenlayer CDN",
+  icon: "svg:icon-zenlayer",
+  //插件分组
+  group: pluginGroups.cdn.key,
+  needPlus: false,
+  default: {
+    //默认值配置照抄即可
+    strategy: {
+      runStrategy: RunStrategy.SkipWhenSucceed
+    }
+  }
+})
+//类名规范，跟上面插件名称（name）一致
+export class ZenlayerRefreshCert extends AbstractTaskPlugin {
+  //证书选择，此项必须要有
+  @TaskInput({
+    title: "域名证书",
+    helper: "请选择前置任务输出的域名证书",
+    component: {
+      name: "output-selector",
+      from: [...CertApplyPluginNames]
+    }
+    // required: true, // 必填
+  })
+  cert!: CertInfo | { type: string, id: number, name: string };
+
+  @TaskInput(createCertDomainGetterInputDefine({ props: { required: false } }))
+  certDomains!: string[];
+
+  //授权选择框
+  @TaskInput({
+    title: "Zenlayer授权",
+    component: {
+      name: "access-selector",
+      type: "zenlayer" //固定授权类型
+    },
+    required: true //必填
+  })
+  accessId!: string;
+  //
+
+  @TaskInput(
+    createRemoteSelectInputDefine({
+      title: "证书ID列表",
+      helper: "要更新的Zenlayer证书ID列表",
+
+      action: ZenlayerRefreshCert.prototype.onGetCertList.name
+    })
+  )
+  certList!: string[];
+
+  //插件实例化时执行的方法
+  async onInstance() {
+  }
+
+  //插件执行方法
+  async execute(): Promise<void> {
+    // const access = await this.getAccess<ZenlayerAccess>(this.accessId);
+    this.logger.info("部署完成");
+  }
+  async onGetCertList(req: PageSearch = {}) {
+    // const access = await this.getAccess<ZenlayerAccess>(this.accessId);
+
+    // const pageNo = req.pageNo ?? 1;
+    // const pageSize = req.pageSize ?? 100;
+    // const res = await access.GetCertList(
+    //   {
+    //     PageNo: pageNo,
+    //     PageSize: pageSize
+    //   }
+    // );
+    // const total = res.TotalCount;
+    // const list = res.DomainInfoList || [];
+    // if (!list || list.length === 0) {
+    //   throw new Error("没有找到CDN域名，请先在控制台创建CDN域名");
+    // }
+
+    // /**
+    //  *  "Domain": "ucloud.certd.handsfree.work",
+    //   "DomainId": "ucdn-1kwdtph5ygbb"
+    //  */
+    // const options = list.map((item: any) => {
+    //   return {
+    //     label: `${item.Domain}<${item.DomainId}>`,
+    //     value: `${item.Domain}`,
+    //     domain: item.Domain
+    //   };
+    // });
+    // return {
+    //   list: this.ctx.utils.options.buildGroupOptions(options, this.certDomains),
+    //   total: total,
+    //   pageNo: pageNo,
+    //   pageSize: pageSize
+    // };
+  }
+
+}
+
+//实例化一下，注册插件
+new ZenlayerRefreshCert();

From 7ee39fd4eddfc847bcef879f0904a4319993d081 Mon Sep 17 00:00:00 2001
From: xiaojunnuo <xiaojunnuo@qq.com>
Date: Mon, 5 Jan 2026 22:29:58 +0800
Subject: [PATCH 4/7] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8D=E7=A6=81=E7=94=A8?=
 =?UTF-8?q?=E7=AC=AC=E4=B8=89=E6=96=B9=E7=99=BB=E5=BD=95=E8=87=AA=E5=8A=A8?=
 =?UTF-8?q?=E6=B3=A8=E5=86=8C=E6=97=A0=E6=95=88=E7=9A=84bug?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../certd-client/src/views/framework/oauth/oauth-callback.vue   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/ui/certd-client/src/views/framework/oauth/oauth-callback.vue b/packages/ui/certd-client/src/views/framework/oauth/oauth-callback.vue
index ba5880c59..2be1527d1 100644
--- a/packages/ui/certd-client/src/views/framework/oauth/oauth-callback.vue
+++ b/packages/ui/certd-client/src/views/framework/oauth/oauth-callback.vue
@@ -55,7 +55,7 @@ async function handleOauthToken() {
     //需要绑定
     bindCode.value = res.validationCode;
     //如果开启了自动注册，默认自动注册账号
-    if (settingStore.sysPublic.registerEnabled) {
+    if (settingStore.sysPublic.oauthAutoRegister) {
       autoRegister();
     } else {
       bindRequired.value = true;

From e500af1ed4bdc205bd235d88c1e5d511ec92e126 Mon Sep 17 00:00:00 2001
From: xiaojunnuo <xiaojunnuo@qq.com>
Date: Mon, 5 Jan 2026 23:04:07 +0800
Subject: [PATCH 5/7] =?UTF-8?q?chore:=20=E4=BC=98=E5=8C=96=E6=94=AF?=
 =?UTF-8?q?=E4=BB=98=E6=8F=90=E4=BE=9B=E8=80=85=E6=8F=92=E4=BB=B6=E4=BD=8D?=
 =?UTF-8?q?=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 packages/core/basic/src/utils/util.hash.ts    |   5 +
 packages/ui/certd-server/package.json         |   4 +-
 .../src/modules/auto/auto-b-load-plugins.ts   |   3 +
 .../src/modules/suite/payments/alipay.ts      | 148 ++++++++++++++
 .../src/modules/suite/payments/index.ts       |   7 +
 .../src/modules/suite/payments/wxpay.ts       | 136 +++++++++++++
 .../src/modules/suite/payments/yizhifu.ts     | 184 ++++++++++++++++++
 .../src/plugins/plugin-zenlayer/access.ts     |   2 +-
 pnpm-lock.yaml                                | 172 ++++------------
 9 files changed, 525 insertions(+), 136 deletions(-)
 create mode 100644 packages/ui/certd-server/src/modules/suite/payments/alipay.ts
 create mode 100644 packages/ui/certd-server/src/modules/suite/payments/index.ts
 create mode 100644 packages/ui/certd-server/src/modules/suite/payments/wxpay.ts
 create mode 100644 packages/ui/certd-server/src/modules/suite/payments/yizhifu.ts

diff --git a/packages/core/basic/src/utils/util.hash.ts b/packages/core/basic/src/utils/util.hash.ts
index 3b3452bea..7816a8ab8 100644
--- a/packages/core/basic/src/utils/util.hash.ts
+++ b/packages/core/basic/src/utils/util.hash.ts
@@ -11,6 +11,10 @@ function hmacSha256(data: string, digest: BinaryToTextEncoding = "base64") {
   return crypto.createHmac("sha256", data).update(Buffer.alloc(0)).digest(digest);
 }
 
+function hmacSha256WithKey(key: string, data: string, digest: BinaryToTextEncoding = "base64") {
+  return crypto.createHmac("sha256", key).update(data).digest(digest);
+}
+
 function base64(data: string) {
   return Buffer.from(data).toString("base64");
 }
@@ -39,4 +43,5 @@ export const hashUtils = {
   toHex,
   hexToStr,
   hexToNumber,
+  hmacSha256WithKey,
 };
diff --git a/packages/ui/certd-server/package.json b/packages/ui/certd-server/package.json
index 7b9bd4f19..b3d7b0a56 100644
--- a/packages/ui/certd-server/package.json
+++ b/packages/ui/certd-server/package.json
@@ -130,7 +130,9 @@
     "@google-cloud/publicca": "^1.3.0",
     "jsrsasign": "^11.1.0",
     "ssh2": "^1.17.0",
-    "@alicloud/openapi-util": "^0.3.2"
+    "@alicloud/openapi-util": "^0.3.2",
+    "wechatpay-node-v3": "^2.2.1",
+    "alipay-sdk": "^4.13.0"
   },
   "devDependencies": {
     "@midwayjs/mock": "3.20.11",
diff --git a/packages/ui/certd-server/src/modules/auto/auto-b-load-plugins.ts b/packages/ui/certd-server/src/modules/auto/auto-b-load-plugins.ts
index 8296438ff..9439b0a3e 100644
--- a/packages/ui/certd-server/src/modules/auto/auto-b-load-plugins.ts
+++ b/packages/ui/certd-server/src/modules/auto/auto-b-load-plugins.ts
@@ -1,6 +1,7 @@
 import { Autoload, Init, Inject, Scope, ScopeEnum } from "@midwayjs/core";
 import { logger } from "@certd/basic";
 import { PluginService } from "../plugin/service/plugin-service.js";
+import { registerPaymentProviders } from "../suite/payments/index.js";
 
