perf: 支持google dns插件

2026-05-02 11:18:51 +08:00 · 2026-04-26 01:56:08 +08:00
parent 7b6b3aa293
commit edc7bfc230
5 changed files with 555 additions and 114 deletions
@@ -64,6 +64,7 @@
    "@certd/plugin-lib": "^1.39.10",
    "@certd/plugin-plus": "^1.39.10",
    "@certd/plus-core": "^1.39.10",
+    "@google-cloud/dns": "^5.3.1",
    "@google-cloud/publicca": "^1.3.0",
    "@huaweicloud/huaweicloud-sdk-cdn": "^3.1.185",
    "@huaweicloud/huaweicloud-sdk-core": "^3.1.185",
@@ -0,0 +1,281 @@
+import { Pager, PageRes, PageSearch } from "@certd/pipeline";
+import {
+  AbstractDnsProvider,
+  CreateRecordOptions,
+  DomainRecord,
+  IsDnsProvider,
+  RemoveRecordOptions,
+} from "@certd/plugin-cert";
+import { GoogleAccess } from "../plugin-cert/access/index.js";
+
+// TODO: 接口待明确 - 需要确认Google Cloud DNS API的具体参数和返回值格式
+
+export type GoogleCloudDnsRecord = {
+  name: string;
+  type: string;
+  ttl: number;
+  rrdatas: string[];
+  zoneId: string;
+  projectId: string;
+};
+
+@IsDnsProvider({
+  name: "google-cloud-dns",
+  title: "Google Cloud DNS",
+  desc: "Google Cloud DNS提供商",
+  icon: "flat-color-icons:google",
+  accessType: "google",
+  order: 50,
+})
+export class GoogleCloudDnsProvider extends AbstractDnsProvider<GoogleCloudDnsRecord> {
+  access!: GoogleAccess;
+  projectId!: string;
+  credentials!: any;
+  envHttpsProxy: string = "";
+
+  async onInstance() {
+    this.access = this.ctx.access as GoogleAccess;
+    if (!this.access.serviceAccountSecret) {
+      throw new Error("服务账号密钥不能为空");
+    }
+    this.credentials = JSON.parse(this.access.serviceAccountSecret);
+    this.projectId = this.credentials.project_id;
+    this.logger.debug("Google Cloud DNS Provider 初始化成功");
+  }
+
+  private async setupProxy() {
+    if (this.access.httpsProxy) {
+      this.envHttpsProxy = process.env.HTTPS_PROXY || "";
+      process.env.HTTPS_PROXY = this.access.httpsProxy;
+    }
+  }
+
+  private async restoreProxy() {
+    if (this.envHttpsProxy) {
+      process.env.HTTPS_PROXY = this.envHttpsProxy;
+      this.envHttpsProxy = "";
+    }
+  }
+
+  private async getGoogleDnsClient() {
+    const { DNS } = await import("@google-cloud/dns");
+    return new DNS({ credentials: this.credentials });
+  }
+
+  private async findManagedZone(domain: string): Promise<any> {
+    const dns = await this.getGoogleDnsClient();
+    const [zones] = await dns.getZones();
+
+    // 查找匹配的托管区域
+    const normalizedDomain = domain.endsWith(".") ? domain : domain + ".";
+    for (const zone of zones) {
+      const zoneDnsName = zone.metadata.dnsName;
+      if (normalizedDomain.endsWith(zoneDnsName) || zoneDnsName === normalizedDomain) {
+        return zone;
+      }
+    }
+    throw new Error(`未找到域名 ${domain} 对应的托管区域`);
+  }
+
+  private async getExistingRecord(zone: any, recordName: string, type: string): Promise<any> {
+    const [records] = await zone.getRecords({
+      name: recordName,
+      type: type,
+    });
+    return records.length > 0 ? records[0] : null;
+  }
+
+  // 去掉引号的辅助函数
+  private stripQuotes(str: string): string {
+    return str.replace(/^"|"$/g, "");
+  }
+
+  // 添加引号的辅助函数（如果没有的话）
+  private addQuotes(str: string): string {
+    if (str.startsWith('"') && str.endsWith('"')) {
+      return str;
+    }
+    return `"${str}"`;
+  }
+  // 比较值是否相等（忽略引号）
+  private valuesEqual(a: string, b: string): boolean {
+    return this.stripQuotes(a) === this.stripQuotes(b);
+  }
+
+  async createRecord(options: CreateRecordOptions): Promise<GoogleCloudDnsRecord> {
+    const { fullRecord, value, type, domain } = options;
+    this.logger.info("Google Cloud DNS: 添加解析记录", fullRecord, value, type, domain);
+
+    await this.setupProxy();
+    try {
+      const zone = await this.findManagedZone(domain);
+      const recordName = fullRecord.endsWith(".") ? fullRecord : fullRecord + ".";
+
+      // 检查是否已存在该记录集
+      const existingRecord = await this.getExistingRecord(zone, recordName, type);
+
+      let newRrdatas: string[];
+      let ttl: number;
+      if (existingRecord) {
+        // 记录已存在，追加新值
+        this.logger.info("Google Cloud DNS: 记录已存在，追加新值");
+        const existingRrdatas = existingRecord.metadata.rrdatas || [];
+
+        // 检查值是否已存在（忽略引号）
+        const valueExists = existingRrdatas.some((existing: string) =>
+          this.valuesEqual(existing, value)
+        );
+
+        if (valueExists) {
