Compare commits

...
7 Commits
Author SHA1 Message Date
xiaojunnuo b46948c0ba v1.42.0 2026-07-05 19:23:49 +08:00
xiaojunnuo 3024720fc2 build: prepare to build 2026-07-05 19:21:52 +08:00
xiaojunnuo cf854c9278 chore(access-selector): add auto select first item function
1. 为access-selector组件添加defaultSelect属性支持自动选中第一个匹配项
2. 补全组件的typescript语法支持,新增onMounted等依赖导入
3. 在证书申请插件中启用默认选中功能
2026-07-05 01:40:08 +08:00
xiaojunnuo 608cc2a81f perf: 优化用户体验,首次访问时弹出邮箱账号绑定用以初始化账号 2026-07-05 01:14:48 +08:00
xiaojunnuo 396670dc8f chore(locales,plugin): 更新多语言文案并优化插件依赖提示
1. 修复中文文案中"sourcee"拼写错误为"来源"
2. 将插件列表启用禁用列的提示文案替换为更简洁的"点击启用/禁用"
3. 完善插件依赖和第三方依赖的帮助提示,添加格式示例说明
2026-07-04 22:31:46 +08:00
xiaojunnuo 79f65868ca perf(passkey): passkey支持多域名rpid 2026-07-04 21:56:35 +08:00
xiaojunnuo 56e5524a0f perf(cert-plugin): 调整更新天数自动减半逻辑,仅7天ip证书生效,其他情况下不减半 2026-07-04 17:01:02 +08:00
59 changed files with 707 additions and 280 deletions
+1 -1
View File
@@ -102,7 +102,7 @@ Certd 是可私有化部署的 SSL/TLS 证书自动化管理平台,提供 Web
- 只有需要事务传播时才定义 `ctx`;普通查询、纯函数和简单私有方法继续使用明确参数。 - 只有需要事务传播时才定义 `ctx`;普通查询、纯函数和简单私有方法继续使用明确参数。
- 需要按事务上下文取 Repository 时,用 `BaseService.getRepo(ctx, EntityClass)` - 需要按事务上下文取 Repository 时,用 `BaseService.getRepo(ctx, EntityClass)`
- 需要“有事务则复用、无事务则开启”时,用 `BaseService.transactionWithCtx(ctx, callback)` - 需要“有事务则复用、无事务则开启”时,用 `BaseService.transactionWithCtx(ctx, callback)`
- 拼接可选 `projectId` 查询条件时,用 `BaseService.buildUserProjectQuery(userId, projectId)`;不要直接写 `{ userId, projectId }` - 拼接可选 `projectId` 查询条件时,**必须**使`BaseService.buildUserProjectQuery(userId, projectId)`,禁止直接写 `{ userId, projectId }`因为 `projectId` 可能为 `null`/`undefined`,直接放入查询会生成错误的 `WHERE projectId = NULL` 条件。
- `ctx` 类型复用 `BaseService` 导出的 `ServiceContext` - `ctx` 类型复用 `BaseService` 导出的 `ServiceContext`
- 新增 service 方法避免与 `BaseService` 方法签名冲突,例如不要用 `delete(id)` 覆盖 `delete(ids, where?)`;改用 `deleteById` 等具体名称。 - 新增 service 方法避免与 `BaseService` 方法签名冲突,例如不要用 `delete(id)` 覆盖 `delete(ids, where?)`;改用 `deleteById` 等具体名称。
+28
View File
@@ -3,6 +3,34 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
### Bug Fixes
* 修复jdk证书格式的问题 ([260f5ae](https://github.com/certd/certd/commit/260f5ae777b83493b0c578fe30fd00ec0c873226))
* 修复telegram - 符号转义问题 ([d5882f1](https://github.com/certd/certd/commit/d5882f16bedb09baf09ace92049b02872620f5dc))
* **aliyun:** 修复阿里云CDN/DCDN根据证书自动匹配不到证书的bug ([1ae185d](https://github.com/certd/certd/commit/1ae185d0bc356f4678bc38ca0582ce3396f82ebe))
### Features
* 通过插件配置懒加载依赖,动态加载第三方依赖包,精简安装镜像大小 ([01568ca](https://github.com/certd/certd/commit/01568ca1489069046b5a89ebdd4ced2f7f6ddf93))
### Performance Improvements
* 阿里云ESA证书部署支持SaaS模式 ([82276b5](https://github.com/certd/certd/commit/82276b53a8474a18a3d0237050907c994fc748f0))
* 【破坏性更新】 证书压缩包不再生成文件存储,而是实时打包下载,证书申请插件不再输出certZip ([7cff1a9](https://github.com/certd/certd/commit/7cff1a98424120585205889874b3ef4956a30583))
* 火山引擎点播插件支持部署到自定义源站域名 ([095791c](https://github.com/certd/certd/commit/095791cdc2b7c1f4b913b634643afec5e30fe9b0))
* 基础镜像改成node:22-trixie-slim,对网络兼容性更好 ([c66a2bd](https://github.com/certd/certd/commit/c66a2bd77ab6dbb3e3fe2c00562b66287a9429ea))
* 新增橙域网络(asia-isp) CDN证书部署插件 ([b48831e](https://github.com/certd/certd/commit/b48831e60b0059bef7ef9a34ab61c9dd2f684641))
* 优化阿里云API网关增加翻页查询 ([ed58ae3](https://github.com/certd/certd/commit/ed58ae3c5339e4a0238a92acfe7ea6d2f566ea28))
* 优化用户体验,首次访问时弹出邮箱账号绑定用以初始化账号 ([608cc2a](https://github.com/certd/certd/commit/608cc2a81ff0b4872c9fe11ed9c9c0b4b90a12a3))
* 优化ACME账号字段的选择提示 ([bfd3cac](https://github.com/certd/certd/commit/bfd3cacc687fc5cbc3cb2ca3cadbc140de300dc2))
* 支持全自动匹配部署宝塔网站证书 ([4dff48e](https://github.com/certd/certd/commit/4dff48e807c32a7623ec9206cf39c88e88f89f6a))
* **cert-plugin:** 调整更新天数自动减半逻辑,仅7天ip证书生效,其他情况下不减半 ([56e5524](https://github.com/certd/certd/commit/56e5524a0f4af3645d70bc3b3ec750b45ba8de10))
* dns默认ipv4first ([194463b](https://github.com/certd/certd/commit/194463bea9e797315aa7a724f4b2930701570419))
* **passkey:** passkey支持多域名rpid ([79f6586](https://github.com/certd/certd/commit/79f65868ca0f5162bbc2f935ce89abc28011d816))
* **plugin:** 在线插件编辑支持配置第三方依赖和插件依赖 ([635f069](https://github.com/certd/certd/commit/635f069012d4193cfb7cb051c96e28eec1247ca2))
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
### Bug Fixes ### Bug Fixes
+19 -18
View File
@@ -1,5 +1,5 @@
# 任务插件 # 任务插件
`133` 款任务插件 `134` 款任务插件
## 1. 证书申请 ## 1. 证书申请
| 序号 | 名称 | 说明 | | 序号 | 名称 | 说明 |
@@ -63,22 +63,23 @@
| 7.| **1Panel-部署面板证书** | 更新1Panel的面板证书 | | 7.| **1Panel-部署面板证书** | 更新1Panel的面板证书 |
| 8.| **1Panel-更新站点证书** | 更新1Panel的站点证书 | | 8.| **1Panel-更新站点证书** | 更新1Panel的站点证书 |
| 9.| **宝塔-删除过期证书** | 删除证书夹中过期证书 | | 9.| **宝塔-删除过期证书** | 删除证书夹中过期证书 |
| 10.| **宝塔-WAF证书部署** | 部署宝塔云WAF/aaWAF | | 10.| **宝塔-全自动部署** | 根据证书域名自动匹配宝塔站点,全自动部署SSL证书。新增加速域名自动感知,自动新增部署 |
| 11.| **宝塔-面板证书部署** | 部署宝塔面板本身的ssl证书 | | 11.| **宝塔-WAF证书部署** | 部署宝塔云WAF/aaWAF |
| 12.| **宝塔win-网站证书部署** | 部署到Windows版宝塔管理的站点的ssl证书 | | 12.| **宝塔-面板证书部署** | 部署宝塔面板本身的ssl证书 |
| 13.| **宝塔-网站证书部署** | 部署宝塔管理的站点的ssl证书,目前支持宝塔网站站点、docker站点等。本插件也支持aaPanel。 | | 13.| **宝塔win-网站证书部署** | 部署到Windows版宝塔管理的站点的ssl证书 |
| 14.| **K8S-Apply自定义yaml** | apply自定义yaml到k8s | | 14.| **宝塔-网站证书部署** | 部署宝塔管理的站点的ssl证书,目前支持宝塔网站站点、docker站点等。本插件也支持aaPanel。 |
| 15.| **K8S-Ingress 证书部署** | 部署证书到k8s的Ingress | | 15.| **K8S-Apply自定义yaml** | apply自定义yaml到k8s |
| 16.| **K8S-部署证书到Secret** | 部署证书到k8s的secret | | 16.| **K8S-Ingress 证书部署** | 部署证书到k8s的Ingress |
| 17.| **lucky-更新Lucky证书** | | | 17.| **K8S-部署证书到Secret** | 部署证书到k8s的secret |
| 18.| **Plesk-部署Plesk网站证书** | | | 18.| **lucky-更新Lucky证书** | |
| 19.| **Plesk-更新证书** | 不会创建新证书记录,直接更新旧的证书 | | 19.| **Plesk-部署Plesk网站证书** | |
| 20.| **雷池-更新证书(支持控制台和防护应用)** | 更新长亭雷池WAF的证书,支持更新控制台和防护应用的证书 | | 20.| **Plesk-更新证书** | 不会创建新证书记录,直接更新旧的证书 |
| 21.| **群晖-部署证书到群晖面板** | Synology,支持6.x以上版本 | | 21.| **雷池-更新证书(支持控制台和防护应用)** | 更新长亭雷池WAF的证书,支持更新控制台和防护应用的证书。 |
| 22.| **群晖-刷新OTP登录有效期** | 群晖登录状态可能30天失效,需要在失效之前登录一次,刷新有效期,您可以将其放在“部署到群晖面板”任务之后 | | 22.| **群晖-部署证书到群晖面板** | Synology,支持6.x以上版本 |
| 23.| **uniCloud-部署到服务空间** | 部署到服务空间 | | 23.| **群晖-刷新OTP登录有效期** | 群晖登录状态可能30天失效,需要在失效之前登录一次,刷新有效期,您可以将其放在“部署到群晖面板”任务之后 |
| 24.| **Proxmox-上传证书到Proxmox** | | | 24.| **uniCloud-部署到服务空间** | 部署到服务空间 |
| 25.| **威联通-部署证书到威联通** | 部署证书到qnap | | 25.| **Proxmox-上传证书到Proxmox** | |
| 26.| **威联通-部署证书到威联通** | 部署证书到qnap |
## 5. 阿里云 ## 5. 阿里云
| 序号 | 名称 | 说明 | | 序号 | 名称 | 说明 |
@@ -91,7 +92,7 @@
| 6.| **阿里云-部署证书至API网关** | 自动部署域名证书至阿里云API网关(APIGateway | | 6.| **阿里云-部署证书至API网关** | 自动部署域名证书至阿里云API网关(APIGateway |
| 7.| **阿里云-部署证书至CDN** | 自动部署域名证书至阿里云CDN | | 7.| **阿里云-部署证书至CDN** | 自动部署域名证书至阿里云CDN |
| 8.| **阿里云-部署证书至DCDN** | 依赖证书申请前置任务,自动部署域名证书至阿里云DCDN | | 8.| **阿里云-部署证书至DCDN** | 依赖证书申请前置任务,自动部署域名证书至阿里云DCDN |
| 9.| **阿里云-部署至ESA** | 部署证书到阿里云ESA(边缘安全加速),自动删除过期证书 | | 9.| **阿里云-部署至ESA** | 部署证书到阿里云ESA(边缘安全加速),支持边缘证书和SaaS证书两种模式 |
| 10.| **阿里云-部署至阿里云FC(3.0)** | 部署证书到阿里云函数计算(FC3.0) | | 10.| **阿里云-部署至阿里云FC(3.0)** | 部署证书到阿里云函数计算(FC3.0) |
| 11.| **阿里云-部署至GA** | 部署证书到阿里云GA(全球加速),支持更新默认证书和扩展证书 | | 11.| **阿里云-部署至GA** | 部署证书到阿里云GA(全球加速),支持更新默认证书和扩展证书 |
| 12.| **阿里云-部署至直播(Live** | 部署证书到阿里云视频直播(Live)域名 | | 12.| **阿里云-部署至直播(Live** | 部署证书到阿里云视频直播(Live)域名 |
+1 -1
View File
@@ -9,5 +9,5 @@
} }
}, },
"npmClient": "pnpm", "npmClient": "pnpm",
"version": "1.41.4" "version": "1.42.0"
} }
+6
View File
@@ -3,6 +3,12 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/publishlab/node-acme-client/compare/v1.41.4...v1.42.0) (2026-07-05)
### Performance Improvements
* 新增橙域网络(asia-isp) CDN证书部署插件 ([b48831e](https://github.com/publishlab/node-acme-client/commit/b48831e60b0059bef7ef9a34ab61c9dd2f684641))
## [1.41.4](https://github.com/publishlab/node-acme-client/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/publishlab/node-acme-client/compare/v1.41.3...v1.41.4) (2026-06-14)
**Note:** Version bump only for package @certd/acme-client **Note:** Version bump only for package @certd/acme-client
+2 -2
View File
@@ -3,7 +3,7 @@
"description": "Simple and unopinionated ACME client", "description": "Simple and unopinionated ACME client",
"private": false, "private": false,
"author": "nmorsman", "author": "nmorsman",
"version": "1.41.4", "version": "1.42.0",
"type": "module", "type": "module",
"module": "./dist/index.js", "module": "./dist/index.js",
"main": "./dist/index.js", "main": "./dist/index.js",
@@ -18,7 +18,7 @@
"types" "types"
], ],
"dependencies": { "dependencies": {
"@certd/basic": "^1.41.4", "@certd/basic": "^1.42.0",
"@peculiar/x509": "^1.11.0", "@peculiar/x509": "^1.11.0",
"asn1js": "^3.0.5", "asn1js": "^3.0.5",
"axios": "^1.9.0", "axios": "^1.9.0",
+4
View File