 @Autoload()
 @Scope(ScopeEnum.Request, { allowDowngrade: true })
@@ -19,6 +20,8 @@ export class AutoBLoadPlugins {
     }
     // await import("../../plugins/index.js")
     await this.pluginService.registerFromDb()
+
+    await registerPaymentProviders();
     logger.info(`加载插件完成，加载模式:${process.env.certd_plugin_loadmode}`);
 
   }
diff --git a/packages/ui/certd-server/src/modules/suite/payments/alipay.ts b/packages/ui/certd-server/src/modules/suite/payments/alipay.ts
new file mode 100644
index 000000000..19cd19eb4
--- /dev/null
+++ b/packages/ui/certd-server/src/modules/suite/payments/alipay.ts
@@ -0,0 +1,148 @@
+import { IPaymentProvider, TradeEntity, UpdateTrade, UpdateTradeInfo } from "@certd/commercial-core";
+import dayjs from "dayjs";
+import { logger, utils } from "@certd/basic";
+import { AlipayAccess } from "../../../plugins/plugin-plus/alipay/access.js";
+
+export class PaymentAlipay implements IPaymentProvider {
+  access: AlipayAccess;
+
+  constructor(access: AlipayAccess) {
+    this.access = access;
+  }
+
+  async getDetail(tradeNo: string): Promise<UpdateTradeInfo> {
+    const alipaySdk = await this.createAlipaySdk();
+
+    const result: any = await alipaySdk.curl("POST", "/v3/alipay/trade/query", {
+      body: {
+        out_trade_no: tradeNo,
+      },
+    });
+    logger.info("获取支付宝订单详情", JSON.stringify(result));
+    if (result.responseHttpStatus !== 200) {
+      throw new Error("请求支付宝失败:" + result.responseHttpStatus);
+    }
+    const data = result.data;
+
+    let status: string = undefined;
+    let payTime: number = undefined;
+    if (data.trade_status === "TRADE_SUCCESS") {
+      status = "paid";
+      payTime = dayjs(data.send_pay_date).valueOf();
+    } else if (data.trade_status === "TRADE_CLOSED") {
+      status = "closed";
+    } else {
+      logger.info("支付宝订单状态为：" + data.trade_status);
+    }
+
+    return {
+      tradeNo,
+      status: status,
+      amount: utils.amount.toCent(parseFloat(data.total_amount)),
+      payNo: data.trade_no,
+      payTime: payTime,
+    };
+  }
+
+  async createOrder(trade: TradeEntity, opts: { bindUrl: string; clientIp: string }) {
+    const return_url = `${opts.bindUrl}/#/certd/payment/return/alipay`;
+    const notify_url = `${opts.bindUrl}/api/payment/notify/alipay`;
+
+    const alipaySdk = await this.createAlipaySdk();
+    const url = alipaySdk.pageExec("alipay.trade.page.pay", "GET", {
+      return_url,
+      notify_url,
+      bizContent: {
+        out_trade_no: trade.tradeNo,
+        total_amount: utils.amount.toYuan(trade.amount),
+        subject: trade.title,
+        product_code: "FAST_INSTANT_TRADE_PAY",
+        // qr_pay_mode: "1",
+        // qrcode_width: "100",
+        // time_expire: "2016-12-31+10:05:01",
+        // sub_merchant: {
+        //   merchant_id: "2088000603999128",
+        //   merchant_type: "alipay",
+        // },
+        // extend_params: {
+        //   sys_service_provider_id: "2088511833207846",
+        //   hb_fq_seller_percent: "100",
+        //   hb_fq_num: "3",
+        //   industry_reflux_info: '{\\"scene_code\\":\\"metro_tradeorder\\",\\"channel\\":\\"xxxx\\",\\"scene_data\\":{\\"asset_name\\":\\"ALIPAY\\"}}',
+        //   specified_seller_name: "XXX的跨境小铺",
+        //   royalty_freeze: "true",
+        //   card_type: "S0JP0000",
+        // },
+        // business_params: '{"mc_create_trade_ip":"127.0.0.1"}',
+        // promo_params: '{"storeIdType":"1"}',
+        // integration_type: "PCWEB",
+        // request_from_url: "https://",
+        // store_id: "NJ_001",
+        // merchant_order_no: "20161008001",
+        // ext_user_info: {
+        //   cert_type: "IDENTITY_CARD",
+        //   cert_no: "362334768769238881",
+        //   name: "李明",
+        //   mobile: "16587658765",
+        //   min_age: "18",
+        //   need_check_info: "F",
+        //   identity_hash: "27bfcd1dee4f22c8fe8a2374af9b660419d1361b1c207e9b41a754a113f38fcc",
+        // },
+        // invoice_info: {
+        //   key_info: {
+        //     tax_num: "1464888883494",
+        //     is_support_invoice: "true",
+        //     invoice_merchant_name: "ABC|003",
+        //   },
+        //   details: '[{"code":"100294400","name":"服饰","num":"2","sumPrice":"200.00","taxRate":"6%"}]',
+        // },
+      },
+    });
+    return {
+      url,
+      body: {},
+    };
+  }
+
+  private async createAlipaySdk() {
+    const AlipaySdk = await import("alipay-sdk");
+
+    const alipaySdk = new AlipaySdk.AlipaySdk({
+      appId: this.access.appId,
+      privateKey: this.access.privateKey,
+      alipayPublicKey: this.access.alipayPublicKey,
+      gateway: "https://openapi.alipay.com/gateway.do",
+    });
+    return alipaySdk;
+  }
+
+  async onNotify(data: any, updateTrade: UpdateTrade) {
+    const alipaySdk = await this.createAlipaySdk();
+    logger.info(`支付宝notify：${JSON.stringify(data)}`);
+    // true | false
+    let success = alipaySdk.checkNotifySign(data);
+    if (!success) {
+      success = alipaySdk.checkNotifySignV2(data);
+      if (!success) {
+        throw new Error("签名验证失败");
+      }
+    }
+    if (data.trade_status === "TRADE_SUCCESS") {
+      await updateTrade({
+        tradeNo: data.out_trade_no,
+        status: "paid",
+        amount: utils.amount.toCent(parseFloat(data.total_amount)),
+        payNo: data.trade_no,
+        payTime: dayjs().valueOf(),
+      });
+    } else if (data.trade_status === "TRADE_CLOSED") {
+      await updateTrade({
+        tradeNo: data.out_trade_no,
+        status: "closed",
+        payNo: data.trade_no,
+      });
+
+      return "success";
+    }
+  }
+}
diff --git a/packages/ui/certd-server/src/modules/suite/payments/index.ts b/packages/ui/certd-server/src/modules/suite/payments/index.ts
new file mode 100644
index 000000000..e5d401f45
--- /dev/null
+++ b/packages/ui/certd-server/src/modules/suite/payments/index.ts
@@ -0,0 +1,7 @@
+import {paymentProviderFactory} from "@certd/commercial-core"
+export function registerPaymentProviders() {
+
+  paymentProviderFactory.registerProvider("alipay", async () => (await import("./alipay.js")).PaymentAlipay);
+  paymentProviderFactory.registerProvider("wxpay", async () => (await import("./wxpay.js")).PaymentWxpay);
+  paymentProviderFactory.registerProvider("yizhifu", async () => (await import("./yizhifu.js")).PaymentYizhifu);
+}
diff --git a/packages/ui/certd-server/src/modules/suite/payments/wxpay.ts b/packages/ui/certd-server/src/modules/suite/payments/wxpay.ts
new file mode 100644
index 000000000..727cfbdef
--- /dev/null
+++ b/packages/ui/certd-server/src/modules/suite/payments/wxpay.ts
@@ -0,0 +1,136 @@
+import { IPaymentProvider, TradeEntity, UpdateTrade, UpdateTradeInfo } from "@certd/commercial-core";
+import WxPay from "wechatpay-node-v3";
+import dayjs from "dayjs";
+import { logger } from "@certd/basic"; // 支持使用require
+import { WxpayAccess } from "../../../plugins/plugin-plus/wxpay/access.js";
+export class PaymentWxpay implements IPaymentProvider {
+  access: WxpayAccess;
+  constructor(access: WxpayAccess) {
+    this.access = access;
+  }
+  async getDetail(tradeNo: string): Promise<UpdateTradeInfo> {
+    /**
+     *  const result = await pay.query({out_trade_no: '1609914303237'});
+     *   # 或者 const result = await pay.query({transaction_id: ''});
+     *   console.log(result);
+     *   {
+     *     status: 200,
+     *     appid: 'appid',
+     *     attach: '',
+     *     mchid: '商户号',
+     *     out_trade_no: '1609899981750',
+     *     payer: {},
+     *     promotion_detail: [],
+     *     trade_state: 'CLOSED',
+     *     trade_state_desc: '订单已关闭'
+     *   }
+     */
+
+    const pay = this.createSdk();
+
+    const result: any = await pay.query({ out_trade_no: tradeNo });
+    logger.info(`微信支付查询订单返回：${JSON.stringify(result)}`);
+    if (result.status !== 200) {
+      throw new Error("查询微信支付订单失败:" + result.status);
+    }
+    const data = result.data;
+    let status: string = undefined;
+    let payTime: number = undefined;
+    let amount: number = undefined;
+    if (data.trade_state === "SUCCESS") {
+      status = "paid";
+      payTime = dayjs(data.success_time).valueOf();
+      amount = data.amount.total;
+    } else if (data.trade_state === "CLOSED") {
+      status = "closed";
+    } else {
+      logger.info("微信支付订单状态为：" + data.trade_state);
+    }
+
+    return {
+      tradeNo: data.out_trade_no,
+      status,
+      amount,
+      payNo: data.transaction_id,
+      payTime,
+    };
+  }
+  async createOrder(trade: TradeEntity, opts: { bindUrl: string; clientIp: string }) {
