perf: 证书仓库

packages/ui/certd-server/src/controller/user/pipeline/access-controller.ts

@@ -0,0 +1,101 @@
+import { ALL, Body, Controller, Inject, Post, Provide, Query } from '@midwayjs/core';
+import { Constants, CrudController } from '@certd/lib-server';
+import { AccessService } from '@certd/lib-server';
+import { AuthService } from '../../../modules/sys/authority/service/auth-service.js';
+import { AccessDefine } from '@certd/pipeline';
+
+/**
+ * 授权
+ */
+@Provide()
+@Controller('/api/pi/access')
+export class AccessController extends CrudController<AccessService> {
+  @Inject()
+  service: AccessService;
+  @Inject()
+  authService: AuthService;
+
+  getService(): AccessService {
+    return this.service;
+  }
+
+  @Post('/page', { summary: Constants.per.authOnly })
+  async page(@Body(ALL) body) {
+    body.query = body.query ?? {};
+    delete body.query.userId;
+    const buildQuery = qb => {
+      qb.andWhere('user_id = :userId', { userId: this.getUserId() });
+    };
+    const res = await this.service.page({
+      query: body.query,
+      page: body.page,
+      sort: body.sort,
+      buildQuery,
+    });
+    return this.ok(res);
+  }
+
+  @Post('/list', { summary: Constants.per.authOnly })
+  async list(@Body(ALL) body) {
+    body.query = body.query ?? {};
+    body.query.userId = this.getUserId();
+    return super.list(body);
+  }
+
+  @Post('/add', { summary: Constants.per.authOnly })
+  async add(@Body(ALL) bean) {
+    bean.userId = this.getUserId();
+    return super.add(bean);
+  }
+
+  @Post('/update', { summary: Constants.per.authOnly })
+  async update(@Body(ALL) bean) {
+    await this.service.checkUserId(bean.id, this.getUserId());
+    delete bean.userId;
+    return super.update(bean);
+  }
+  @Post('/info', { summary: Constants.per.authOnly })
+  async info(@Query('id') id: number) {
+    await this.service.checkUserId(id, this.getUserId());
+    return super.info(id);
+  }
+
+  @Post('/delete', { summary: Constants.per.authOnly })
+  async delete(@Query('id') id: number) {
+    await this.service.checkUserId(id, this.getUserId());
+    return super.delete(id);
+  }
+
+  @Post('/define', { summary: Constants.per.authOnly })
+  async define(@Query('type') type: string) {
+    const access = this.service.getDefineByType(type);
+    return this.ok(access);
+  }
+
+  @Post('/getSecretPlain', { summary: Constants.per.authOnly })
+  async getSecretPlain(@Body(ALL) body: { id: number; key: string }) {
+    const value = await this.service.getById(body.id, this.getUserId());
+    return this.ok(value[body.key]);
+  }
+
+  @Post('/accessTypeDict', { summary: Constants.per.authOnly })
+  async getAccessTypeDict() {
+    const list: AccessDefine[] = this.service.getDefineList();
+    const dict = [];
+    for (const item of list) {
+      dict.push({
+        value: item.name,
+        label: item.title,
+        icon: item.icon,
+      });
+    }
+    return this.ok(dict);
+  }
+
+  @Post('/simpleInfo', { summary: Constants.per.authOnly })
+  async simpleInfo(@Query('id') id: number) {
+    await this.authService.checkEntityUserId(this.ctx, this.service, id);
+    const res = await this.service.getSimpleInfo(id);
+    return this.ok(res);
+  }
+}