@@ -3,6 +3,10 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
**Note:** Version bump only for package @certd/basic
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
### Bug Fixes ### Bug Fixes
+1 -1
View File
@@ -1 +1 @@
21:25 19:21
+1 -1
View File
@@ -1,7 +1,7 @@
{ {
"name": "@certd/basic", "name": "@certd/basic",
"private": false, "private": false,
"version": "1.41.4", "version": "1.42.0",
"type": "module", "type": "module",
"main": "./dist/index.js", "main": "./dist/index.js",
"module": "./dist/index.js", "module": "./dist/index.js",
+6
View File
@@ -3,6 +3,12 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
### Features
* 通过插件配置懒加载依赖,动态加载第三方依赖包,精简安装镜像大小 ([01568ca](https://github.com/certd/certd/commit/01568ca1489069046b5a89ebdd4ced2f7f6ddf93))
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
**Note:** Version bump only for package @certd/pipeline **Note:** Version bump only for package @certd/pipeline
+3 -3
View File
@@ -1,7 +1,7 @@
{ {
"name": "@certd/pipeline", "name": "@certd/pipeline",
"private": false, "private": false,
"version": "1.41.4", "version": "1.42.0",
"type": "module", "type": "module",
"main": "./dist/index.js", "main": "./dist/index.js",
"module": "./dist/index.js", "module": "./dist/index.js",
@@ -21,8 +21,8 @@
"lint": "eslint --fix" "lint": "eslint --fix"
}, },
"dependencies": { "dependencies": {
"@certd/basic": "^1.41.4", "@certd/basic": "^1.42.0",
"@certd/plus-core": "^1.41.4", "@certd/plus-core": "^1.42.0",
"dayjs": "^1.11.7", "dayjs": "^1.11.7",
"lodash-es": "^4.17.21", "lodash-es": "^4.17.21",
"reflect-metadata": "^0.2.2" "reflect-metadata": "^0.2.2"
+4
View File
@@ -3,6 +3,10 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
**Note:** Version bump only for package @certd/lib-huawei
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
### Bug Fixes ### Bug Fixes
+1 -1
View File
@@ -1,7 +1,7 @@
{ {
"name": "@certd/lib-huawei", "name": "@certd/lib-huawei",
"private": false, "private": false,
"version": "1.41.4", "version": "1.42.0",
"main": "./dist/bundle.js", "main": "./dist/bundle.js",
"module": "./dist/bundle.js", "module": "./dist/bundle.js",
"types": "./dist/d/index.d.ts", "types": "./dist/d/index.d.ts",
+4
View File
@@ -3,6 +3,10 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
**Note:** Version bump only for package @certd/lib-iframe
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
### Bug Fixes ### Bug Fixes
+1 -1
View File
@@ -1,7 +1,7 @@
{ {
"name": "@certd/lib-iframe", "name": "@certd/lib-iframe",
"private": false, "private": false,
"version": "1.41.4", "version": "1.42.0",
"type": "module", "type": "module",
"main": "./dist/index.js", "main": "./dist/index.js",
"module": "./dist/index.js", "module": "./dist/index.js",
+4
View File
@@ -3,6 +3,10 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
**Note:** Version bump only for package @certd/jdcloud
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
### Bug Fixes ### Bug Fixes
+1 -1
View File
@@ -1,6 +1,6 @@
{ {
"name": "@certd/jdcloud", "name": "@certd/jdcloud",
"version": "1.41.4", "version": "1.42.0",
"description": "jdcloud openApi sdk", "description": "jdcloud openApi sdk",
"main": "./dist/bundle.js", "main": "./dist/bundle.js",
"module": "./dist/bundle.js", "module": "./dist/bundle.js",
+4
View File
@@ -3,6 +3,10 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
**Note:** Version bump only for package @certd/lib-k8s
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
**Note:** Version bump only for package @certd/lib-k8s **Note:** Version bump only for package @certd/lib-k8s
+2 -2
View File
@@ -1,7 +1,7 @@
{ {
"name": "@certd/lib-k8s", "name": "@certd/lib-k8s",
"private": false, "private": false,
"version": "1.41.4", "version": "1.42.0",
"type": "module", "type": "module",
"main": "./dist/index.js", "main": "./dist/index.js",
"module": "./dist/index.js", "module": "./dist/index.js",
@@ -21,7 +21,7 @@
"lint": "eslint --fix" "lint": "eslint --fix"
}, },
"dependencies": { "dependencies": {
"@certd/basic": "^1.41.4", "@certd/basic": "^1.42.0",
"@kubernetes/client-node": "0.21.0" "@kubernetes/client-node": "0.21.0"
}, },
"devDependencies": { "devDependencies": {
+13
View File
@@ -3,6 +3,19 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
### Features
* 通过插件配置懒加载依赖,动态加载第三方依赖包,精简安装镜像大小 ([01568ca](https://github.com/certd/certd/commit/01568ca1489069046b5a89ebdd4ced2f7f6ddf93))
### Performance Improvements
* 【破坏性更新】 证书压缩包不再生成文件存储,而是实时打包下载,证书申请插件不再输出certZip ([7cff1a9](https://github.com/certd/certd/commit/7cff1a98424120585205889874b3ef4956a30583))
* 优化用户体验,首次访问时弹出邮箱账号绑定用以初始化账号 ([608cc2a](https://github.com/certd/certd/commit/608cc2a81ff0b4872c9fe11ed9c9c0b4b90a12a3))
* 支持全自动匹配部署宝塔网站证书 ([4dff48e](https://github.com/certd/certd/commit/4dff48e807c32a7623ec9206cf39c88e88f89f6a))
* dns默认ipv4first ([194463b](https://github.com/certd/certd/commit/194463bea9e797315aa7a724f4b2930701570419))
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
**Note:** Version bump only for package @certd/lib-server **Note:** Version bump only for package @certd/lib-server
+8 -8
View File
@@ -1,6 +1,6 @@
{ {
"name": "@certd/lib-server", "name": "@certd/lib-server",
"version": "1.41.4", "version": "1.42.0",
"description": "midway with flyway, sql upgrade way ", "description": "midway with flyway, sql upgrade way ",
"private": false, "private": false,
"type": "module", "type": "module",
@@ -29,11 +29,11 @@
], ],
"license": "AGPL", "license": "AGPL",
"dependencies": { "dependencies": {
"@certd/acme-client": "^1.41.4", "@certd/acme-client": "^1.42.0",
"@certd/basic": "^1.41.4", "@certd/basic": "^1.42.0",
"@certd/pipeline": "^1.41.4", "@certd/pipeline": "^1.42.0",
"@certd/plugin-lib": "^1.41.4", "@certd/plugin-lib": "^1.42.0",
"@certd/plus-core": "^1.41.4", "@certd/plus-core": "^1.42.0",
"@midwayjs/cache": "3.14.0", "@midwayjs/cache": "3.14.0",
"@midwayjs/core": "3.20.11", "@midwayjs/core": "3.20.11",
"@midwayjs/i18n": "3.20.13", "@midwayjs/i18n": "3.20.13",
@@ -49,8 +49,6 @@
"typeorm": "^0.3.20" "typeorm": "^0.3.20"
}, },
"devDependencies": { "devDependencies": {
"mwts": "^1.3.0",
"mwtsc": "^1.4.0",
"@types/chai": "^4.3.12", "@types/chai": "^4.3.12",
"@types/mocha": "^10.0.6", "@types/mocha": "^10.0.6",
"@types/node": "^18", "@types/node": "^18",
@@ -62,6 +60,8 @@
"eslint-plugin-prettier": "^5.1.3", "eslint-plugin-prettier": "^5.1.3",
"esmock": "^2.7.5", "esmock": "^2.7.5",
"mocha": "^10.6.0", "mocha": "^10.6.0",
"mwts": "^1.3.0",
"mwtsc": "^1.4.0",
"prettier": "3.3.3", "prettier": "3.3.3",
"rimraf": "^5.0.5", "rimraf": "^5.0.5",
"ts-node": "^10.9.2", "ts-node": "^10.9.2",
@@ -1,9 +1,8 @@
import { ApplicationContext, Inject } from '@midwayjs/core'; import { ApplicationContext, Inject } from "@midwayjs/core";
import type {IMidwayContainer} from '@midwayjs/core'; import type { IMidwayContainer } from "@midwayjs/core";
import * as koa from '@midwayjs/koa'; import * as koa from "@midwayjs/koa";
import { Constants } from './constants.js'; import { Constants } from "./constants.js";
import { isEnterprise } from './mode.js'; import { isEnterprise } from "./mode.js";
export abstract class BaseController { export abstract class BaseController {
@Inject() @Inject()
@@ -41,7 +40,7 @@ export abstract class BaseController {
getUserId() { getUserId() {
const userId = this.ctx.user?.id; const userId = this.ctx.user?.id;
if (userId == null) { if (userId == null) {
throw new Error('Token已过期'); throw new Error("Token已过期");
} }
return userId; return userId;
} }
@@ -49,7 +48,7 @@ export abstract class BaseController {
getLoginUser() { getLoginUser() {
const user = this.ctx.user; const user = this.ctx.user;
if (user == null) { if (user == null) {
throw new Error('Token已过期'); throw new Error("Token已过期");
} }
return user; return user;
} }
@@ -61,73 +60,71 @@ export abstract class BaseController {
} }
} }
async getProjectId(permission:string) { async getProjectId(permission: string) {
if (!isEnterprise()) { if (!isEnterprise()) {
return undefined return undefined;
} }
let projectIdStr = this.ctx.headers["project-id"] as string; let projectIdStr = this.ctx.headers["project-id"] as string;
if (!projectIdStr){ if (!projectIdStr) {
projectIdStr = this.ctx.request.query["projectId"] as string; projectIdStr = this.ctx.request.query["projectId"] as string;
} }
if (!projectIdStr) { if (!projectIdStr) {
//这里必须抛异常,否则可能会有权限问题 //这里必须抛异常,否则可能会有权限问题
throw new Error("projectId 不能为空") throw new Error("projectId 不能为空");
} }
const userId = this.getUserId() const userId = this.getUserId();