+    const notify_url = `${opts.bindUrl}/api/payment/notify/wxpay`;
+
+    const pay = this.createSdk();
+
+    const params = {
+      description: trade.title,
+      out_trade_no: trade.tradeNo,
+      notify_url,
+      amount: {
+        total: trade.amount,
+      },
+      scene_info: {
+        payer_client_ip: "ip",
+      },
+    };
+
+    logger.info(`微信支付下单请求：${JSON.stringify(params)}`);
+    const result: any = await pay.transactions_native(params);
+    logger.info(`微信支付下单返回：${JSON.stringify(result)}`);
+    if (result.status !== 200) {
+      throw new Error("请求微信支付失败:" + result.status);
+    }
+    return {
+      qrcode: result.data.code_url,
+    };
+  }
+
+  private createSdk() {
+    const pay = new WxPay({
+      appid: this.access.appId,
+      mchid: this.access.mchid,
+      publicKey: Buffer.from(this.access.publicKey), // 公钥
+      privateKey: Buffer.from(this.access.privateKey), // 秘钥
+    });
+    return pay;
+  }
+
+  async onNotify(notifyData: any, updateTrade: UpdateTrade) {
+    const pay = this.createSdk();
+    const { ciphertext, associated_data, nonce } = notifyData.resource;
+    logger.info(`微信支付notify：${JSON.stringify(notifyData)}`);
+    const key = this.access.key;
+    const result: any = pay.decipher_gcm(ciphertext, associated_data, nonce, key);
+    logger.info(`微信支付解析结果：${JSON.stringify(result)}`);
+    /**
+     * mchid: '商户号',
+     * #   appid: 'appid',
+     * #   out_trade_no: '1610419296553',
+     * #   transaction_id: '4200000848202101120290526543',
+     * #   trade_type: 'NATIVE',
+     * #   trade_state: 'SUCCESS',
+     * #   trade_state_desc: '支付成功',
+     * #   bank_type: 'OTHERS',
+     * #   attach: '',
+     * #   success_time: '2021-01-12T10:43:43+08:00',
+     * #   payer: { openid: '' },
+     * #   amount: { total: 1, payer_total: 1, currency: 'CNY', payer_currency: 'CNY' }
+     */
+    const data: any = result;
+    if (data.trade_state === "SUCCESS") {
+      await updateTrade({
+        tradeNo: data.out_trade_no,
+        status: "paid",
+        amount: data.amount.total,
+        payNo: data.transaction_id,
+        payTime: dayjs(data.success_time).valueOf(),
+      });
+    } else if (data.trade_state === "CLOSED") {
+      await updateTrade({
+        tradeNo: data.out_trade_no,
+        status: "closed",
+        payNo: data.transaction_id,
+      });
+    }
+
+    return "success";
+  }
+}
diff --git a/packages/ui/certd-server/src/modules/suite/payments/yizhifu.ts b/packages/ui/certd-server/src/modules/suite/payments/yizhifu.ts
new file mode 100644
index 000000000..390528d5a
--- /dev/null
+++ b/packages/ui/certd-server/src/modules/suite/payments/yizhifu.ts
@@ -0,0 +1,184 @@
+import { logger, utils } from "@certd/basic";
+import { IPaymentProvider, TradeEntity, UpdateTrade, UpdateTradeInfo } from "@certd/commercial-core";
+import dayjs from "dayjs";
+import { YizhifuAccess } from "../../../plugins/plugin-plus/yizhifu/access.js";
+
+export class PaymentYizhifu implements IPaymentProvider {
+  access: YizhifuAccess;
+  constructor(access: YizhifuAccess) {
+    this.access = access;
+  }
+
+  async getDetail(tradeNo: string): Promise<UpdateTradeInfo> {
+    /**
+     * http://pay.docmirror.cn/api.php?act=order&pid={商户ID}&key={商户密钥}&out_trade_no={商户订单号}
+     *
+     * 请求参数说明：
+     *
+     * 字段名	变量名	必填	类型	示例值	描述
+     * 操作类型	act	是	String	order	此API固定值
+     * 商户ID	pid	是	Int	1001
+     * 商户密钥	key	是	String	89unJUB8HZ54Hj7x4nUj56HN4nUzUJ8i
+     * 系统订单号	trade_no	选择	String	20160806151343312
+     * 商户订单号	out_trade_no	选择	String	20160806151343349
+     */
+
+    const paymentReq = {
+      pid: this.access.pid,
+      act: "order",
+      key: this.access.key,
+      out_trade_no: tradeNo,
+    };
+    let url = this.access.url;
+    if (url.endsWith("/")) {
+      url = url.substring(0, url.length - 1);
+    }
+    const res = await utils.http.request({
+      url: url + "/api.php",
+      method: "get",
+      params: paymentReq,
+    });
+
+    if (res.code !== 1) {
+      throw new Error(res.msg);
+    }
+
+    if (res.status !== "1") {
+      throw new Error("该订单还未支付");
+    }
+    /**
+     * 易支付订单号	trade_no	String	2016080622555342651	袖手科技聚合支付平台订单号
+     * 商户订单号	out_trade_no	String	20160806151343349	商户系统内部的订单号
+     * 第三方订单号	api_trade_no	String	20160806151343349	支付宝微信等接口方订单号
+     * 支付方式	type	String	alipay	支付方式列表
+     * 商户ID	pid	Int	1001	发起支付的商户ID
+     * 创建订单时间	addtime	String	2016-08-06 22:55:52
+     * 完成交易时间	endtime	String	2016-08-06 22:55:52
+     * 商品名称	name	String	VIP会员
+     * 商品金额	money	String	1.00
+     * 支付状态	status	Int	0	1为支付成功，0为未支付
+     * 业务扩展参数	param	String		默认留空
+     * 支付者账号	buyer	String		默认留空
+     */
+
+    let status: string = null;
+    let payTime: number = null;
+    if (res.status === "1") {
+      status = "paid";
+      payTime = dayjs(res.endtime).valueOf();
+    } else {
+      throw new Error("订单未支付");
+    }
+
+    return {
+      tradeNo: res.out_trade_no,
+      payNo: res.trade_no,
+      remark: "支付类型：" + res.type,
+      amount: utils.amount.toCent(parseFloat(res.money)),
+      status: status,
+      payTime: payTime,
+    };
+  }
+  sign(paymentReq: any): any {
+    const keys = Object.keys(paymentReq);
+    if (paymentReq.pid && paymentReq.pid + "" !== this.access.pid + "") {
+      throw new Error("pid  not match");
+    }
+    paymentReq.pid = this.access.pid;
+    const params: any[] = [];
+
+    for (const key of keys) {
+      const value = paymentReq[key];
+      if (value != null && value !== "" && key !== "sign" && key !== "sign_type") {
+        params.push({ name: key, value: value });
+      }
+    }
+    /**
+     * 1、将发送或接收到的所有参数按照参数名ASCII码从小到大排序（a-z），sign、sign_type、和空值不参与签名！
+     * 2、将排序后的参数拼接成URL键值对的格式，例如 a=b&c=d&e=f，参数值不要进行url编码。
+     * 3、再将拼接好的字符串与商户密钥KEY进行MD5加密得出sign签名参数，sign = md5 ( a=b&c=d&e=f + KEY ) （注意：+ 为各语言的拼接符，不是字符！），md5结果为小写。
+     */
+    //sort
+    const sortedParams = params.sort((a, b) => a.name.localeCompare(b.name));
+    //join
+    const signStr = sortedParams.map(p => `${p.name}=${p.value}`).join("&");
+    //md5
+    const signType = this.access.signType;
+
+    let sign = "";
+    if (signType === "MD5") {
+      sign = utils.hash.md5(signStr + this.access.key);
+    } else if (signType === "SHA256") {
+      sign = utils.hash.sha256(signStr + this.access.key);
+    } else {
+      throw new Error("不支持的签名方式");
+    }
+
+    sign = sign.toLowerCase();
+
+    params.push({ name: "sign", value: sign });
+
+    params.push({ name: "sign_type", value: signType });
+
+    const body = {};
+    params.forEach(p => {
+      body[p.name] = p.value;
+    });
+
+    return body;
+  }
+  async createOrder(trade: TradeEntity, opts: { bindUrl: string; clientIp: string }) {
+    const { bindUrl } = opts;
+    const paymentReq: any = {
+      pid: this.access.pid,
+      out_trade_no: trade.tradeNo,
+      return_url: `${bindUrl}/#/certd/payment/return/yizhifu`,
+      notify_url: `${bindUrl}/api/payment/notify/yizhifu`,
+      name: trade.title,
+      money: utils.amount.toYuan(trade.amount),
+    };
+
+    if (this.access.payType) {
+      paymentReq.type = this.access.payType;
+    }
+
+    const body = this.sign(paymentReq);
+
+    let url = this.access.url;
+    if (url.endsWith("/")) {
+      url = url.substring(0, url.length - 1);
+    }
+    return {
+      url: url + "/submit.php",
+      body,
+    };
+  }
+
+  checkSign(paymentRes: any) {
+    // const { pid, trade_no, out_trade_no, type, name, money, trade_status, param, sign, sign_type } = paymentRes;
+    const body = this.sign(paymentRes);
+    const pass = body.sign === paymentRes.sign;
+    if (!pass) {
+      throw new Error("签名校验失败");
+    }
+    return pass;
+  }
+
+  async onNotify(paymentRes: any, updateTrade: UpdateTrade) {
+    logger.info(`易支付notify：${JSON.stringify(paymentRes)}`);
+    this.checkSign(paymentRes);
+
+    const success = paymentRes.trade_status === "TRADE_SUCCESS";
+    if (success) {
+      await updateTrade({
+        tradeNo: paymentRes.out_trade_no,
+        status: "paid",
+        amount: utils.amount.toCent(parseFloat(paymentRes.money)),
+        remark: "支付类型：" + paymentRes.type,
+        payNo: paymentRes.trade_no,
+        payTime: dayjs().valueOf(),
+      });
+    }
+    return "success";
+  }
+}
diff --git a/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts b/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
index 495e77180..9bf2987c7 100644
--- a/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
+++ b/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
@@ -316,7 +316,7 @@ Signature
 
