perf: 验证码支持 Cloudflare Turnstile ，谨慎启用，国内被墙了

packages/ui/certd-server/src/plugins/plugin-aliyun/plugin/index.ts

@@ -11,4 +11,5 @@ export * from './deploy-to-esa/index.js';
 export * from './deploy-to-vod/index.js';
 export * from './deploy-to-apigateway/index.js';
 export * from './deploy-to-apig/index.js';
-export * from './deploy-to-ack/index.js';
+export * from './deploy-to-ack/index.js';
+export * from './deploy-to-all/index.js';

packages/ui/certd-server/src/plugins/plugin-captcha/api.ts

@@ -1,4 +1,7 @@
+export type CaptchaRequest = {
+  remoteIp: string,
+}
 export interface  ICaptchaAddon{
-  onValidate(data?:any):Promise<any>;
+  onValidate(data?:any,req?:CaptchaRequest):Promise<any>;
   getCaptcha():Promise<any>;
 }

packages/ui/certd-server/src/plugins/plugin-captcha/cf-turnstile/index.ts

@@ -0,0 +1,71 @@
+import { AddonInput, BaseAddon, IsAddon } from "@certd/lib-server";
+import { CaptchaRequest, ICaptchaAddon } from "../api.js";
+
+@IsAddon({
+  addonType: "captcha",
+  name: "cfTurnstile",
+  title: "Cloudflare Turnstile",
+  desc: "",
+  showTest: false,
+})
+export class CfTurnstileCaptcha extends BaseAddon implements ICaptchaAddon {
+
+  @AddonInput({
+    title: "SiteKey",
+    component: {
+      placeholder: "SiteKey",
+    },
+    helper: "[Cloudflare Turnstile](https://www.cloudflare.com/zh-cn/application-services/products/turnstile/)",
+    required: true,
+  })
+  siteKey = "";
+
+  @AddonInput({
+    title: "SecretKey",
+    component: {
+      placeholder: "SecretKey",
+    },
+    required: true,
+  })
+  secretKey = "";
+
+  async onValidate(data?: any, req?: CaptchaRequest) {
+    if (!data) {
+      return false;
+    }
+    const { token } = data;
+    const { remoteIp } = req;
+
+    const formData = new FormData();
+    formData.append('secret', this.secretKey);
+    formData.append('response', token);
+    formData.append('remoteip', remoteIp);
+
+      const res = await this.http.request({
+        url: 'https://challenges.cloudflare.com/turnstile/v0/siteverify',
+        method: 'POST',
+        headers: {
+          'Content-Type': 'multipart/form-data',
+        },
+        data: formData
+      })
+
+      if (res.success) {
+        // Token is valid - process the form
+        return true;
+      } else {
+        // Token is invalid - reject the submission
+        const errorMessage = 'Cloudflare Turnstile 校验失败:' + res['error-codes'].join(', ')
+        this.logger.error(errorMessage);
+        throw new Error(errorMessage);
+      }
+   
+
+  }
+
+  async getCaptcha(): Promise<any> {
+    return {
+      siteKey: this.siteKey,
+    };
+  }
+}

packages/ui/certd-server/src/plugins/plugin-captcha/index.ts

@@ -1,3 +1,4 @@
 export * from './geetest/index.js';
 export * from './image/index.js';
 export * from './tencent/index.js';
+export * from './cf-turnstile/index.js';