+          this.logger.info("Google Cloud DNS: 值已存在，无需重复添加", fullRecord, value);
+          return {
+            name: recordName,
+            type: type,
+            ttl: existingRecord.metadata.ttl,
+            rrdatas: existingRrdatas,
+            zoneId: zone.metadata.name,
+            projectId: this.projectId,
+          };
+        }
+
+        newRrdatas = [...existingRrdatas, this.addQuotes(value)];
+        ttl = existingRecord.metadata.ttl;
+      } else {
+        // 创建新记录，加上引号
+        newRrdatas = [this.addQuotes(value)];
+        ttl = 60;
+      }
+
+      const changeConfig: any = {};
+
+      // 如果存在旧记录，需要先删除
+      if (existingRecord) {
+        // 使用Record对象格式
+        changeConfig.delete = existingRecord;
+      }
+
+      // 创建新的Record对象
+      const newRecord = zone.record(type, {
+        name: recordName,
+        data: newRrdatas,
+        ttl: ttl,
+      });
+      changeConfig.add = newRecord;
+
+      await zone.createChange(changeConfig);
+
+      this.logger.info("Google Cloud DNS: 解析记录创建成功", fullRecord);
+
+      return {
+        name: recordName,
+        type: type,
+        ttl: ttl,
+        rrdatas: newRrdatas, // 已经包含引号了
+        zoneId: zone.metadata.name,
+        projectId: this.projectId,
+      };
+    } finally {
+      await this.restoreProxy();
+    }
+  }
+
+  async removeRecord(options: RemoveRecordOptions<GoogleCloudDnsRecord>): Promise<void> {
+    const { fullRecord, value } = options.recordReq;
+    const record = options.recordRes;
+    this.logger.info("Google Cloud DNS: 删除解析记录", fullRecord, value);
+
+    if (!record) {
+      this.logger.info("记录为空，不执行删除");
+      return;
+    }
+
+    await this.setupProxy();
+    try {
+      const dns = await this.getGoogleDnsClient();
+      const zone = dns.zone(record.zoneId);
+      const recordName = record.name;
+
+      // 先获取服务器最新的记录状态
+      const existingRecord = await this.getExistingRecord(zone, recordName, record.type);
+
+      if (!existingRecord) {
+        this.logger.info("Google Cloud DNS: 记录已不存在，无需删除", fullRecord);
+        return;
+      }
+
+      const currentRrdatas = existingRecord.metadata.rrdatas || [];
+
+      // 检查要删除的值是否存在（忽略引号）
+      const valueIndex = currentRrdatas.findIndex((existing: string) =>
+        this.valuesEqual(existing, value)
+      );
+
+      if (valueIndex === -1) {
+        this.logger.info("Google Cloud DNS: 要删除的值不存在", fullRecord, value);
+        return;
+      }
+
+      // 过滤掉要删除的值（精确匹配找到的那个，保持其他记录的原样）
+      const newRrdatas = currentRrdatas.filter((_: string, i: number) => i !== valueIndex);
+
+      const changeConfig: any = {
+        delete: existingRecord,
+      };
+
+      if (newRrdatas.length > 0) {
+        // 还有剩余值，添加更新后的记录
+        const newRecord = zone.record(record.type, {
+          name: recordName,
+          data: newRrdatas,
+          ttl: existingRecord.metadata.ttl,
+        });
+        changeConfig.add = newRecord;
+        this.logger.info("Google Cloud DNS: 记录值已移除，剩余值", fullRecord, newRrdatas);
+      } else {
+        this.logger.info("Google Cloud DNS: 记录集已删除（无剩余值）", fullRecord);
+      }
+
+      await zone.createChange(changeConfig);
+    } catch (error: any) {
+      this.logger.error("Google Cloud DNS: 删除解析记录失败", error.message);
+      // 即使删除失败也不抛出异常，避免影响整个证书申请流程
+    } finally {
+      await this.restoreProxy();
+    }
+  }
+
+  async getDomainListPage(req: PageSearch): Promise<PageRes<DomainRecord>> {
+    await this.setupProxy();
+    try {
+      const pager = new Pager(req);
+      const dns = await this.getGoogleDnsClient();
+      const [zones] = await dns.getZones({
+        maxResults: pager.pageSize,
+        pageToken: pager.pageNo > 1 ? String(pager.pageNo) : undefined,
+      });
+
+      const list: DomainRecord[] = zones.map((zone: any) => ({
+        id: zone.metadata.name,
+        domain: zone.metadata.dnsName.replace(/\.$/, ""), // 去掉结尾的点
+      }));
+
+      // 简单的搜索过滤
+      let filteredList = list;
+      if (req.searchKey) {
+        filteredList = list.filter((item) =>
+          item.domain.toLowerCase().includes(req.searchKey.toLowerCase())
+        );
+      }
+
+      return {
+        list: filteredList,
+        total: zones.length,
+      };
+    } finally {
+      await this.restoreProxy();
+    }
+  }
+}
+
+// 实例化插件
+new GoogleCloudDnsProvider();
@@ -0,0 +1 @@
+export * from "./dns-provider.js";