     const StringToSign = `${signMethod}\n${timestamp}\n${this.accessKeyId}\n${CanonicalRequest}`;
 
-    const signature = this.ctx.utils.hash.hmacSha256(StringToSign, "hex");
+    const signature = this.ctx.utils.hash.hmacSha256WithKey(this.accessKeyPassword, StringToSign, "hex");
 
     const authorization = `${signMethod} Credential=${this.accessKeyId}, SignedHeaders=${SignedHeaders}, Signature=${signature}`;
 
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b78f131e0..5ecf7dfe7 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -788,9 +788,6 @@ importers:
       '@certd/pipeline':
         specifier: ^1.37.17
         version: link:../../core/pipeline
-      '@certd/plugin-plus':
-        specifier: ^1.37.17
-        version: link:../plugin-plus
       '@certd/plus-core':
         specifier: ^1.37.17
         version: link:../plus-core
@@ -806,18 +803,12 @@ importers:
       '@midwayjs/typeorm':
         specifier: 3.20.11
         version: 3.20.11
-      alipay-sdk:
-        specifier: ^4.13.0
-        version: 4.14.0
       dayjs:
         specifier: ^1.11.7
         version: 1.11.13
       typeorm:
         specifier: ^0.3.20
         version: 0.3.24(better-sqlite3@11.10.0)(mysql2@3.14.1)(pg@8.16.0)(reflect-metadata@0.2.2)(ts-node@10.9.2(@types/node@18.19.100)(typescript@5.8.3))
-      wechatpay-node-v3:
-        specifier: ^2.2.1
-        version: 2.2.1
     devDependencies:
       '@rollup/plugin-json':
         specifier: ^6.0.0
@@ -868,130 +859,6 @@ importers:
         specifier: ^5.4.2
         version: 5.8.3
 