const projectId = parseInt(projectIdStr) const projectId = parseInt(projectIdStr);
await this.checkProjectPermission(userId, projectId,permission) await this.checkProjectPermission(userId, projectId, permission);
return projectId; return projectId;
} }
async getProjectUserId(permission:string){ async getProjectUserId(permission: string) {
let userId = this.getUserId() let userId = this.getUserId();
const projectId = await this.getProjectId(permission) const projectId = await this.getProjectId(permission);
if(projectId){ if (projectId) {
userId = -1 // 企业管理模式下,用户id固定-1 userId = -1; // 企业管理模式下,用户id固定-1
} }
return { return {
projectId,userId projectId,
} userId,
};
} }
async getProjectUserIdRead(){ async getProjectUserIdRead() {
return await this.getProjectUserId("read") return await this.getProjectUserId("read");
} }
async getProjectUserIdWrite(){ async getProjectUserIdWrite() {
return await this.getProjectUserId("write") return await this.getProjectUserId("write");
} }
async getProjectUserIdAdmin(){ async getProjectUserIdAdmin() {
return await this.getProjectUserId("admin") return await this.getProjectUserId("admin");
} }
async checkProjectPermission(userId: number, projectId: number,permission:string) { async checkProjectPermission(userId: number, projectId: number, permission: string) {
const projectService:any = await this.applicationContext.getAsync("projectService"); const projectService: any = await this.applicationContext.getAsync("projectService");
await projectService.checkPermission({userId,projectId,permission}) await projectService.checkPermission({ userId, projectId, permission });
} }
/** /**
* *
* @param service * @param service
* @param id * @param id
*/ */
async checkOwner(service:any,id:number,permission:string,allowAdmin:boolean = false){ async checkOwner(service: any, id: number, permission: string, allowAdmin: boolean = false) {
let { projectId,userId } = await this.getProjectUserId(permission) const { projectId, userId } = await this.getProjectUserId(permission);
const authService:any = await this.applicationContext.getAsync("authService"); const authService: any = await this.applicationContext.getAsync("authService");
if (projectId) { if (projectId) {
await authService.checkProjectId(service, id, projectId); await authService.checkProjectId(service, id, projectId);
}else{ } else {
if (userId === Constants.systemUserId) {
if(userId === Constants.systemUserId){
//系统级别,不检查权限 //系统级别,不检查权限
}else{ } else {
if(allowAdmin){ if (allowAdmin) {
await authService.checkUserIdButAllowAdmin(this.ctx, service, id); await authService.checkUserIdButAllowAdmin(this.ctx, service, id);
}else{ } else {
await authService.checkUserId( service, id, userId); await authService.checkUserId(service, id, userId);
} }
} }
} }
return {projectId,userId} return { projectId, userId };
} }
} }
@@ -56,7 +56,7 @@ export abstract class BaseService<T> {
return dataSource.getRepository(entity); return dataSource.getRepository(entity);
} }
protected buildUserProjectQuery(userId: number, projectId?: number) { public buildUserProjectQuery(userId: number, projectId?: number) {
const query: { userId: number; projectId?: number; [key: string]: any } = { const query: { userId: number; projectId?: number; [key: string]: any } = {
userId, userId,
}; };
@@ -1,33 +1,33 @@
import { Column, Entity, PrimaryGeneratedColumn } from 'typeorm'; import { Column, Entity, PrimaryGeneratedColumn } from "typeorm";
/** /**
*/ */
@Entity('sys_settings') @Entity("sys_settings")
export class SysSettingsEntity { export class SysSettingsEntity {
@PrimaryGeneratedColumn() @PrimaryGeneratedColumn()
id: number; id: number;
@Column({ comment: 'key', length: 100 }) @Column({ comment: "key", length: 100 })
key: string; key: string;
@Column({ comment: '名称', length: 100 }) @Column({ comment: "名称", length: 100 })
title: string; title: string;
@Column({ name: 'setting', comment: '设置', length: 1024, nullable: true }) @Column({ name: "setting", comment: "设置", length: 1024, nullable: true })
setting: string; setting: string;
// public 公开读,私有写, private 私有读,私有写 // public 公开读,私有写, private 私有读,私有写
@Column({ name: 'access', comment: '访问权限' }) @Column({ name: "access", comment: "访问权限" })
access: string; access: string;
@Column({ @Column({
name: 'create_time', name: "create_time",
comment: '创建时间', comment: "创建时间",
default: () => 'CURRENT_TIMESTAMP', default: () => "CURRENT_TIMESTAMP",
}) })
createTime: Date; createTime: Date;
@Column({ @Column({
name: 'update_time', name: "update_time",
comment: '修改时间', comment: "修改时间",
default: () => 'CURRENT_TIMESTAMP', default: () => "CURRENT_TIMESTAMP",
}) })
updateTime: Date; updateTime: Date;
} }
@@ -1,19 +1,19 @@
import { cloneDeep } from 'lodash-es'; import { cloneDeep } from "lodash-es";
export class BaseSettings { export class BaseSettings {
static __key__: string; static __key__: string;
static __title__: string; static __title__: string;
static __access__ = 'private'; static __access__ = "private";
static getCacheKey() { static getCacheKey() {
return 'settings.' + this.__key__; return "settings." + this.__key__;
} }
} }
export class SysPublicSettings extends BaseSettings { export class SysPublicSettings extends BaseSettings {
static __key__ = 'sys.public'; static __key__ = "sys.public";
static __title__ = '系统公共设置'; static __title__ = "系统公共设置";
static __access__ = 'public'; static __access__ = "public";
registerEnabled = false; registerEnabled = false;
userValidTimeEnabled?: boolean = false; userValidTimeEnabled?: boolean = false;
@@ -34,19 +34,15 @@ export class SysPublicSettings extends BaseSettings {
aiChatEnabled = true; aiChatEnabled = true;
homePageEnabled = true; homePageEnabled = true;
//验证码是否开启 //验证码是否开启
captchaEnabled = false; captchaEnabled = false;
//验证码类型 //验证码类型
captchaType?: string; captchaType?: string;
captchaAddonId?: number; captchaAddonId?: number;
//流水线是否启用有效期 //流水线是否启用有效期
pipelineValidTimeEnabled?: boolean = false; pipelineValidTimeEnabled?: boolean = false;
//证书域名添加到监控 //证书域名添加到监控
certDomainAddToMonitorEnabled?: boolean = false; certDomainAddToMonitorEnabled?: boolean = false;
@@ -60,12 +56,15 @@ export class SysPublicSettings extends BaseSettings {
// 第三方OAuth配置 // 第三方OAuth配置
oauthEnabled?: boolean = false; oauthEnabled?: boolean = false;
oauthProviders: Record<string, { oauthProviders: Record<
type: string; string,
title: string; {
addonId: number; type: string;
icon?: string; title: string;
}> = {}; addonId: number;
icon?: string;
}
> = {};
notice?: string; notice?: string;
@@ -73,40 +72,37 @@ export class SysPublicSettings extends BaseSettings {
} }
export class SysPrivateSettings extends BaseSettings { export class SysPrivateSettings extends BaseSettings {
static __title__ = '系统私有设置'; static __title__ = "系统私有设置";
static __access__ = 'private'; static __access__ = "private";
static __key__ = 'sys.private'; static __key__ = "sys.private";
jwtKey?: string; jwtKey?: string;
encryptSecret?: string; encryptSecret?: string;
httpsProxy? = ''; httpsProxy? = "";
httpProxy? = ''; httpProxy? = "";
noProxy? = ''; noProxy? = "";
commonHeaders?: string = ''; commonHeaders?: string = "";
reverseProxies?: Record<string, string> = {}; reverseProxies?: Record<string, string> = {};
dnsResultOrder? = ''; dnsResultOrder? = "";
commonCnameEnabled?: boolean = true; commonCnameEnabled?: boolean = true;
httpRequestTimeout?: number = 30; httpRequestTimeout?: number = 30;
pipelineMaxRunningCount?: number; pipelineMaxRunningCount?: number;
environmentVars?: string = "";
environmentVars?: string = '';
acmeWalkFromAuthoritative?: boolean = true; acmeWalkFromAuthoritative?: boolean = true;
sms?: { sms?: {
type?: string; type?: string;
config?: any; config?: any;
} = { } = {
type: 'aliyun', type: "aliyun",
config: {}, config: {},
}; };
removeSecret() { removeSecret() {
const clone = cloneDeep(this); const clone = cloneDeep(this);
@@ -117,9 +113,9 @@ export class SysPrivateSettings extends BaseSettings {
} }
export class SysInstallInfo extends BaseSettings { export class SysInstallInfo extends BaseSettings {
static __title__ = '系统安装信息'; static __title__ = "系统安装信息";
static __key__ = 'sys.install'; static __key__ = "sys.install";
static __access__ = 'private'; static __access__ = "private";
installTime?: number; installTime?: number;
siteId?: string; siteId?: string;
bindUserId?: number; bindUserId?: number;
@@ -130,21 +126,20 @@ export class SysInstallInfo extends BaseSettings {
} }
export class SysLicenseInfo extends BaseSettings { export class SysLicenseInfo extends BaseSettings {