packages/ui/certd-server/src/controller/user/pipeline/cert-controller.ts

@@ -0,0 +1,21 @@
+import { Controller, Inject, Post, Provide, Query } from '@midwayjs/core';
+import { PipelineService } from '../../../modules/pipeline/service/pipeline-service.js';
+import { BaseController, Constants } from '@certd/lib-server';
+import { StorageService } from '../../../modules/pipeline/service/storage-service.js';
+
+@Provide()
+@Controller('/api/pi/cert')
+export class CertController extends BaseController {
+  @Inject()
+  pipelineService: PipelineService;
+  @Inject()
+  storeService: StorageService;
+
+  @Post('/get', { summary: Constants.per.authOnly })
+  async getCert(@Query('id') id: number) {
+    const userId = this.getUserId();
+    await this.pipelineService.checkUserId(id, userId);
+    const privateVars = await this.storeService.getPipelinePrivateVars(id);
+    return this.ok(privateVars.cert);
+  }
+}

packages/ui/certd-server/src/controller/user/pipeline/dns-provider-controller.ts

@@ -0,0 +1,34 @@
+import { ALL, Controller, Inject, Post, Provide, Query } from '@midwayjs/core';
+import { DnsProviderService } from '../../../modules/pipeline/service/dns-provider-service.js';
+import { BaseController } from '@certd/lib-server';
+import { Constants } from '@certd/lib-server';
+
+/**
+ * 插件
+ */
+@Provide()
+@Controller('/api/pi/dnsProvider')
+export class DnsProviderController extends BaseController {
+  @Inject()
+  service: DnsProviderService;
+
+  @Post('/list', { summary: Constants.per.authOnly })
+  async list(@Query(ALL) query: any) {
+    query.userId = this.getUserId();
+    const list = this.service.getList();
+    return this.ok(list);
+  }
+
+  @Post('/dnsProviderTypeDict', { summary: Constants.per.authOnly })
+  async getDnsProviderTypeDict() {
+    const list = this.service.getList();
+    const dict = [];
+    for (const item of list) {
+      dict.push({
+        value: item.name,
+        label: item.title,
+      });
+    }
+    return this.ok(dict);
+  }
+}