-  packages/pro/plugin-plus:
-    dependencies:
-      '@alicloud/pop-core':
-        specifier: ^1.7.10
-        version: 1.8.0
-      '@baiducloud/sdk':
-        specifier: ^1.0.2
-        version: 1.0.3
-      '@certd/basic':
-        specifier: ^1.37.17
-        version: link:../../core/basic
-      '@certd/lib-k8s':
-        specifier: ^1.37.17
-        version: link:../../libs/lib-k8s
-      '@certd/pipeline':
-        specifier: ^1.37.17
-        version: link:../../core/pipeline
-      '@certd/plugin-cert':
-        specifier: ^1.37.17
-        version: link:../../plugins/plugin-cert
-      '@certd/plugin-lib':
-        specifier: ^1.37.17
-        version: link:../../plugins/plugin-lib
-      '@certd/plus-core':
-        specifier: ^1.37.17
-        version: link:../plus-core
-      ali-oss:
-        specifier: ^6.21.0
-        version: 6.23.0
-      baidu-aip-sdk:
-        specifier: ^4.16.16
-        version: 4.16.16
-      basic-ftp:
-        specifier: ^5.0.5
-        version: 5.0.5
-      cos-nodejs-sdk-v5:
-        specifier: ^2.14.6
-        version: 2.14.7
-      crypto-js:
-        specifier: ^4.2.0
-        version: 4.2.0
-      dayjs:
-        specifier: ^1.11.7
-        version: 1.11.13
-      form-data:
-        specifier: ^4.0.0
-        version: 4.0.2
-      https-proxy-agent:
-        specifier: ^7.0.5
-        version: 7.0.6
-      js-yaml:
-        specifier: ^4.1.0
-        version: 4.1.0
-      jsencrypt:
-        specifier: ^3.3.2
-        version: 3.3.2
-      jsrsasign:
-        specifier: ^11.1.0
-        version: 11.1.0
-      qiniu:
-        specifier: ^7.12.0
-        version: 7.14.0
-      tencentcloud-sdk-nodejs:
-        specifier: ^4.0.44
-        version: 4.1.112(encoding@0.1.13)
-    devDependencies:
-      '@rollup/plugin-json':
-        specifier: ^6.0.0
-        version: 6.1.0(rollup@3.29.5)
-      '@rollup/plugin-terser':
-        specifier: ^0.4.3
-        version: 0.4.4(rollup@3.29.5)
-      '@rollup/plugin-typescript':
-        specifier: ^11.0.0
-        version: 11.1.6(rollup@3.29.5)(tslib@2.8.1)(typescript@5.8.3)
-      '@types/ali-oss':
-        specifier: ^6.16.11
-        version: 6.16.11
-      '@types/chai':
-        specifier: ^4.3.10
-        version: 4.3.20
-      '@types/mocha':
-        specifier: ^10.0.7
-        version: 10.0.10
-      '@types/node':
-        specifier: ^18
-        version: 18.19.100
-      '@typescript-eslint/eslint-plugin':
-        specifier: ^8.26.1
-        version: 8.32.1(@typescript-eslint/parser@8.32.1(eslint@8.57.0)(typescript@5.8.3))(eslint@8.57.0)(typescript@5.8.3)
-      '@typescript-eslint/parser':
-        specifier: ^8.26.1
-        version: 8.32.1(eslint@8.57.0)(typescript@5.8.3)
-      chai:
-        specifier: 4.3.10
-        version: 4.3.10
-      eslint:
-        specifier: ^8.41.0
-        version: 8.57.0
-      eslint-config-prettier:
-        specifier: ^8.8.0
-        version: 8.10.0(eslint@8.57.0)
-      eslint-plugin-prettier:
-        specifier: ^4.2.1
-        version: 4.2.1(eslint-config-prettier@8.10.0(eslint@8.57.0))(eslint@8.57.0)(prettier@2.8.8)
-      mocha:
-        specifier: ^10.2.0
-        version: 10.8.2
-      prettier:
-        specifier: ^2.8.8
-        version: 2.8.8
-      rimraf:
-        specifier: ^5.0.5
-        version: 5.0.10
-      rollup:
-        specifier: ^3.7.4
-        version: 3.29.5
-      tslib:
-        specifier: ^2.8.1
-        version: 2.8.1
-      typescript:
-        specifier: ^5.4.2
-        version: 5.8.3
-
   packages/pro/plus-core:
     dependencies:
       '@certd/basic':
@@ -1520,7 +1387,7 @@ importers:
         version: link:../../plugins/plugin-lib
       '@certd/plugin-plus':
         specifier: ^1.37.17
-        version: link:../../pro/plugin-plus
+        version: 1.37.17(encoding@0.1.13)
       '@certd/plus-core':
         specifier: ^1.37.17
         version: link:../../pro/plus-core
@@ -1581,6 +1448,9 @@ importers:
       ali-oss:
         specifier: ^6.21.0
         version: 6.23.0
+      alipay-sdk:
+        specifier: ^4.13.0
+        version: 4.14.0
       axios:
         specifier: ^1.9.0
         version: 1.9.0(debug@4.4.1)
@@ -1731,6 +1601,9 @@ importers:
       uuid:
         specifier: ^10.0.0
         version: 10.0.0
+      wechatpay-node-v3:
+        specifier: ^2.2.1
+        version: 2.2.1
       xml2js:
         specifier: ^0.6.2
         version: 0.6.2
@@ -2888,6 +2761,9 @@ packages:
   '@certd/cv4pve-api-javascript@8.4.2':
     resolution: {integrity: sha512-udGce7ewrVl4DmZvX+17PjsnqsdDIHEDatr8QP0AVrY2p+8JkaSPW4mXCKiLGf82C9K2+GXgT+qNIqgW7tfF9Q==}
 
+  '@certd/plugin-plus@1.37.17':
+    resolution: {integrity: sha512-yIBCdHc+vdOQa9cMRRKHvyLgVCQvwqYzCzOFzODEWL7zZ3e6T3YLueG49vqyr0dyEEcY/JXfqT4vDo+r3Zs1zw==}
+
   '@certd/vue-js-cron-core@6.0.3':
     resolution: {integrity: sha512-kqzoAMhYz9j6FGNWEODRYtt4NpUEUwjpkU89z5WVg2tCtOcI5VhwyUGOd8AxiBCRfd6PtXvzuqw85PaOps9wrQ==}
 
@@ -15446,6 +15322,34 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@certd/plugin-plus@1.37.17(encoding@0.1.13)':
+    dependencies:
+      '@alicloud/pop-core': 1.8.0
+      '@baiducloud/sdk': 1.0.3
+      '@certd/basic': link:packages/core/basic
+      '@certd/lib-k8s': link:packages/libs/lib-k8s
+      '@certd/pipeline': link:packages/core/pipeline
+      '@certd/plugin-cert': link:packages/plugins/plugin-cert
+      '@certd/plugin-lib': link:packages/plugins/plugin-lib
+      '@certd/plus-core': link:packages/pro/plus-core
+      ali-oss: 6.23.0
+      baidu-aip-sdk: 4.16.16
+      basic-ftp: 5.0.5
+      cos-nodejs-sdk-v5: 2.14.7
+      crypto-js: 4.2.0
+      dayjs: 1.11.13
+      form-data: 4.0.2
+      https-proxy-agent: 7.0.6
+      js-yaml: 4.1.0
+      jsencrypt: 3.3.2
+      jsrsasign: 11.1.0
+      qiniu: 7.14.0
+      tencentcloud-sdk-nodejs: 4.1.112(encoding@0.1.13)
+    transitivePeerDependencies:
+      - encoding
+      - proxy-agent
+      - supports-color
+
   '@certd/vue-js-cron-core@6.0.3':
     dependencies:
       mustache: 4.2.0