static __title__ = '授权许可信息'; static __title__ = "授权许可信息";
static __key__ = 'sys.license'; static __key__ = "sys.license";
static __access__ = 'private'; static __access__ = "private";
license?: string; license?: string;
} }
export type EmailTemplate = { export type EmailTemplate = {
addonId?: number; addonId?: number;
} };
export class SysEmailConf extends BaseSettings { export class SysEmailConf extends BaseSettings {
static __title__ = '邮箱配置'; static __title__ = "邮箱配置";
static __key__ = 'sys.email'; static __key__ = "sys.email";
static __access__ = 'private'; static __access__ = "private";
host: string; host: string;
port: number; port: number;
@@ -160,18 +155,18 @@ export class SysEmailConf extends BaseSettings {
sender: string; sender: string;
usePlus?: boolean; usePlus?: boolean;
templates:{ templates: {
registerCode?: EmailTemplate, registerCode?: EmailTemplate;
forgotPassword?: EmailTemplate, forgotPassword?: EmailTemplate;
pipelineResult?: EmailTemplate, pipelineResult?: EmailTemplate;
common?: EmailTemplate, common?: EmailTemplate;
} };
} }
export class SysSiteInfo extends BaseSettings { export class SysSiteInfo extends BaseSettings {
static __title__ = '站点信息'; static __title__ = "站点信息";
static __key__ = 'sys.site'; static __key__ = "sys.site";
static __access__ = 'public'; static __access__ = "public";
title?: string; title?: string;
slogan?: string; slogan?: string;
logo?: string; logo?: string;
@@ -179,9 +174,9 @@ export class SysSiteInfo extends BaseSettings {
} }
export class SysSecretBackup extends BaseSettings { export class SysSecretBackup extends BaseSettings {
static __title__ = '密钥信息备份'; static __title__ = "密钥信息备份";
static __key__ = 'sys.secret.backup'; static __key__ = "sys.secret.backup";
static __access__ = 'private'; static __access__ = "private";
siteId?: string; siteId?: string;
encryptSecret?: string; encryptSecret?: string;
} }
@@ -190,9 +185,9 @@ export class SysSecretBackup extends BaseSettings {
* *
*/ */
export class SysSecret extends BaseSettings { export class SysSecret extends BaseSettings {
static __title__ = '密钥信息'; static __title__ = "密钥信息";
static __key__ = 'sys.secret'; static __key__ = "sys.secret";
static __access__ = 'private'; static __access__ = "private";
siteId?: string; siteId?: string;
encryptSecret?: string; encryptSecret?: string;
} }
@@ -215,9 +210,9 @@ export type MenuItem = {
children?: MenuItem[]; children?: MenuItem[];
}; };
export class SysHeaderMenus extends BaseSettings { export class SysHeaderMenus extends BaseSettings {
static __title__ = '顶部菜单'; static __title__ = "顶部菜单";
static __key__ = 'sys.header.menus'; static __key__ = "sys.header.menus";
static __access__ = 'public'; static __access__ = "public";
menus: MenuItem[]; menus: MenuItem[];
} }
@@ -228,9 +223,9 @@ export type PaymentItem = {
}; };
export class SysPaymentSetting extends BaseSettings { export class SysPaymentSetting extends BaseSettings {
static __title__ = '支付设置'; static __title__ = "支付设置";
static __key__ = 'sys.payment'; static __key__ = "sys.payment";
static __access__ = 'private'; static __access__ = "private";
yizhifu?: PaymentItem = { enabled: false }; yizhifu?: PaymentItem = { enabled: false };
@@ -240,9 +235,9 @@ export class SysPaymentSetting extends BaseSettings {
} }
export class SysSuiteSetting extends BaseSettings { export class SysSuiteSetting extends BaseSettings {
static __title__ = '套餐设置'; static __title__ = "套餐设置";
static __key__ = 'sys.suite'; static __key__ = "sys.suite";
static __access__ = 'private'; static __access__ = "private";
enabled: boolean = false; enabled: boolean = false;
@@ -257,26 +252,25 @@ export class SysSuiteSetting extends BaseSettings {
} }
export class SysAutoFixSetting extends BaseSettings { export class SysAutoFixSetting extends BaseSettings {
static __title__ = '自动修复记录'; static __title__ = "自动修复记录";
static __key__ = 'sys.auto.fix'; static __key__ = "sys.auto.fix";
static __access__ = 'private'; static __access__ = "private";
fixed: Record<string, boolean> = {}; fixed: Record<string, boolean> = {};
} }
export type SiteHidden = { export type SiteHidden = {
enabled: boolean; enabled: boolean;
openPath?: string; openPath?: string;
//md5 hash 两次后保存 //md5 hash 两次后保存
openPassword?: string; openPassword?: string;
autoHiddenTimes?: number; autoHiddenTimes?: number;
hiddenOpenApi?: boolean hiddenOpenApi?: boolean;
}; };
export class SysSafeSetting extends BaseSettings { export class SysSafeSetting extends BaseSettings {
static __title__ = '站点安全设置'; static __title__ = "站点安全设置";
static __key__ = 'sys.safe'; static __key__ = "sys.safe";
static __access__ = 'private'; static __access__ = "private";
// 站点隐藏 // 站点隐藏
hidden: SiteHidden = { hidden: SiteHidden = {
@@ -3,6 +3,10 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
**Note:** Version bump only for package @certd/midway-flyway-js
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
### Bug Fixes ### Bug Fixes
+1 -1
View File
@@ -1,6 +1,6 @@
{ {
"name": "@certd/midway-flyway-js", "name": "@certd/midway-flyway-js",
"version": "1.41.4", "version": "1.42.0",
"description": "midway with flyway, sql upgrade way ", "description": "midway with flyway, sql upgrade way ",
"private": false, "private": false,
"type": "module", "type": "module",
@@ -3,6 +3,10 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
**Note:** Version bump only for package @certd/plugin-cert
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
**Note:** Version bump only for package @certd/plugin-cert **Note:** Version bump only for package @certd/plugin-cert
+2 -2
View File
@@ -1,7 +1,7 @@
{ {
"name": "@certd/plugin-cert", "name": "@certd/plugin-cert",
"private": false, "private": false,
"version": "1.41.4", "version": "1.42.0",
"type": "module", "type": "module",
"main": "./dist/index.js", "main": "./dist/index.js",
"types": "./dist/index.d.ts", "types": "./dist/index.d.ts",
@@ -20,7 +20,7 @@
"lint": "eslint --fix" "lint": "eslint --fix"
}, },
"dependencies": { "dependencies": {
"@certd/plugin-lib": "^1.41.4" "@certd/plugin-lib": "^1.42.0"
}, },
"devDependencies": { "devDependencies": {
"@types/chai": "^4.3.12", "@types/chai": "^4.3.12",
+15
View File
@@ -3,6 +3,21 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
### Bug Fixes
* 修复jdk证书格式的问题 ([260f5ae](https://github.com/certd/certd/commit/260f5ae777b83493b0c578fe30fd00ec0c873226))
### Features
* 通过插件配置懒加载依赖,动态加载第三方依赖包,精简安装镜像大小 ([01568ca](https://github.com/certd/certd/commit/01568ca1489069046b5a89ebdd4ced2f7f6ddf93))
### Performance Improvements
* 【破坏性更新】 证书压缩包不再生成文件存储,而是实时打包下载,证书申请插件不再输出certZip ([7cff1a9](https://github.com/certd/certd/commit/7cff1a98424120585205889874b3ef4956a30583))
* 新增橙域网络(asia-isp) CDN证书部署插件 ([b48831e](https://github.com/certd/certd/commit/b48831e60b0059bef7ef9a34ab61c9dd2f684641))
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
**Note:** Version bump only for package @certd/plugin-lib **Note:** Version bump only for package @certd/plugin-lib
+5 -5
View File
@@ -1,7 +1,7 @@
{ {
"name": "@certd/plugin-lib", "name": "@certd/plugin-lib",
"private": false, "private": false,
"version": "1.41.4", "version": "1.42.0",
"type": "module", "type": "module",
"main": "./dist/index.js", "main": "./dist/index.js",
"types": "./dist/index.d.ts", "types": "./dist/index.d.ts",
@@ -17,9 +17,9 @@
"lint": "eslint --fix" "lint": "eslint --fix"
}, },
"dependencies": { "dependencies": {
"@certd/acme-client": "^1.41.4", "@certd/acme-client": "^1.42.0",
"@certd/basic": "^1.41.4", "@certd/basic": "^1.42.0",
"@certd/pipeline": "^1.41.4", "@certd/pipeline": "^1.42.0",
"dayjs": "^1.11.7", "dayjs": "^1.11.7",
"jszip": "^3.10.1", "jszip": "^3.10.1",
"lodash-es": "^4.17.21", "lodash-es": "^4.17.21",
@@ -27,7 +27,6 @@
"punycode.js": "^2.3.1" "punycode.js": "^2.3.1"
}, },
"devDependencies": { "devDependencies": {
"rimraf": "^5.0.5",
"@types/chai": "^4.3.12", "@types/chai": "^4.3.12",
"@types/mocha": "^10.0.6", "@types/mocha": "^10.0.6",
"@typescript-eslint/eslint-plugin": "^8.26.1", "@typescript-eslint/eslint-plugin": "^8.26.1",
@@ -41,6 +40,7 @@
"mocha": "^10.6.0", "mocha": "^10.6.0",
"node-forge": "^1.3.1", "node-forge": "^1.3.1",
"prettier": "3.3.3", "prettier": "3.3.3",
"rimraf": "^5.0.5",
"ts-node": "^10.9.2", "ts-node": "^10.9.2",
"tslib": "^2.8.1", "tslib": "^2.8.1",
"typescript": "^5.4.2" "typescript": "^5.4.2"
+9
View File
@@ -3,6 +3,15 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
### Performance Improvements
* 【破坏性更新】 证书压缩包不再生成文件存储,而是实时打包下载,证书申请插件不再输出certZip ([7cff1a9](https://github.com/certd/certd/commit/7cff1a98424120585205889874b3ef4956a30583))