packages/ui/certd-server/src/controller/user/pipeline/handle-controller.ts

@@ -0,0 +1,127 @@
+import { ALL, Body, Controller, Inject, Post, Provide } from '@midwayjs/core';
+import { BaseController, Constants } from '@certd/lib-server';
+import {
+  AccessRequestHandleReq,
+  ITaskPlugin,
+  newAccess,
+  newNotification,
+  NotificationRequestHandleReq,
+  pluginRegistry,
+  PluginRequestHandleReq,
+  TaskInstanceContext,
+} from '@certd/pipeline';
+import { AccessService, AccessGetter } from '@certd/lib-server';
+import { EmailService } from '../../../modules/basic/service/email-service.js';
+import { http, HttpRequestConfig, logger, mergeUtils, utils } from '@certd/basic';
+import { NotificationService } from '../../../modules/pipeline/service/notification-service.js';
+
+@Provide()
+@Controller('/api/pi/handle')
+export class HandleController extends BaseController {
+  @Inject()
+  accessService: AccessService;
+
+  @Inject()
+  emailService: EmailService;
+
+  @Inject()
+  notificationService: NotificationService;
+
+  @Post('/access', { summary: Constants.per.authOnly })
+  async accessRequest(@Body(ALL) body: AccessRequestHandleReq) {
+    let inputAccess = body.input.access;
+    if (body.input.id > 0) {
+      const oldEntity = await this.accessService.info(body.input.id);
+      if (oldEntity) {
+        if (oldEntity.userId !== this.getUserId()) {
+          throw new Error('access not found');
+        }
+        const param: any = {
+          type: body.typeName,
+          setting: JSON.stringify(body.input.access),
+        };
+        this.accessService.encryptSetting(param, oldEntity);
+        inputAccess = this.accessService.decryptAccessEntity(param);
+      }
+    }
+
+    const access = newAccess(body.typeName, inputAccess);
+
+    const res = await access.onRequest(body);
+
+    return this.ok(res);
+  }
+
+  @Post('/notification', { summary: Constants.per.authOnly })
+  async notificationRequest(@Body(ALL) body: NotificationRequestHandleReq) {
+    const input = body.input.body;
+
+    const notification = await newNotification(body.typeName, input, {
+      http,
+      logger,
+      utils,
+      emailService: this.emailService,
+    });
+
+    const res = await notification.onRequest(body);
+
+    return this.ok(res);
+  }
+
+  @Post('/plugin', { summary: Constants.per.authOnly })
+  async pluginRequest(@Body(ALL) body: PluginRequestHandleReq) {
+    const userId = this.getUserId();
+    const pluginDefine = pluginRegistry.get(body.typeName);
+    const pluginCls = pluginDefine.target;
+    if (pluginCls == null) {
+      throw new Error(`plugin ${body.typeName} not found`);
+    }
+    //实例化access
+    //@ts-ignore
+    const plugin: PluginRequestHandler = new pluginCls();
+    //@ts-ignore
+    const instance = plugin as ITaskPlugin;
+
+    const accessGetter = new AccessGetter(userId, this.accessService.getById.bind(this.accessService));
+
+    const download = async (config: HttpRequestConfig, savePath: string) => {
+      await utils.download({
+        http,
+        logger,
+        config,
+        savePath,
+      });
+    };
+    //@ts-ignore
+    const taskCtx: TaskInstanceContext = {
+      pipeline: undefined,
+      step: undefined,
+      lastStatus: undefined,
+      http,
+      download,
+      logger: logger,
+      inputChanged: true,
+      accessService: accessGetter,
+      emailService: this.emailService,
+      pipelineContext: undefined,
+      userContext: undefined,
+      fileStore: undefined,
+      signal: undefined,
+      // pipelineContext: this.pipelineContext,
+      // userContext: this.contextFactory.getContext('user', this.options.userId),
+      // fileStore: new FileStore({
+      //   scope: this.pipeline.id,
+      //   parent: this.runtime.id,
+      //   rootDir: this.options.fileRootDir,
+      // }),
+      // signal: this.abort.signal,
+      utils,
+    };
+    instance.setCtx(taskCtx);
+    mergeUtils.merge(plugin, body.input);
+    await instance.onInstance();
+    const res = await plugin.onRequest(body);
+
+    return this.ok(res);
+  }
+}