From 1d6a8bd85152a1b8b2d897d258132d039ad1a86a Mon Sep 17 00:00:00 2001
From: xiaojunnuo <xiaojunnuo@qq.com>
Date: Tue, 6 Jan 2026 00:29:41 +0800
Subject: [PATCH 6/7] =?UTF-8?q?chore:=20zenlayer=20=E8=AF=81=E4=B9=A6?=
 =?UTF-8?q?=E5=88=B7=E6=96=B0=E6=8F=92=E4=BB=B6=E5=AE=8C=E6=88=90?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../src/plugins/plugin-zenlayer/access.ts     | 257 +++---------------
 .../plugins/plugin-refresh-cert.ts            | 101 ++++---
 2 files changed, 103 insertions(+), 255 deletions(-)

diff --git a/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts b/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
index 9bf2987c7..256d873a9 100644
--- a/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
+++ b/packages/ui/certd-server/src/plugins/plugin-zenlayer/access.ts
@@ -13,7 +13,7 @@ export type ZenlayerRequest = HttpRequestConfig & {
 @IsAccess({
   name: 'zenlayer',
   title: 'Zenlayer授权',
-  icon: 'svg:icon-zenlayer',
+  icon: 'svg:icon-lucky',
   desc: 'Zenlayer授权',
 })
 export class ZenlayerAccess extends BaseAccess {
@@ -62,17 +62,17 @@ export class ZenlayerAccess extends BaseAccess {
   client: any;
 
   async onTestRequest() {
-    await this.getCertList();
+    const res = await this.getCertList({ pageSize: 1 });
+    this.ctx.logger.info(res);
     return "ok";
   }
 
 
-  async getCertList(req: PageSearch = {}) {
+  async getCertList(req: PageSearch = {}):Promise<{totalCount:number,dataSet:{sans:string[],certificateId:string,certificateLabel:string,common:string}[]}> {
     const pageNo = req.pageNo ?? 1;
     const pageSize = req.pageSize ?? 100;
     const res = await this.doRequest({
-      url: "/",
-      baseURL: "https://console.zenlayer.com/api/v2/cdn",
+      url: "/api/v2/cdn",
       action: "DescribeCertificates",
       data: {
         PageNum: pageNo,
@@ -82,209 +82,6 @@ export class ZenlayerAccess extends BaseAccess {
     return res;
   }
 
-
-  /**
-   * 申请安全凭证
-本文使用的安全凭证为密钥，密钥包括 accessKeyId 和 accessKeyPassword。
-
-AccessKeyId：用于标识 API 调用者身份，可以简单类比为用户名。
-
-AccessKeyPassword：用于验证 API 调用者的身份，可以简单类比为密码。
-
-用户必须严格保管安全凭证，避免泄露，否则将危及财产安全。如已泄漏，请立刻禁用该安全凭证。
-
-你可以根据Zenlayer的用户指南文档来获取你的安全凭证。
-
-签名过程v2
-Zenlayer Open API V2 支持 Post 请求，仅支持 Content-Type: application/json。 接口使用json格式进行调用。
-
-下面以裸机云查询实例列表为例：
-
-
-复制
-curl -X POST https://console.zenlayer.com/api/v2/bmc \
--H "Authorization: ZC2-HMAC-SHA256 Credential=0D9UtpyKYcHxms5v, SignedHeaders=content-type;host, Signature=efb356c32e55c781e10dc676da59462c22596d82e91c57803666243379555b2f" \
--H "Content-Type: application/json; charset=utf-8" \
--H "X-ZC-Action: DescribeInstances" \
--H "X-ZC-Timestamp: 1673361177" \
--H "X-ZC-Signature-Method: ZC2-HMAC-SHA256" \
--H "X-ZC-Version: 2022-11-20" \
--d '{"pageSize":10,"pageNum":1,"zoneId":"HKG-A"}'
-Request Headers:
-
-Key
-说明
-示例
-X-ZC-Timestamp
-
-请求的时间戳，精确到秒
-
-1673361177
-
-X-ZC-Version
-
-请求的API版本
-
-2022-11-20
-
-X-ZC-Action
-
-请求的动作
-
-DescribeInstances
-
-X-ZC-Signature-Method
-
-签名方法
-
-ZC2-HMAC-SHA256
-
-Authorization
-
-签名认证
-
-1. 拼接规范请求串
-按如下伪代码格式拼接规范请求串（CanonicalRequest）：
-
-
-复制
-CanonicalRequest = 
-  HTTPRequestMethod + '\n' + 
-  CanonicalURI + '\n' + 
-  CanonicalQueryString + '\n' + 
-  CanonicalHeaders + '\n' + 
-  SignedHeaders + '\n' + 
-  HexEncode(Hash(RequestPayload))
-字段名称
-解释
-HTTPRequestMethod
-
-HTTP 请求方法。
-
-固定为POST。
-
-CanonicalURI
-
-URI 参数。
-
-API 固定为正斜杠（/）。
-
-CanonicalQueryString
-
-发起 HTTP 请求 URL 中的查询字符串。
-
-对于 POST 请求，固定为空字符串""。
-
-CanonicalHeaders
-
-参与签名的头部信息，可加入自定义的头部参与签名以提高自身请求的唯一性和安全性。
-
-拼接规则：头部 key 和 value 统一转成小写，并去掉首尾空格，按照 key:value\n 格式拼接（注意最后包含'\n'）；多个头部，按照头部 key（小写）的 ASCII 升序进行拼接。此示例计算结果是：
-
-content-type:application/json; charset=utf-8\nhost:console.zenlayer.com。
-
-SignedHeaders
-
-参与签名的头部信息。
-
-说明此次请求有哪些头部参与了签名，和 CanonicalHeaders 包含的头部内容是一一对应的。content-type 和 host 为必选头部。 拼接规则：头部 key 统一转成小写；多个头部 key（小写）按照 ASCII 升序进行拼接，并且以分号（;）分隔。此示例为content-type;host。
-
-HashedRequestPayload
-
-请求正文（payload，即 body)。
-
-此示例为{"pageSize":10,"pageNum":1,"zoneId":"HKG-A"}）的哈希值，计算伪代码为 HexEncode(Hash(RequestPayload))，即对 HTTP 请求正文做 SHA256 哈希，然后十六进制编码。此示例的计算结果是 ：5f714687ba91c606d503467766151206392474accd137ffea6dce2420b67c29a。
-
-2. 拼接待签字符串
-
-复制
-StringToSign =
-    Algorithm + \n +           # 指定签名算法。对于 SHA256，算法为 ZC2-HMAC-SHA256。
-    RequestDateTime + \n +     # 指定请求时间戳。
-    HashedCanonicalRequest 
-字段名称
-解释
-Algorithm
-
-签名算法。
-
-目前固定为 ZC2-HMAC-SHA256。
-
-RequestTimestamp
-
-请求时间戳。
-
-即请求头部的公共参数 X-ZC-Timestamp 取值，取当前时间 UNIX 时间戳，精确到秒。此示例取值为1673361177。
-
-HashedCanonicalRequest
-
-前述步骤拼接所得规范请求串的哈希值。
-
-计算伪代码为 Lowercase(HexEncode(Hash.SHA256(CanonicalRequest)))。此示例计算结果是： 29396f9dfa0f03820b931e8aa06e20cda197e73285ebd76aceb83f7dede493ee。
-
-根据以上规则，示例中得到的待签名字符串如下：
-
-
-复制
-ZC2-HMAC-SHA256
-1673361177
-29396f9dfa0f03820b931e8aa06e20cda197e73285ebd76aceb83f7dede493ee
-3. 基于 AK 和 StringToSign 计算出签名
-计算签名，伪代码如下：
-
-
-复制
-Signature = HexEncode(HMAC_SHA256(AccessKeyPassword, StringToSign))
-字段名称
-解释
-AccessKeyPassword
-
-原始的 AccessKeyPassword。
-
-如 Gu5t9xGARNpq86cd98joQYCN3。
-
-StringToSign
-
-步骤二获得的结果。
-
-4. 拼接 Authorization
-按如下格式拼接 Authorization：
-
-
-复制
-Authorization =
-    Algorithm + ' ' +
-    'Credential=' + AccessKeyId +  ', ' +
-    'SignedHeaders=' + SignedHeaders + ', ' +
-    'Signature=' + Signature
-字段名称
-解释
-Algorithm
-
-签名算法。
-
-目前为 ZC2-HMAC-SHA256。
-
-AccessKeyId
-
-密钥对中的 AccessKeyId。
-
-如 0D9UtpyKYcHxms5v。
-
-SignedHeaders
-
-见上文，参与签名的头部信息。
-
-此示例取值为 content-type;host。
-
-Signature
-
-签名值。
-
-根据以上方法，此示例计算结果是 efb356c32e55c781e10dc676da59462c22596d82e91c57803666243379555b2f。
-   */
-
-
   async getAuthorizationHeaders(req: ZenlayerRequest) {
 