* 优化用户体验,首次访问时弹出邮箱账号绑定用以初始化账号 ([608cc2a](https://github.com/certd/certd/commit/608cc2a81ff0b4872c9fe11ed9c9c0b4b90a12a3))
* **passkey:** passkey支持多域名rpid ([79f6586](https://github.com/certd/certd/commit/79f65868ca0f5162bbc2f935ce89abc28011d816))
* **plugin:** 在线插件编辑支持配置第三方依赖和插件依赖 ([635f069](https://github.com/certd/certd/commit/635f069012d4193cfb7cb051c96e28eec1247ca2))
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
### Bug Fixes ### Bug Fixes
+3 -3
View File
@@ -1,6 +1,6 @@
{ {
"name": "@certd/ui-client", "name": "@certd/ui-client",
"version": "1.41.4", "version": "1.42.0",
"private": true, "private": true,
"scripts": { "scripts": {
"dev": "vite --open", "dev": "vite --open",
@@ -105,8 +105,8 @@
"zod-defaults": "^0.1.3" "zod-defaults": "^0.1.3"
}, },
"devDependencies": { "devDependencies": {
"@certd/lib-iframe": "^1.41.4", "@certd/lib-iframe": "^1.42.0",
"@certd/pipeline": "^1.41.4", "@certd/pipeline": "^1.42.0",
"@rollup/plugin-commonjs": "^25.0.7", "@rollup/plugin-commonjs": "^25.0.7",
"@rollup/plugin-node-resolve": "^15.2.3", "@rollup/plugin-node-resolve": "^15.2.3",
"@types/chai": "^4.3.12", "@types/chai": "^4.3.12",
@@ -26,9 +26,10 @@ export default {
store: "Store", store: "Store",
version: "Version", version: "Version",
pluginDependencies: "Plugin Dependencies", pluginDependencies: "Plugin Dependencies",
pluginDependenciesHelper: "Format: [author/]pluginName[:version]. Required plugins must be installed first", pluginDependenciesHelper:
"Format: pluginType:pluginName, use * for version\nSupported: plugin:name, access:name, notification:name, dnsProvider:name, addon:subtype:name\nExample: access:AliyunAccess, plugin:DeployToAliyunCDN",
thirdPartyDependencies: "Third-party Dependencies", thirdPartyDependencies: "Third-party Dependencies",
thirdPartyDependenciesHelper: "Format: npmPackageName: version. Auto-installed at runtime", thirdPartyDependenciesHelper: "Format: npmPackageName: version. Auto-installed at runtime\nExample: aliyun-sdk: ^1.0.0",
editableRunStrategy: "Editable Run Strategy", editableRunStrategy: "Editable Run Strategy",
editable: "Editable", editable: "Editable",
notEditable: "Not Editable", notEditable: "Not Editable",
@@ -70,7 +70,7 @@ export default {
confirmToggleStatus: "确定要{action}吗?", confirmToggleStatus: "确定要{action}吗?",
batchDelete: "批量删除", batchDelete: "批量删除",
sourcee: "来源", sourcee: "来源",
clickToToggle: "点击切换启用/禁用", clickToToggle: "点击启用/禁用",
nickName: "昵称", nickName: "昵称",
avatar: "头像", avatar: "头像",
expires: "过期", expires: "过期",
@@ -26,9 +26,9 @@ export default {
store: "市场", store: "市场",
version: "版本", version: "版本",
pluginDependencies: "插件依赖", pluginDependencies: "插件依赖",
pluginDependenciesHelper: "格式: [作者/]插件名[:版本],需先安装依赖插件", pluginDependenciesHelper: "格式: 插件类型:插件名,版本号填 *\n支持: plugin:name、access:name、notification:name、dnsProvider:name、addon:subtype:name\n示例: access:AliyunAccess, plugin:DeployToAliyunCDN",
thirdPartyDependencies: "第三方依赖", thirdPartyDependencies: "第三方依赖",
thirdPartyDependenciesHelper: "格式: npm包名: 版本号,运行时自动安装", thirdPartyDependenciesHelper: "格式: npm包名: 版本号,运行时自动安装\n示例: aliyun-sdk: ^1.0.0",
editableRunStrategy: "可编辑运行策略", editableRunStrategy: "可编辑运行策略",
editable: "可编辑", editable: "可编辑",
notEditable: "不可编辑", notEditable: "不可编辑",
@@ -31,6 +31,13 @@ export function useFormDialog() {
crudOptions: { crudOptions: {
columns: req.columns, columns: req.columns,
form: { form: {
labelCol: {
// @ts-ignore
span: null,
style: {
width: "100px",
},
},
initialForm: req.initialForm, initialForm: req.initialForm,
wrapper: warpper, wrapper: warpper,
async afterSubmit() {}, async afterSubmit() {},
@@ -44,7 +51,7 @@ export function useFormDialog() {
}; };
} }
const { crudOptions } = createCrudOptions(); const { crudOptions } = createCrudOptions();
await openCrudFormDialog({ crudOptions }); return await openCrudFormDialog({ crudOptions });
} }
return { return {
openFormDialog, openFormDialog,
@@ -16,8 +16,8 @@
</div> </div>
</template> </template>
<script> <script lang="ts">
import { defineComponent, reactive, ref, watch, inject } from "vue"; import { defineComponent, reactive, ref, watch, inject, onMounted } from "vue";
import CertAccessModal from "./access/index.vue"; import CertAccessModal from "./access/index.vue";
import { createAccessApi } from "../api"; import { createAccessApi } from "../api";
import { message } from "ant-design-vue"; import { message } from "ant-design-vue";
@@ -55,6 +55,10 @@ export default defineComponent({
type: Boolean, type: Boolean,
default: false, default: false,
}, },
defaultSelect: {
type: Boolean,
default: false,
},
}, },
emits: ["update:modelValue", "change", "selectedChange"], emits: ["update:modelValue", "change", "selectedChange"],
setup(props, ctx) { setup(props, ctx) {
@@ -158,12 +162,43 @@ export default defineComponent({
}, },
}); });
async function selectFirst(clearCurrent = false) {
if (!clearCurrent && props.modelValue) {
return;
}
const searchForm = projectStore.getSearchForm();
const query: any = {
query: {
type: props.type,
...searchForm,
},
page: { page: 1, pageSize: 1 },
sort: { prop: "id", order: "ascending" },
};
if (props.subtype) {
query.query.subtype = props.subtype;
}
const res = await api.GetList(query);
const records = res?.records || [];
if (records.length > 0) {
await emitValue(records[0].id);
}
}
onMounted(async () => {
if (!props.defaultSelect) {
return;
}
await selectFirst();
});
return { return {
clear, clear,
target, target,
selectedId, selectedId,
providerDefine, providerDefine,
chooseForm, chooseForm,
selectFirst,
}; };
}, },
}); });
@@ -18,6 +18,10 @@ defineProps<{
showButton: boolean; showButton: boolean;
}>(); }>();
const emit = defineEmits<{
(e: "close"): void;
}>();
let passwordFormRef = ref(); let passwordFormRef = ref();
type OpenOptions = { type OpenOptions = {
@@ -68,8 +72,8 @@ const passwordFormOptions: CrudOptions = {
}, },
async afterSubmit() { async afterSubmit() {
const formData = passwordFormRef.value?.getFormData?.(); const formData = passwordFormRef.value?.getFormData?.();
const message = formData?.init ? t("authentication.initPasswordSuccessMessage") : t("authentication.successMessage"); const msg = formData?.init ? t("authentication.initPasswordSuccessMessage") : t("authentication.successMessage");
notification.success({ message }); notification.success({ message: msg });
}, },
}, },
columns: { columns: {
@@ -84,6 +88,7 @@ const passwordFormOptions: CrudOptions = {
title: t("authentication.oldPassword"), title: t("authentication.oldPassword"),
type: "password", type: "password",
form: { form: {
//@ts-ignore
show: compute(({ form }) => form.init !== true), show: compute(({ form }) => form.init !== true),
rules: [{ required: true, message: t("authentication.oldPasswordRequired") }], rules: [{ required: true, message: t("authentication.oldPasswordRequired") }],
}, },
@@ -118,16 +123,18 @@ const passwordFormOptions: CrudOptions = {
async function open(opts: OpenOptions = {}) { async function open(opts: OpenOptions = {}) {
const formOptions = buildFormOptions(passwordFormOptions); const formOptions = buildFormOptions(passwordFormOptions);
formOptions.newInstance = true; // formOptions.newInstance = true;
if (opts.init) { if (opts.init) {
formOptions.wrapper.title = t("authentication.initPasswordTitle"); formOptions.wrapper.title = t("authentication.initPasswordTitle");
} }
formOptions.wrapper.onClosed = () => {
emit("close");
};
passwordFormRef.value = await openDialog(formOptions); passwordFormRef.value = await openDialog(formOptions);
passwordFormRef.value.setFormData({ passwordFormRef.value.setFormData({
init: opts.init === true, init: opts.init === true,
password: opts.password || "", password: opts.password || "",
}); });
console.log(passwordFormRef.value);
} }
const scope = ref({ const scope = ref({
@@ -107,6 +107,10 @@
<div class="passkey-info"> <div class="passkey-info">
<div class="passkey-name">{{ passkey.deviceName }}</div> <div class="passkey-name">{{ passkey.deviceName }}</div>
<div class="passkey-meta flex items-center"> <div class="passkey-meta flex items-center">
<span class="meta-item flex items-center">
<fs-icon icon="ion:globe-outline" class="meta-icon" />
{{ passkey.rpId || "-" }}
</span>
<span class="meta-item flex items-center"> <span class="meta-item flex items-center">
<fs-icon icon="ion:calendar-outline" class="meta-icon" /> <fs-icon icon="ion:calendar-outline" class="meta-icon" />
{{ formatDate(passkey.registeredAt) }} {{ formatDate(passkey.registeredAt) }}