packages/ui/certd-server/src/controller/user/pipeline/history-controller.ts

@@ -0,0 +1,214 @@
+import { ALL, Body, Controller, Get, Inject, Post, Provide, Query } from '@midwayjs/core';
+import { CommonException, Constants, CrudController, PermissionException } from '@certd/lib-server';
+import { PipelineEntity } from '../../../modules/pipeline/entity/pipeline.js';
+import { HistoryService } from '../../../modules/pipeline/service/history-service.js';
+import { HistoryLogService } from '../../../modules/pipeline/service/history-log-service.js';
+import { HistoryEntity } from '../../../modules/pipeline/entity/history.js';
+import { HistoryLogEntity } from '../../../modules/pipeline/entity/history-log.js';
+import { PipelineService } from '../../../modules/pipeline/service/pipeline-service.js';
+import * as fs from 'fs';
+import { logger } from '@certd/basic';
+import { AuthService } from '../../../modules/sys/authority/service/auth-service.js';
+import { SysSettingsService } from '@certd/lib-server';
+import { In } from 'typeorm';
+
+/**
+ * 证书
+ */
+@Provide()
+@Controller('/api/pi/history')
+export class HistoryController extends CrudController<HistoryService> {
+  @Inject()
+  service: HistoryService;
+  @Inject()
+  pipelineService: PipelineService;
+  @Inject()
+  logService: HistoryLogService;
+
+  @Inject()
+  authService: AuthService;
+
+  @Inject()
+  sysSettingsService: SysSettingsService;
+
+  getService(): HistoryService {
+    return this.service;
+  }
+
+  @Post('/page', { summary: Constants.per.authOnly })
+  async page(@Body(ALL) body: any) {
+    const isAdmin = await this.authService.isAdmin(this.ctx);
+    const publicSettings = await this.sysSettingsService.getPublicSettings();
+    const pipelineQuery: any = {};
+    if (!(publicSettings.managerOtherUserPipeline && isAdmin)) {
+      body.query.userId = this.getUserId();
+      pipelineQuery.userId = this.getUserId();
+    }
+
+    let pipelineIds: any = null;
+    const pipelineTitle = body.query?.pipelineTitle;
+    delete body.query.pipelineTitle;
+    if (pipelineTitle) {
+      const pipelines = await this.pipelineService.list({
+        query: pipelineQuery,
+        buildQuery: qb => {
+          qb.andWhere('title like :title', { title: `%${pipelineTitle}%` });
+        },
+      });
+      pipelineIds = pipelines.map(p => p.id);
+    }
+
+    const buildQuery = qb => {
+      if (pipelineIds) {
+        qb.andWhere({
+          pipelineId: In(pipelineIds),
+        });
+      }
+    };
+
+    const res = await this.service.page({
+      query: body.query,
+      page: body.page,
+      sort: body.sort,
+      buildQuery,
+    });
+
+    return this.ok(res);
+  }
+
+  @Post('/list', { summary: Constants.per.authOnly })
+  async list(@Body(ALL) body) {
+    const isAdmin = await this.authService.isAdmin(this.ctx);
+    if (!isAdmin) {
+      body.userId = this.getUserId();
+    }
+    if (body.pipelineId == null) {
+      return this.ok([]);
+    }
+    const buildQuery = qb => {
+      qb.limit(10);
+    };
+    const listRet = await this.getService().list({
+      query: body,
+      sort: { prop: 'id', asc: false },
+      buildQuery,
+    });
+    for (const item of listRet) {
+      if (!item.pipeline) {
+        continue;
+      }
+      const json = JSON.parse(item.pipeline);
+      delete json.stages;
+      item.pipeline = json;
+    }
+    return this.ok(listRet);
+  }
+
+  @Post('/add', { summary: Constants.per.authOnly })
+  async add(@Body(ALL) bean: PipelineEntity) {
+    bean.userId = this.getUserId();
+    return super.add(bean);
+  }
+
+  @Post('/update', { summary: Constants.per.authOnly })
+  async update(@Body(ALL) bean) {
