perf: 支持cloudflare域名

packages/ui/certd-server/src/plugins/plugin-cloudflare/access.ts

@@ -6,7 +6,7 @@ import { IsAccess, AccessInput } from '@certd/pipeline';
  */
 @IsAccess({
   name: 'cloudflare',
-  title: '授权插件示例',
+  title: 'cloudflare授权',
   desc: '',
 })
 export class CloudflareAccess {

packages/ui/certd-server/src/plugins/plugin-cloudflare/dns-provider.ts

@@ -2,62 +2,118 @@ import { AbstractDnsProvider, CreateRecordOptions, IsDnsProvider, RemoveRecordOp
 import { Autowire, HttpClient, ILogger } from "@certd/pipeline";
 import { CloudflareAccess } from "./access";
 
-// TODO  这里注册一个dnsProvider
+export type CloudflareRecord = {
+  id: string;
+  type: string;
+  name: string;
+  content: string;
+  ttl: number;
+  proxied: boolean;
+  zone_id: string;
+  zone_name: string;
+  created_on: string;
+  modified_on: string;
+};
+
+
+// 这里通过IsDnsProvider注册一个dnsProvider
 @IsDnsProvider({
   name: 'cloudflare',
   title: 'cloudflare',
-  desc: 'cloudflare dns provider示例',
+  desc: 'cloudflare dns provider',
+  // 这里是对应的 cloudflare的access类型名称
   accessType: 'cloudflare',
 })
-export class CloudflareDnsProvider extends AbstractDnsProvider{
+export class CloudflareDnsProvider extends AbstractDnsProvider<CloudflareRecord>{
+  // 通过Autowire传递context
   @Autowire()
   logger! : ILogger;
   access!: CloudflareAccess;
   http!: HttpClient;
   async onInstance() {
     //一些初始化的操作
+    // 也可以通过ctx成员变量传递context， 与Autowire效果一样
     this.access = this.ctx.access as CloudflareAccess;
     this.http = this.ctx.http
   }
 
 
+  async getZoneId(domain:string){
+    const url = `https://api.cloudflare.com/client/v4/zones?name=${domain}`;
+    const res = await this.doRequestApi(url,null,"get");
+    return res.result[0].id
+  }
+
+
+  private async doRequestApi(url: string,data:any = null,method:string="post") {
+      const res = await this.http.request<any,any>({
+        url,
+        method,
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${this.access.apiToken}`,
+        },
+        data
+      });
+      if (!res.success) {
+        throw new Error(`${JSON.stringify(res.errors)}`);
+      }
+      return res
+  }
+
   /**
-   * curl --request POST \
-   *   --url https://api.cloudflare.com/client/v4/zones/zone_id/dns_records \
-   *   --header 'Content-Type: application/json' \
-   *   --header 'X-Auth-Email: ' \
-   *   --data '{
-   *   "content": "198.51.100.4",
-   *   "name": "example.com",
-   *   "proxied": false,
-   *   "type": "A",
-   *   "comment": "Domain verification record",
-   *   "tags": [
-   *     "owner:dns-team"
-   *   ],
-   *   "ttl": 60
-   * }'
+    * 创建dns解析记录，用于验证域名所有权
    */
-  async createRecord(options: CreateRecordOptions): Promise<any> {
+  async createRecord(options: CreateRecordOptions): Promise<CloudflareRecord> {
+
+    /**
+     * fullRecord: '_acme-challenge.test.example.com',
+     * value: 一串uuid
+     * type: 'TXT',
+     * domain: 'example.com'
+     */
     const { fullRecord, value, type,domain } = options;
     this.logger.info('添加域名解析：', fullRecord, value, type,domain);
 
-    this.http.post('https://api.cloudflare.com/client/v4/zones/zone_id/dns_records')
+    const zoneId = await this.getZoneId(domain);
+    this.logger.info('获取zoneId成功:',zoneId)
 
-    //TODO 然后调用接口，创建txt类型的dns解析记录
-    // .. 这里调用对应平台的后台接口
-    const access = this.access;
-    this.logger.debug('access', access);
+    // 给domain下创建txt类型的dns解析记录，fullRecord
+    let url = `https://api.cloudflare.com/client/v4/zones/${zoneId}/dns_records`;
+    const res = await this.doRequestApi(url, {
+        content: value,
+        name: fullRecord,
+        type: type,
+        ttl: 60,
+    })
+    const record = res.result as CloudflareRecord;
+    this.logger.info(`添加域名解析成功:fullRecord=${fullRecord},value=${value}`);
+    this.logger.info(`dns解析记录:${JSON.stringify(record)}`,)
+
+    //本接口需要返回本次创建的dns解析记录，这个记录会在删除的时候用到
+    return record
   }
-  async removeRecord(options: RemoveRecordOptions): Promise<any> {
+
+
+  /**
+   *  删除dns解析记录,清理申请痕迹
+   * @param options
+   */
+  async removeRecord(options: RemoveRecordOptions<CloudflareRecord>): Promise<void> {
     const { fullRecord, value, record } = options;
-    this.logger.info('删除域名解析：', fullRecord, value, record);
-    //TODO 这里调用删除txt dns解析记录接口
-    const access = this.access;
-    this.logger.debug('access', access);
-    this.logger.info('删除域名解析成功:', fullRecord, value);
+    this.logger.info('删除域名解析：', fullRecord, value);
+    if(!record){
+      this.logger.info('record不存在');
+      return
+    }
+    //这里调用删除txt dns解析记录接口
+    const zoneId = record.zone_id;
+    const recordId = record.id;
+    let url = `https://api.cloudflare.com/client/v4/zones/${zoneId}/dns_records/${recordId}`;
+    await this.doRequestApi(url,null,"delete")
+    this.logger.info(`删除域名解析成功:fullRecord=${fullRecord},value=${value}`);
   }
 }
 
-//TODO 实例化这个provider，将其自动注册到系统中
+//实例化这个provider，将其自动注册到系统中
 new CloudflareDnsProvider();