@@ -454,6 +458,8 @@ onMounted(async () => {
} }
.card-header { .card-header {
background: linear-gradient(145deg, #1e1e1e, #252525);
.header-bg-gradient { .header-bg-gradient {
background: rgba(255, 255, 255, 0.04); background: rgba(255, 255, 255, 0.04);
opacity: 1; opacity: 1;
@@ -472,6 +478,7 @@ onMounted(async () => {
.detail-tag { .detail-tag {
background: #3b3b3b; background: #3b3b3b;
border-color: rgba(255, 255, 255, 0.12);
color: #e5e5e5; color: #e5e5e5;
.tag-icon { .tag-icon {
@@ -480,6 +487,23 @@ onMounted(async () => {
} }
} }
.card-title {
border-bottom-color: rgba(255, 255, 255, 0.1);
}
.binding-icon {
background: linear-gradient(135deg, rgba(102, 126, 234, 0.22) 0%, rgba(160, 120, 234, 0.22) 100%);
}
.passkey-icon {
background: linear-gradient(135deg, rgba(17, 153, 142, 0.22) 0%, rgba(56, 239, 125, 0.22) 100%);
}
.binding-icon .icon,
.passkey-icon .icon {
color: rgba(255, 255, 255, 0.7);
}
.bindings-list { .bindings-list {
.binding-item { .binding-item {
background: #2d2d2d; background: #2d2d2d;
@@ -2,22 +2,110 @@
<fs-page class="home—index bg-neutral-100 dark:bg-black"> <fs-page class="home—index bg-neutral-100 dark:bg-black">
<!-- <page-content />--> <!-- <page-content />-->
<dashboard-user /> <dashboard-user />
<change-password-button ref="changePasswordButtonRef" :show-button="false"></change-password-button> <change-password-button ref="changePasswordButtonRef" :show-button="false" @close="checkAndSetupAccount"></change-password-button>
</fs-page> </fs-page>
</template> </template>
<script lang="ts" setup> <script lang="tsx" setup>
import DashboardUser from "./dashboard/index.vue"; import DashboardUser from "./dashboard/index.vue";
import { useUserStore } from "/@/store/user"; import { useUserStore } from "/@/store/user";
import ChangePasswordButton from "/@/views/certd/mine/change-password-button.vue"; import ChangePasswordButton from "/@/views/certd/mine/change-password-button.vue";
import { onMounted, ref } from "vue"; import { onMounted, ref } from "vue";
import { Modal } from "ant-design-vue"; import { Modal, notification } from "ant-design-vue";
import { useI18n } from "/src/locales"; import { useI18n } from "/src/locales";
import { request } from "/@/api/service";
import { useFormDialog } from "/@/use/use-dialog";
const { t } = useI18n(); const { t } = useI18n();
const { openFormDialog } = useFormDialog();
const userStore = useUserStore(); const userStore = useUserStore();
const changePasswordButtonRef = ref(); const changePasswordButtonRef = ref();
const emailFormWrapperRef = ref<any>();
const validateEmailConfirm = async (_rule: any, value: string) => {
if (!value) {
return;
}
const formData = emailFormWrapperRef.value?.getFormData?.();
if (formData && value !== formData.email) {
throw new Error("两次输入的邮箱地址不一致");
}
};
async function checkAndSetupAccount() {
try {
const userInfo = userStore.getUserInfo as any;
if (!userInfo.needInitAccount) {
return;
}
if (userInfo.email) {
await request({
url: "/mine/accountInit",
method: "post",
});
return;
}
emailFormWrapperRef.value = await openFormDialog({
title: "绑定邮箱",
wrapper: {
width: 560,
},
initialForm: { email: "", emailConfirm: "" },
async onSubmit(form: any) {
await request({
url: "/mine/accountInit",
method: "post",
data: { email: form.email },
});
notification.success({
message: "邮箱绑定成功",
});
},
body: () => {
return <a-alert class="mb-4" message="为保证用户体验,请先绑定邮箱,初始化您的账号" type="success" show-icon></a-alert>;
},
columns: {
email: {
title: "邮箱",
type: "text",
form: {
col: { span: 24 },
component: {
placeholder: "请输入邮箱地址",
},
helper: "请输入您的邮箱",
rules: [
{ required: true, message: "请输入邮箱地址" },
{ type: "email", message: "请输入有效的邮箱地址" },
],
},
},
emailConfirm: {
title: "确认邮箱",
type: "text",
form: {
col: { span: 24 },
component: {
placeholder: "请再次输入邮箱地址",
},
helper: "请再次输入邮箱,以确认邮箱地址无误",
rules: [
{ required: true, message: "请再次输入邮箱地址" },
{ type: "email", message: "请输入有效的邮箱地址" },
{ validator: validateEmailConfirm, trigger: "blur" },
],
},
},
},
});
} catch (e) {
console.error("AcmeAccount setup failed:", e);
}
}
onMounted(() => { onMounted(() => {
if (userStore.getUserInfo.isWeak === true) { if (userStore.getUserInfo.isWeak === true) {
Modal.info({ Modal.info({
@@ -30,6 +118,9 @@ onMounted(() => {
}, },
okText: t("authentication.changeNow"), okText: t("authentication.changeNow"),
}); });
} else {
//
checkAndSetupAccount();
} }
}); });
</script> </script>
@@ -450,7 +450,7 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
}, },
}, },
disabled: { disabled: {
title: t("certd.enableDisable"), title: t("certd.clickToToggle"),
type: "dict-switch", type: "dict-switch",
dict: dict({ dict: dict({
data: [ data: [
+24
View File
@@ -3,6 +3,30 @@
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this file.
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines. See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
# [1.42.0](https://github.com/certd/certd/compare/v1.41.4...v1.42.0) (2026-07-05)
### Bug Fixes
* 修复telegram - 符号转义问题 ([d5882f1](https://github.com/certd/certd/commit/d5882f16bedb09baf09ace92049b02872620f5dc))
* **aliyun:** 修复阿里云CDN/DCDN根据证书自动匹配不到证书的bug ([1ae185d](https://github.com/certd/certd/commit/1ae185d0bc356f4678bc38ca0582ce3396f82ebe))
### Features
* 通过插件配置懒加载依赖,动态加载第三方依赖包,精简安装镜像大小 ([01568ca](https://github.com/certd/certd/commit/01568ca1489069046b5a89ebdd4ced2f7f6ddf93))
### Performance Improvements
* 阿里云ESA证书部署支持SaaS模式 ([82276b5](https://github.com/certd/certd/commit/82276b53a8474a18a3d0237050907c994fc748f0))
* 【破坏性更新】 证书压缩包不再生成文件存储,而是实时打包下载,证书申请插件不再输出certZip ([7cff1a9](https://github.com/certd/certd/commit/7cff1a98424120585205889874b3ef4956a30583))
* 火山引擎点播插件支持部署到自定义源站域名 ([095791c](https://github.com/certd/certd/commit/095791cdc2b7c1f4b913b634643afec5e30fe9b0))
* 新增橙域网络(asia-isp) CDN证书部署插件 ([b48831e](https://github.com/certd/certd/commit/b48831e60b0059bef7ef9a34ab61c9dd2f684641))
* 优化阿里云API网关增加翻页查询 ([ed58ae3](https://github.com/certd/certd/commit/ed58ae3c5339e4a0238a92acfe7ea6d2f566ea28))
* 优化用户体验,首次访问时弹出邮箱账号绑定用以初始化账号 ([608cc2a](https://github.com/certd/certd/commit/608cc2a81ff0b4872c9fe11ed9c9c0b4b90a12a3))
* 优化ACME账号字段的选择提示 ([bfd3cac](https://github.com/certd/certd/commit/bfd3cacc687fc5cbc3cb2ca3cadbc140de300dc2))
* 支持全自动匹配部署宝塔网站证书 ([4dff48e](https://github.com/certd/certd/commit/4dff48e807c32a7623ec9206cf39c88e88f89f6a))
* **cert-plugin:** 调整更新天数自动减半逻辑,仅7天ip证书生效,其他情况下不减半 ([56e5524](https://github.com/certd/certd/commit/56e5524a0f4af3645d70bc3b3ec750b45ba8de10))
* **passkey:** passkey支持多域名rpid ([79f6586](https://github.com/certd/certd/commit/79f65868ca0f5162bbc2f935ce89abc28011d816))
## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14) ## [1.41.4](https://github.com/certd/certd/compare/v1.41.3...v1.41.4) (2026-06-14)
### Bug Fixes ### Bug Fixes
@@ -0,0 +1,6 @@
ALTER TABLE `sys_passkey` ADD COLUMN `rp_id` varchar(256) NULL;
DROP INDEX `index_passkey_passkey_id` ON `sys_passkey`;
ALTER TABLE `sys_passkey` ADD UNIQUE INDEX `index_passkey_passkey_id` (`passkey_id`);
@@ -0,0 +1,6 @@
ALTER TABLE "sys_passkey" ADD COLUMN "rp_id" varchar(256) NULL;
DROP INDEX "index_passkey_passkey_id";
CREATE UNIQUE INDEX "index_passkey_passkey_id" ON "sys_passkey" ("passkey_id");
@@ -0,0 +1,6 @@
ALTER TABLE "sys_passkey" ADD COLUMN "rp_id" varchar(256) NULL;
DROP INDEX "index_passkey_passkey_id";
CREATE UNIQUE INDEX "index_passkey_passkey_id" ON "sys_passkey" ("passkey_id");
@@ -74,7 +74,7 @@ input:
credentials链接,然后点击编辑按钮,查看Secret key和HMAC key credentials链接,然后点击编辑按钮,查看Secret key和HMAC key
litessl:[litesslEAB页面](https://freessl.cn/automation/eab-manager),然后点击新增EAB litessl:[litesslEAB页面](https://freessl.cn/automation/eab-manager),然后点击新增EAB
required: false required: true
encrypt: true encrypt: true
mergeScript: |2- mergeScript: |2-
@@ -92,7 +92,7 @@ input:
title: EAB HMAC Key title: EAB HMAC Key
component: component:
placeholder: 需要EAB的颁发机构生成账号时填写 placeholder: 需要EAB的颁发机构生成账号时填写
required: false required: true
encrypt: true encrypt: true
mergeScript: |2- mergeScript: |2-
@@ -32,6 +32,7 @@ input:
}), }),
} }
} }
template: false template: false
required: false required: false
order: 0 order: 0
@@ -109,11 +110,11 @@ input:
}) })
}, },
} }
helper: 请选择要部署证书的站点 helper: 请选择要部署证书的站点
order: 0 order: 0
saasDomainIds: saasDomainIds:
title: SaaS域名 title: SaaS域名
helper: 请选择要部署证书的SaaS域名(SaaS证书模式下必选)
component: component:
name: remote-select name: remote-select
vModel: value vModel: value
@@ -132,16 +133,18 @@ input:
required: false required: false
mergeScript: |2- mergeScript: |2-
return { return {