+    await this.authService.checkEntityUserId(this.ctx, this.getService(), bean.id);
+    delete bean.userId;
+    return super.update(bean);
+  }
+
+  @Post('/save', { summary: Constants.per.authOnly })
+  async save(@Body(ALL) bean: HistoryEntity) {
+    bean.userId = this.getUserId();
+    if (bean.id > 0) {
+      await this.authService.checkEntityUserId(this.ctx, this.getService(), bean.id);
+    }
+    await this.service.save(bean);
+    return this.ok(bean.id);
+  }
+
+  @Post('/saveLog', { summary: Constants.per.authOnly })
+  async saveLog(@Body(ALL) bean: HistoryLogEntity) {
+    bean.userId = this.getUserId();
+    if (bean.id > 0) {
+      await this.authService.checkEntityUserId(this.ctx, this.getService(), bean.id);
+    }
+    await this.logService.save(bean);
+    return this.ok(bean.id);
+  }
+
+  @Post('/delete', { summary: Constants.per.authOnly })
+  async delete(@Query('id') id: number) {
+    await this.authService.checkEntityUserId(this.ctx, this.getService(), id);
+    await super.delete(id);
+    return this.ok();
+  }
+
+  @Post('/deleteByIds', { summary: Constants.per.authOnly })
+  async deleteByIds(@Body(ALL) body: any) {
+    await this.authService.checkEntityUserId(this.ctx, this.getService(), body.ids);
+    const isAdmin = await this.authService.isAdmin(this.ctx);
+    const userId = isAdmin ? null : this.getUserId();
+    await this.getService().deleteByIds(body.ids, userId);
+    return this.ok();
+  }
+
+  @Post('/detail', { summary: Constants.per.authOnly })
+  async detail(@Query('id') id: number) {
+    await this.authService.checkEntityUserId(this.ctx, this.getService(), id);
+    const detail = await this.service.detail(id);
+    return this.ok(detail);
+  }
+
+  @Post('/logs', { summary: Constants.per.authOnly })
+  async logs(@Query('id') id: number) {
+    await this.authService.checkEntityUserId(this.ctx, this.logService, id);
+    const logInfo = await this.logService.info(id);
+    return this.ok(logInfo);
+  }
+
+  @Post('/files', { summary: Constants.per.authOnly })
+  async files(@Query('pipelineId') pipelineId: number, @Query('historyId') historyId: number) {
+    await this.authService.checkEntityUserId(this.ctx, this.service, historyId);
+    const files = await this.getFiles(historyId, pipelineId);
+    return this.ok(files);
+  }
+
+  private async getFiles(historyId, pipelineId) {
+    let history = null;
+    if (historyId != null) {
+      // nothing
+      history = await this.service.info(historyId);
+    } else if (pipelineId != null) {
+      history = await this.service.getLastHistory(pipelineId);
+    }
+    if (history == null) {
+      throw new CommonException('historyId is null');
+    }
+    if (history.userId !== this.getUserId()) {
+      throw new PermissionException();
+    }
+    return await this.service.getFiles(history);
+  }
+
+  @Get('/download', { summary: Constants.per.authOnly })
+  async download(@Query('pipelineId') pipelineId: number, @Query('historyId') historyId: number, @Query('fileId') fileId: string) {
+    await this.authService.checkEntityUserId(this.ctx, this.service, historyId);
+    const files = await this.getFiles(historyId, pipelineId);
+    const file = files.find(f => f.id === fileId);
+    if (file == null) {
+      throw new CommonException('file not found');
+    }
+    // koa send file
+    // 下载文件的名称
+    // const filename = file.filename;
+    // 要下载的文件的完整路径
+    const path = file.path;
+    logger.info(`download:${path}`);
+    // 以流的形式下载文件
+    this.ctx.attachment(path);
+    this.ctx.set('Content-Type', 'application/octet-stream');
+
+    return fs.createReadStream(path);
+  }
+}