     /**
@@ -306,18 +103,23 @@ Signature
       req.headers['host'] = "console.zenlayer.com";
     }
 
+    if (!req.method) {
+      req.method = "POST";
+    }
+    // this.accessKeyPassword="Gu5t9xGARNpq86cd98joQYCN3"
+    // req.data = {"pageSize":10,"pageNum":1,"zoneId":"HKG-A"}
     const CanonicalQueryString = req.method === 'POST' ? '' : qs.stringify(req.params);
     const SignedHeaders = "content-type;host";
-    const CanonicalHeaders = `${req.headers['content-type']}\n${req.headers['host']}`;
+    const CanonicalHeaders = `content-type:${req.headers['content-type']}\nhost:${req.headers['host']}\n`;
     const HashedRequestPayload = this.ctx.utils.hash.sha256(JSON.stringify(req.data || {}), "hex");
-    const CanonicalRequest = `${req.method}\n${req.url}\n${CanonicalQueryString}\n${CanonicalHeaders}\n${SignedHeaders}\n${HashedRequestPayload}`;
+    const CanonicalRequest = `${req.method}\n/\n${CanonicalQueryString}\n${CanonicalHeaders}\n${SignedHeaders}\n${HashedRequestPayload}`;
+    let HashedCanonicalRequest = this.ctx.utils.hash.sha256(CanonicalRequest, "hex");
+    // HashedCanonicalRequest = "29396f9dfa0f03820b931e8aa06e20cda197e73285ebd76aceb83f7dede493ee"
     const timestamp = Math.floor(Date.now() / 1000);
+    // const timestamp= 1673361177
     const signMethod = "ZC2-HMAC-SHA256";
-
-    const StringToSign = `${signMethod}\n${timestamp}\n${this.accessKeyId}\n${CanonicalRequest}`;
-
+    const StringToSign = `${signMethod}\n${timestamp}\n${HashedCanonicalRequest}`;
     const signature = this.ctx.utils.hash.hmacSha256WithKey(this.accessKeyPassword, StringToSign, "hex");
-
     const authorization = `${signMethod} Credential=${this.accessKeyId}, SignedHeaders=${SignedHeaders}, Signature=${signature}`;
 
 
@@ -363,12 +165,27 @@ Authorization
   async doRequest(req: ZenlayerRequest) {
     const headers = await this.getAuthorizationHeaders(req);
     req.headers = headers
-    const res = await this.ctx.http.request({
-      baseURL: req.baseURL || "https://console.zenlayer.com",
-      ...req
-    });
-    this.ctx.logger.info(`doRequest ${req.url} ${res.statusCode} ${JSON.stringify(res.data)}`);
-    return res;
+    let res :any = undefined;
+    try{
+      res = await this.ctx.http.request({
+        baseURL: req.baseURL || "https://console.zenlayer.com",
+        ...req
+      });
+    } catch (error) {
+      const resData = error.response?.data;
+      if (resData){
+        let desc = ""
+        if (resData.code === "CERTIFICATE_NOT_COVER_ALL_DOMAIN"){
+          desc = `证书未覆盖所有域名`;
+        }
+        throw new Error(`[code=${resData.code}] ${desc} ${resData.message} [requestId:${resData.requestId}]`);
+      }
+      throw error
+    }
+    if (res.code) {
+      throw new Error(`[${res.code}]:${res.message} [requestId:${res.requestId}]`);
+    }
+    return res.response;
   }
 
 
diff --git a/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/plugin-refresh-cert.ts b/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/plugin-refresh-cert.ts
index f63cca525..60ecb4ccb 100644
--- a/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/plugin-refresh-cert.ts
+++ b/packages/ui/certd-server/src/plugins/plugin-zenlayer/plugins/plugin-refresh-cert.ts
@@ -1,13 +1,14 @@
 import { AbstractTaskPlugin, IsTaskPlugin, PageSearch, pluginGroups, RunStrategy, TaskInput } from "@certd/pipeline";
 import { CertApplyPluginNames, CertInfo } from "@certd/plugin-cert";
 import { createCertDomainGetterInputDefine, createRemoteSelectInputDefine } from "@certd/plugin-lib";
+import { ZenlayerAccess } from "../access.js";
 
 @IsTaskPlugin({
   //命名规范，插件类型+功能（就是目录plugin-demo中的demo），大写字母开头，驼峰命名
   name: "ZenlayerRefreshCert",
   title: "Zenlayer-刷新证书",
-  desc: "将证书部署到Zenlayer CDN",
-  icon: "svg:icon-zenlayer",
+  desc: "刷新Zenlayer CDN证书",
+  icon: "svg:icon-lucky",
   //插件分组
   group: pluginGroups.cdn.key,
   needPlus: false,
@@ -30,7 +31,7 @@ export class ZenlayerRefreshCert extends AbstractTaskPlugin {
     }
     // required: true, // 必填
   })
-  cert!: CertInfo | { type: string, id: number, name: string };
+  cert!: CertInfo;
 
   @TaskInput(createCertDomainGetterInputDefine({ props: { required: false } }))
   certDomains!: string[];
@@ -63,43 +64,73 @@ export class ZenlayerRefreshCert extends AbstractTaskPlugin {
 
   //插件执行方法
   async execute(): Promise<void> {
-    // const access = await this.getAccess<ZenlayerAccess>(this.accessId);
+    const access = await this.getAccess<ZenlayerAccess>(this.accessId);
+
+    for (const certId of this.certList) {
+      await this.updateCert({
+        access: access,
+        certId: certId,
+        cert: this.cert
+      });
+      this.logger.info(`刷新证书${certId}成功`);
+      await this.ctx.utils.sleep(1000);
+    }
+
     this.logger.info("部署完成");
   }
+
+  async updateCert(req:{access:ZenlayerAccess,certId:string, cert: CertInfo}){
+    const {access,certId, cert} = req;
+    // ModifyCertificate
+    await access.doRequest({
+      url: "/api/v2/cdn",
+      action: "ModifyCertificate",
+      data: {
+        /**
+         * certificateId
+certificateContent
+certificateKey
+          */
+        certificateId: certId,
+        certificateContent: cert.crt,
+        certificateKey: cert.key,
+      }
+    });
+  }
   async onGetCertList(req: PageSearch = {}) {
-    // const access = await this.getAccess<ZenlayerAccess>(this.accessId);
+    const access = await this.getAccess<ZenlayerAccess>(this.accessId);
 
-    // const pageNo = req.pageNo ?? 1;
-    // const pageSize = req.pageSize ?? 100;
-    // const res = await access.GetCertList(
-    //   {
-    //     PageNo: pageNo,
-    //     PageSize: pageSize
-    //   }
-    // );
-    // const total = res.TotalCount;
-    // const list = res.DomainInfoList || [];
-    // if (!list || list.length === 0) {
-    //   throw new Error("没有找到CDN域名，请先在控制台创建CDN域名");
-    // }
+    const pageNo = req.pageNo ?? 1;
+    const pageSize = req.pageSize ?? 100;
+    const res = await access.getCertList(
+      {
+        pageNo: pageNo,
+        pageSize: pageSize
+      }
+    );
+    const total = res.totalCount;
+    const list = res.dataSet || [];
+    if (!list || list.length === 0) {
+      throw new Error("没有找到Zenlayer证书，请先在控制台CDN证书管理创建证书");
+    }
 