show: ctx.compute(({form})=>{ show: ctx.compute(({form})=>{
return form.deployMode === 'saas' return form.deployMode === 'saas'
}), }),
component:{ component:{
form: ctx.compute(({form})=>{ form: ctx.compute(({form})=>{
return form return form
}) })
}, },
} }
helper: 请选择要部署证书的SaaS域名(SaaS证书模式下必选)
order: 0 order: 0
certLimit: certLimit:
title: 免费证书数量限制 title: 免费证书数量限制
@@ -155,4 +158,4 @@ input:
output: {} output: {}
pluginType: deploy pluginType: deploy
type: builtIn type: builtIn
scriptFilePath: /plugins/plugin-aliyun/plugin/deploy-to-esa/index.js scriptFilePath: /plugins/plugin-aliyun/plugin/deploy-to-esa/index.js
@@ -0,0 +1,52 @@
showRunStrategy: false
default:
strategy:
runStrategy: 1
name: BaotaAutoDeploySiteCert
title: 宝塔-全自动部署
icon: svg:icon-bt
group: panel
desc: 根据证书域名自动匹配宝塔站点,全自动部署SSL证书。新增加速域名自动感知,自动新增部署
runStrategy: 0
needPlus: true
input:
cert:
title: 域名证书
helper: 请选择前置任务输出的域名证书
component:
name: output-selector
from:
- ':cert:'
required: true
order: 0
certDomains:
title: 当前证书域名
component:
name: cert-domains-getter
mergeScript: |2-
return {
component:{
inputKey: ctx.compute(({form})=>{
return form.cert
}),
}
}
template: false
required: false
order: 0
accessId:
title: 宝塔授权
helper: 将自动查找证书匹配的站点,检查证书即将过期的站点并更新
component:
name: access-selector
type: baota
required: true
order: 0
output:
deployedList:
title: 已部署过的站点
pluginType: deploy
type: builtIn
scriptFilePath: /plugins/plugin-plus/baota/plugins/plugin-deploy-automatch.js
@@ -314,6 +314,7 @@ input:
component: component:
name: access-selector name: access-selector
type: acmeAccount type: acmeAccount
defaultSelect: true
required: false required: false
helper: |- helper: |-
直接本地生成,无需外部注册 直接本地生成,无需外部注册
+18 -19
View File
@@ -1,6 +1,6 @@
{ {
"name": "@certd/ui-server", "name": "@certd/ui-server",
"version": "1.41.4", "version": "1.42.0",
"description": "fast-server base midway", "description": "fast-server base midway",
"private": true, "private": true,
"type": "module", "type": "module",
@@ -41,20 +41,20 @@
"lint1": "eslint --fix" "lint1": "eslint --fix"
}, },
"dependencies": { "dependencies": {
"@certd/acme-client": "^1.41.4", "@certd/acme-client": "^1.42.0",
"@certd/basic": "^1.41.4", "@certd/basic": "^1.42.0",
"@certd/commercial-core": "^1.41.4", "@certd/commercial-core": "^1.42.0",
"@certd/cv4pve-api-javascript": "^8.4.2", "@certd/cv4pve-api-javascript": "^8.4.2",
"@certd/jdcloud": "^1.41.4", "@certd/jdcloud": "^1.42.0",
"@certd/lib-huawei": "^1.41.4", "@certd/lib-huawei": "^1.42.0",
"@certd/lib-k8s": "^1.41.4", "@certd/lib-k8s": "^1.42.0",
"@certd/lib-server": "^1.41.4", "@certd/lib-server": "^1.42.0",
"@certd/midway-flyway-js": "^1.41.4", "@certd/midway-flyway-js": "^1.42.0",
"@certd/pipeline": "^1.41.4", "@certd/pipeline": "^1.42.0",
"@certd/plugin-cert": "^1.41.4", "@certd/plugin-cert": "^1.42.0",
"@certd/plugin-lib": "^1.41.4", "@certd/plugin-lib": "^1.42.0",
"@certd/plugin-plus": "^1.41.4", "@certd/plugin-plus": "^1.42.0",
"@certd/plus-core": "^1.41.4", "@certd/plus-core": "^1.42.0",
"@koa/cors": "^5.0.0", "@koa/cors": "^5.0.0",
"@midwayjs/bootstrap": "3.20.11", "@midwayjs/bootstrap": "3.20.11",
"@midwayjs/cache": "3.14.0", "@midwayjs/cache": "3.14.0",
@@ -92,6 +92,7 @@
"log4js": "^6.9.1", "log4js": "^6.9.1",
"lru-cache": "^11.0.1", "lru-cache": "^11.0.1",
"mitt": "^3.0.1", "mitt": "^3.0.1",
"mwtsc": "^1.15.1",
"mysql2": "^3.14.0", "mysql2": "^3.14.0",
"nanoid": "^5.0.7", "nanoid": "^5.0.7",
"node-forge": "^1.3.1", "node-forge": "^1.3.1",
@@ -115,11 +116,9 @@
"uuid": "^10.0.0", "uuid": "^10.0.0",
"wechatpay-node-v3": "^2.2.1", "wechatpay-node-v3": "^2.2.1",
"whoiser": "2.0.0-beta.10", "whoiser": "2.0.0-beta.10",
"xml2js": "^0.6.2", "xml2js": "^0.6.2"
"mwtsc": "^1.15.1"
}, },
"devDependencies": { "devDependencies": {
"mwts": "^1.3.0",
"@midwayjs/mock": "3.20.11", "@midwayjs/mock": "3.20.11",
"@types/ali-oss": "^6.16.11", "@types/ali-oss": "^6.16.11",
"@types/cache-manager": "^4.0.6", "@types/cache-manager": "^4.0.6",
@@ -133,6 +132,7 @@
"cross-env": "^7.0.3", "cross-env": "^7.0.3",
"esmock": "^2.7.5", "esmock": "^2.7.5",
"mocha": "^10.6.0", "mocha": "^10.6.0",
"mwts": "^1.3.0",
"prettier": "3.3.3", "prettier": "3.3.3",
"rimraf": "^5.0.5", "rimraf": "^5.0.5",
"ts-node": "^10.9.2", "ts-node": "^10.9.2",
@@ -140,7 +140,7 @@
"typescript": "^5.4.2", "typescript": "^5.4.2",
"why-is-node-running": "^3.2.2" "why-is-node-running": "^3.2.2"
}, },
"lazyDependencies": { "lazyDependencies": {
"@alicloud/fc20230330": "^4.1.7", "@alicloud/fc20230330": "^4.1.7",
"@alicloud/tea-typescript": "^1.8.0", "@alicloud/tea-typescript": "^1.8.0",
"@alicloud/openapi-client": "^0.4.12", "@alicloud/openapi-client": "^0.4.12",
@@ -182,7 +182,6 @@
"pnpm": { "pnpm": {
"neverBuiltDependencies": [] "neverBuiltDependencies": []
}, },
"author": "anonymous", "author": "anonymous",
"license": "MIT" "license": "MIT"
} }
@@ -1,10 +1,14 @@
import { BaseController, Constants, SysSettingsService } from "@certd/lib-server"; import { AccessGetter, AccessService, BaseController, Constants, SysSettingsService } from "@certd/lib-server";
import { ALL, Body, Controller, Inject, Post, Provide } from "@midwayjs/core"; import { ALL, Body, Controller, Inject, Post, Provide } from "@midwayjs/core";
import { PasskeyService } from "../../../modules/login/service/passkey-service.js"; import { PasskeyService } from "../../../modules/login/service/passkey-service.js";
import { RoleService } from "../../../modules/sys/authority/service/role-service.js"; import { RoleService } from "../../../modules/sys/authority/service/role-service.js";
import { UserService } from "../../../modules/sys/authority/service/user-service.js"; import { UserService } from "../../../modules/sys/authority/service/user-service.js";
import { NotificationService } from "../../../modules/pipeline/service/notification-service.js";
import { newAccess } from "@certd/pipeline";
import { http, logger, utils } from "@certd/basic";
import { ApiTags } from "@midwayjs/swagger"; import { ApiTags } from "@midwayjs/swagger";
import { CodeService } from "../../../modules/basic/service/code-service.js"; import { CodeService } from "../../../modules/basic/service/code-service.js";
import { EmailService } from "../../../modules/basic/service/email-service.js";
/** /**
*/ */
@@ -27,6 +31,15 @@ export class MineController extends BaseController {
@Inject() @Inject()
sysSettingsService: SysSettingsService; sysSettingsService: SysSettingsService;
@Inject()
accessService: AccessService;
@Inject()
notificationService: NotificationService;
@Inject()
emailService: EmailService;
@Post("/info", { description: Constants.per.authOnly, summary: "查询用户信息" }) @Post("/info", { description: Constants.per.authOnly, summary: "查询用户信息" })
public async info() { public async info() {
const userId = this.getUserId(); const userId = this.getUserId();
@@ -41,6 +54,17 @@ export class MineController extends BaseController {
delete user.password; delete user.password;
//@ts-ignore //@ts-ignore
user.needInitPassword = needInitPassword; user.needInitPassword = needInitPassword;
const { projectId } = await this.getProjectUserIdRead();
const userProjectQuery = this.accessService.buildUserProjectQuery(userId, projectId);
const existingAccess = await this.accessService.findOne({
where: { type: "acmeAccount", subtype: "letsencrypt", ...userProjectQuery },
});
if (!existingAccess) {
//@ts-ignore
user.needInitAccount = true;
}
return this.ok(user); return this.ok(user);
} }
@@ -122,4 +146,58 @@ export class MineController extends BaseController {
}); });
return this.ok({}); return this.ok({});
} }
@Post("/accountInit", { description: Constants.per.authOnly, summary: "初始化Let's Encrypt ACME账号和邮件通知" })
public async accountInit(@Body("email") email?: string) {
const { projectId, userId } = await this.getProjectUserIdWrite();
let userEmail = email;
let user: any = null;
if (!userEmail) {
user = await this.userService.info(userId);
userEmail = user.email;
}
if (!userEmail) {
return this.ok({ needEmail: true });
}
if (email) {
if (!user) {
user = await this.userService.info(userId);
}
if (!user.email) {
await this.userService.updateEmail(userId, { email: userEmail });
}
}
await this.emailService.add(userId, userEmail);
await this.notificationService.getOrCreateDefault(userEmail, userId, projectId);
const getAccessById = this.accessService.getById.bind(this.accessService);
const accessGetter = new AccessGetter(userId, projectId, getAccessById);
const accessContext = {
http,
logger,
utils,
accessService: accessGetter,
define: undefined,
} as any;