packages/ui/certd-server/src/controller/user/pipeline/notification-controller.ts

@@ -0,0 +1,163 @@
+import { ALL, Body, Controller, Inject, Post, Provide, Query } from '@midwayjs/core';
+import { Constants, CrudController, ValidateException } from '@certd/lib-server';
+import { NotificationService } from '../../../modules/pipeline/service/notification-service.js';
+import { AuthService } from '../../../modules/sys/authority/service/auth-service.js';
+import { NotificationDefine } from '@certd/pipeline';
+import { checkPlus } from '@certd/plus-core';
+
+/**
+ * 通知
+ */
+@Provide()
+@Controller('/api/pi/notification')
+export class NotificationController extends CrudController<NotificationService> {
+  @Inject()
+  service: NotificationService;
+  @Inject()
+  authService: AuthService;
+
+  getService(): NotificationService {
+    return this.service;
+  }
+
+  @Post('/page', { summary: Constants.per.authOnly })
+  async page(@Body(ALL) body) {
+    body.query = body.query ?? {};
+    delete body.query.userId;
+    const buildQuery = qb => {
+      qb.andWhere('user_id = :userId', { userId: this.getUserId() });
+    };
+    const res = await this.service.page({
+      query: body.query,
+      page: body.page,
+      sort: body.sort,
+      buildQuery,
+    });
+    return this.ok(res);
+  }
+
+  @Post('/list', { summary: Constants.per.authOnly })
+  async list(@Body(ALL) body) {
+    body.query = body.query ?? {};
+    body.query.userId = this.getUserId();
+    return super.list(body);
+  }
+
+  @Post('/add', { summary: Constants.per.authOnly })
+  async add(@Body(ALL) bean) {
+    bean.userId = this.getUserId();
+    const type = bean.type;
+    const define: NotificationDefine = this.service.getDefineByType(type);
+    if (!define) {
+      throw new ValidateException('通知类型不存在');
+    }
+    if (define.needPlus) {
+      checkPlus();
+    }
+    return super.add(bean);
+  }
+
+  @Post('/update', { summary: Constants.per.authOnly })
+  async update(@Body(ALL) bean) {
+    await this.service.checkUserId(bean.id, this.getUserId());
+    const old = await this.service.info(bean.id);
+    if (!old) {
+      throw new ValidateException('通知配置不存在');
+    }
+    if (old.type !== bean.type) {
+      const type = bean.type;
+      const define: NotificationDefine = this.service.getDefineByType(type);
+      if (!define) {
+        throw new ValidateException('通知类型不存在');
+      }
+      if (define.needPlus) {
+        checkPlus();
+      }
+    }
+    delete bean.userId;
+    return super.update(bean);
+  }
+  @Post('/info', { summary: Constants.per.authOnly })
+  async info(@Query('id') id: number) {
+    await this.service.checkUserId(id, this.getUserId());
+    return super.info(id);
+  }
+
+  @Post('/delete', { summary: Constants.per.authOnly })
+  async delete(@Query('id') id: number) {
+    await this.service.checkUserId(id, this.getUserId());
+    return super.delete(id);
+  }
+
+  @Post('/define', { summary: Constants.per.authOnly })
+  async define(@Query('type') type: string) {
+    const notification = this.service.getDefineByType(type);
+    return this.ok(notification);
+  }
+
+  @Post('/getTypeDict', { summary: Constants.per.authOnly })
+  async getTypeDict() {
+    const list: any = this.service.getDefineList();
+    let dict = [];
+    for (const item of list) {
+      dict.push({
+        value: item.name,
+        label: item.title,
+        needPlus: item.needPlus ?? false,
+        icon: item.icon,
+      });
+    }
+    dict = dict.sort(a => {
+      return a.needPlus ? 0 : -1;
+    });
+    return this.ok(dict);
+  }
+
+  @Post('/simpleInfo', { summary: Constants.per.authOnly })
+  async simpleInfo(@Query('id') id: number) {
+    if (id === 0) {
+      //获取默认
+      const res = await this.service.getDefault(this.getUserId());
+      if (!res) {
+        throw new ValidateException('默认通知配置不存在');
+      }
+      const simple = await this.service.getSimpleInfo(res.id);
+      return this.ok(simple);
+    }
+    await this.authService.checkEntityUserId(this.ctx, this.service, id);
+    const res = await this.service.getSimpleInfo(id);
+    return this.ok(res);
+  }
+
+  @Post('/getDefaultId', { summary: Constants.per.authOnly })
+  async getDefaultId() {
+    const res = await this.service.getDefault(this.getUserId());
+    return this.ok(res?.id);
+  }
+
+  @Post('/setDefault', { summary: Constants.per.authOnly })
+  async setDefault(@Query('id') id: number) {
+    await this.service.checkUserId(id, this.getUserId());
+    const res = await this.service.setDefault(id, this.getUserId());
+    return this.ok(res);
+  }
+
+  @Post('/getOrCreateDefault', { summary: Constants.per.authOnly })
+  async getOrCreateDefault(@Body('email') email: string) {
+    const res = await this.service.getOrCreateDefault(email, this.getUserId());
+    return this.ok(res);
+  }
+
+  @Post('/options', { summary: Constants.per.authOnly })
+  async options() {
+    const res = await this.service.list({
+      query: {
+        userId: this.getUserId(),
+      },
+    });
+    for (const item of res) {
+      delete item.setting;
+    }
+    return this.ok(res);
+  }
+}