-    // /**
-    //  *  "Domain": "ucloud.certd.handsfree.work",
-    //   "DomainId": "ucdn-1kwdtph5ygbb"
-    //  */
-    // const options = list.map((item: any) => {
-    //   return {
-    //     label: `${item.Domain}<${item.DomainId}>`,
-    //     value: `${item.Domain}`,
-    //     domain: item.Domain
-    //   };
-    // });
-    // return {
-    //   list: this.ctx.utils.options.buildGroupOptions(options, this.certDomains),
-    //   total: total,
-    //   pageNo: pageNo,
-    //   pageSize: pageSize
-    // };
+    /**
+     *  "Domain": "ucloud.certd.handsfree.work",
+      "DomainId": "ucdn-1kwdtph5ygbb"
+     */
+    const options = list.map((item: any) => {
+      return {
+        label: `${item.certificateLabel}<${item.certificateId}-${item.common}>`,
+        value: `${item.certificateId}`,
+        domain: item.sans
+      };
+    });
+    return {
+      list: this.ctx.utils.options.buildGroupOptions(options, this.certDomains),
+      total: total,
+      pageNo: pageNo,
+      pageSize: pageSize
+    };
   }
 
 }

From 5eda05f00738eec0cb94b48fa914c3e9f2697c9e Mon Sep 17 00:00:00 2001
From: xiaojunnuo <xiaojunnuo@qq.com>
Date: Tue, 6 Jan 2026 00:36:21 +0800
Subject: [PATCH 7/7] build: refresh metadata

---
 docs/guide/plugins/access.md                  |  5 +-
 docs/guide/plugins/deploy.md                  |  3 +-
 packages/ui/certd-server/.env                 |  2 +-
 .../metadata/access_zenlayer.yaml             | 27 +++++++
 .../metadata/deploy_ZenlayerRefreshCert.yaml  | 73 +++++++++++++++++++
 5 files changed, 106 insertions(+), 4 deletions(-)
 create mode 100644 packages/ui/certd-server/metadata/access_zenlayer.yaml
 create mode 100644 packages/ui/certd-server/metadata/deploy_ZenlayerRefreshCert.yaml

diff --git a/docs/guide/plugins/access.md b/docs/guide/plugins/access.md
index b64ec4e34..cfbacc6c9 100644
--- a/docs/guide/plugins/access.md
+++ b/docs/guide/plugins/access.md
@@ -67,8 +67,9 @@
 | 63.| **猫云授权** |  | 
 | 64.| **EAB授权** | ZeroSSL证书申请需要EAB授权 | 
 | 65.| **google cloud** | 谷歌云授权 | 
-| 66.| **雨云授权** | https://app.rainyun.com/ | 
-| 67.| **GoEdge授权** |  | 
+| 66.| **Zenlayer授权** | Zenlayer授权 | 
+| 67.| **雨云授权** | https://app.rainyun.com/ | 
+| 68.| **GoEdge授权** |  | 
 
 <style module>
 table th:first-of-type {
diff --git a/docs/guide/plugins/deploy.md b/docs/guide/plugins/deploy.md
index ec4f424f1..c6316d269 100644
--- a/docs/guide/plugins/deploy.md
+++ b/docs/guide/plugins/deploy.md
@@ -1,5 +1,5 @@
 # 任务插件
-共 `110` 款任务插件    
+共 `111` 款任务插件    
 ## 1. 证书申请
 
 | 序号 | 名称 | 说明 |
@@ -45,6 +45,7 @@
 | 21.| **白山云-更新证书** |  | 
 | 22.| **天翼云-部署证书到CDN** | 部署证书到天翼云CDN和全站加速 | 
 | 23.| **括彩云-部署到括彩云CDN** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
+| 24.| **Zenlayer-刷新证书** | 刷新Zenlayer CDN证书 | 
 ## 4. 面板
 
 | 序号 | 名称 | 说明 |
diff --git a/packages/ui/certd-server/.env b/packages/ui/certd-server/.env
index 2a245bd94..345247b4a 100644
--- a/packages/ui/certd-server/.env
+++ b/packages/ui/certd-server/.env
@@ -1,2 +1,2 @@
 LEGO_VERSION=4.30.1
-certd_plugin_loadmode=dev
\ No newline at end of file
+certd_plugin_loadmode=metadata
\ No newline at end of file
diff --git a/packages/ui/certd-server/metadata/access_zenlayer.yaml b/packages/ui/certd-server/metadata/access_zenlayer.yaml
new file mode 100644
index 000000000..164cf6350
--- /dev/null
+++ b/packages/ui/certd-server/metadata/access_zenlayer.yaml
@@ -0,0 +1,27 @@
+name: zenlayer
+title: Zenlayer授权
+icon: svg:icon-lucky
+desc: Zenlayer授权
+input:
+  accessKeyId:
+    title: AccessKeyId
+    component:
+      placeholder: 访问密钥ID
+    helper: '[访问密钥管理](https://console.zenlayer.com/accessKey)获取'
+    required: true
+    encrypt: false
+  accessKeyPassword:
+    title: AccessKey Password
+    component:
+      placeholder: 访问密钥密码
+    required: true
+    encrypt: true
+  testRequest:
+    title: 测试
+    component:
+      name: api-test
+      action: TestRequest
+    helper: 点击测试接口是否正常
+pluginType: access
+type: builtIn
+scriptFilePath: /plugins/plugin-zenlayer/access.js
diff --git a/packages/ui/certd-server/metadata/deploy_ZenlayerRefreshCert.yaml b/packages/ui/certd-server/metadata/deploy_ZenlayerRefreshCert.yaml
new file mode 100644
index 000000000..bad14d39c
--- /dev/null
+++ b/packages/ui/certd-server/metadata/deploy_ZenlayerRefreshCert.yaml
@@ -0,0 +1,73 @@
+showRunStrategy: false
+default:
+  strategy:
+    runStrategy: 1
+name: ZenlayerRefreshCert
+title: Zenlayer-刷新证书
+desc: 刷新Zenlayer CDN证书
+icon: svg:icon-lucky
+group: cdn
+needPlus: false
+input:
+  cert:
+    title: 域名证书
+    helper: 请选择前置任务输出的域名证书
+    component:
+      name: output-selector
+      from:
+        - ':cert:'
+    order: 0
+  certDomains:
+    title: 当前证书域名
+    component:
+      name: cert-domains-getter
+    mergeScript: |2-
+
+              return {
+                component:{
+                    inputKey: ctx.compute(({form})=>{
+                      return form.cert
+                    }),
+                }
+              }
+              
+    template: false
+    required: false
+    order: 0
+  accessId:
+    title: Zenlayer授权
+    component:
+      name: access-selector
+      type: zenlayer
+    required: true
+    order: 0
+  certList:
+    title: 证书ID列表
+    component:
+      name: remote-select
+      vModel: value
+      mode: tags
+      type: plugin
+      action: onGetCertList
+      search: false
+      pager: false
+      watches:
+        - certDomains
+        - accessId
+    required: true
+    mergeScript: |2-
+
+                return {
+                  component:{
+                    form: ctx.compute(({form})=>{
+                      return form
+                    })
+                  },
+               }
+              
+    helper: 要更新的Zenlayer证书ID列表
+    order: 0
+output: {}
+pluginType: deploy
+type: builtIn
+scriptFilePath: /plugins/plugin-zenlayer/plugins/plugin-refresh-cert.js