const access = await newAccess("acmeAccount", { caType: "letsencrypt", email: userEmail }, accessGetter, accessContext);
const accountJson = await access.onGenerateAccount();
await this.accessService.add({
type: "acmeAccount",
name: "Let's Encrypt",
userId,
projectId,
setting: JSON.stringify({
caType: "letsencrypt",
email: userEmail,
account: accountJson,
}),
});
return this.ok({ success: true });
}
} }
@@ -69,7 +69,7 @@ export class MinePasskeyController extends BaseController {
public async getPasskeys() { public async getPasskeys() {
const userId = this.getUserId(); const userId = this.getUserId();
const passkeys = await this.passkeyService.find({ const passkeys = await this.passkeyService.find({
select: ["id", "deviceName", "registeredAt", "transports", "passkeyId", "updateTime"], select: ["id", "deviceName", "registeredAt", "transports", "passkeyId", "rpId", "updateTime"],
where: { userId }, where: { userId },
order: { registeredAt: "DESC" }, order: { registeredAt: "DESC" },
}); });
@@ -11,7 +11,7 @@ export class PasskeyEntity {
@Column({ name: "device_name", comment: "设备名称" }) @Column({ name: "device_name", comment: "设备名称" })
deviceName: string; deviceName: string;
@Column({ name: "passkey_id", comment: "passkey_id" }) @Column({ name: "passkey_id", comment: "passkey_id", unique: true })
passkeyId: string; passkeyId: string;
@Column({ name: "public_key", comment: "公钥", type: "text" }) @Column({ name: "public_key", comment: "公钥", type: "text" })
@@ -23,6 +23,9 @@ export class PasskeyEntity {
@Column({ name: "transports", comment: "传输方式", type: "text", nullable: true }) @Column({ name: "transports", comment: "传输方式", type: "text", nullable: true })
transports: string; transports: string;
@Column({ name: "rp_id", comment: "注册时的rpId,域名可能会变", nullable: true })
rpId: string;
@Column({ name: "registered_at", comment: "注册时间" }) @Column({ name: "registered_at", comment: "注册时间" })
registeredAt: number; registeredAt: number;
@@ -1,5 +1,5 @@
import { cache, logger } from "@certd/basic"; import { cache, logger } from "@certd/basic";
import { AuthException, BaseService, SysInstallInfo, SysSettingsService, SysSiteInfo } from "@certd/lib-server"; import { AuthException, BaseService, SysSettingsService, SysSiteInfo } from "@certd/lib-server";
import { isComm } from "@certd/plus-core"; import { isComm } from "@certd/plus-core";
import { Inject, Provide, Scope, ScopeEnum } from "@midwayjs/core"; import { Inject, Provide, Scope, ScopeEnum } from "@midwayjs/core";
import { InjectEntityModel } from "@midwayjs/typeorm"; import { InjectEntityModel } from "@midwayjs/typeorm";
@@ -23,19 +23,15 @@ export class PasskeyService extends BaseService<PasskeyEntity> {
return this.repository; return this.repository;
} }
async getRpInfo() { async getRpInfo(ctx: any) {
let rpName = "Certd"; let rpName = "Certd";
if (isComm()) { if (isComm()) {
const siteInfo = await this.sysSettingsService.getSetting<SysSiteInfo>(SysSiteInfo); const siteInfo = await this.sysSettingsService.getSetting<SysSiteInfo>(SysSiteInfo);
rpName = siteInfo.title || rpName; rpName = siteInfo.title || rpName;
} }
const installInfo = await this.sysSettingsService.getSetting<SysInstallInfo>(SysInstallInfo); const rpId = ctx.hostname;
const origin = ctx.origin;
const url = installInfo.bindUrl || "http://localhost:7001";
const uri = new URL(url);
const rpId = uri.hostname;
const origin = uri.origin;
return { return {
rpName, rpName,
@@ -47,7 +43,7 @@ export class PasskeyService extends BaseService<PasskeyEntity> {
const { generateRegistrationOptions } = await import("@simplewebauthn/server"); const { generateRegistrationOptions } = await import("@simplewebauthn/server");
const user = await this.userService.info(userId); const user = await this.userService.info(userId);
const { rpName, rpId } = await this.getRpInfo(); const { rpName, rpId } = await this.getRpInfo(ctx);
const options = await generateRegistrationOptions({ const options = await generateRegistrationOptions({
rpName: rpName, rpName: rpName,
@@ -84,7 +80,7 @@ export class PasskeyService extends BaseService<PasskeyEntity> {
throw new AuthException("注册验证失败"); throw new AuthException("注册验证失败");
} }
const { rpId, origin } = await this.getRpInfo(); const { rpId, origin } = await this.getRpInfo(ctx);
let verification: any = null; let verification: any = null;
const verifyReq = { const verifyReq = {
@@ -115,7 +111,7 @@ export class PasskeyService extends BaseService<PasskeyEntity> {
} }
async generateAuthenticationOptions(ctx: any) { async generateAuthenticationOptions(ctx: any) {
const { rpId } = await this.getRpInfo(); const { rpId } = await this.getRpInfo(ctx);
const { generateAuthenticationOptions } = await import("@simplewebauthn/server"); const { generateAuthenticationOptions } = await import("@simplewebauthn/server");
const options = await generateAuthenticationOptions({ const options = await generateAuthenticationOptions({
rpID: rpId, rpID: rpId,
@@ -146,13 +142,19 @@ export class PasskeyService extends BaseService<PasskeyEntity> {
throw new AuthException("Passkey不存在"); throw new AuthException("Passkey不存在");
} }
const { rpId, origin } = await this.getRpInfo(); const { rpId, origin } = await this.getRpInfo(ctx);
if (passkey.rpId && passkey.rpId !== rpId) {
throw new AuthException(`当前站点域名(${rpId})与Passkey注册域名(${passkey.rpId})不一致,请在${passkey.rpId}域名下使用该Passkey登录`);
}
const expectedRPID = passkey.rpId || rpId;
const verification = await verifyAuthenticationResponse({ const verification = await verifyAuthenticationResponse({
response: credential, response: credential,
expectedChallenge: challenge, expectedChallenge: challenge,
expectedOrigin: origin, expectedOrigin: origin,
expectedRPID: rpId, expectedRPID,
requireUserVerification: false, requireUserVerification: false,
credential: { credential: {
id: passkey.passkeyId, id: passkey.passkeyId,
@@ -166,6 +168,11 @@ export class PasskeyService extends BaseService<PasskeyEntity> {
throw new AuthException("认证验证失败"); throw new AuthException("认证验证失败");
} }
if (!passkey.rpId) {
passkey.rpId = rpId;
await this.repository.save(passkey);
}
cache.delete(`passkey:authentication:${challenge}`); cache.delete(`passkey:authentication:${challenge}`);
return { return {
@@ -178,12 +185,15 @@ export class PasskeyService extends BaseService<PasskeyEntity> {
async registerPasskey(userId: number, response: any, challenge: string, deviceName: string, ctx: any) { async registerPasskey(userId: number, response: any, challenge: string, deviceName: string, ctx: any) {
const verification = await this.verifyRegistrationResponse(userId, response, challenge, ctx); const verification = await this.verifyRegistrationResponse(userId, response, challenge, ctx);
const rpInfo = await this.getRpInfo(ctx);
await this.add({ await this.add({
userId, userId,
passkeyId: verification.credentialId, passkeyId: verification.credentialId,
publicKey: Buffer.from(verification.credentialPublicKey).toString("base64"), publicKey: Buffer.from(verification.credentialPublicKey).toString("base64"),
counter: verification.counter, counter: verification.counter,
deviceName, deviceName,
rpId: rpInfo.rpId,
registeredAt: Date.now(), registeredAt: Date.now(),
}); });
@@ -215,20 +225,4 @@ export class PasskeyService extends BaseService<PasskeyEntity> {
const user = await this.userService.info(passkey.userId); const user = await this.userService.info(passkey.userId);
return user; return user;
} }
// private getRpId(ctx: any): string {
// if (ctx && ctx.request && ctx.request.host) {
// return ctx.request.host.split(':')[0];
// }
// return 'localhost';
// }
// private getOrigin(ctx: any): string {
// if (ctx && ctx.request) {
// const protocol = ctx.request.protocol;
// const host = ctx.request.host;
// return `${protocol}://${host}`;
// }
// return 'https://localhost';
// }
} }
@@ -441,7 +441,8 @@ export class RuntimeDepsService {
private getDefineByPluginKey(pluginKey: string, owner?: RuntimeDependencyPluginDefine): RuntimeDependencyPluginDefine { private getDefineByPluginKey(pluginKey: string, owner?: RuntimeDependencyPluginDefine): RuntimeDependencyPluginDefine {
const parts = pluginKey.split(":"); const parts = pluginKey.split(":");
let [pluginType, subtype, name] = parts; const [pluginType, subtype, rawName] = parts;
let name = rawName;
if (parts.length === 2) { if (parts.length === 2) {
name = subtype; name = subtype;
} else if (parts.length === 3) { } else if (parts.length === 3) {
@@ -28,10 +28,7 @@ describe("AliyunDeployCertToESA", () => {
plugin.deployMode = "saas"; plugin.deployMode = "saas";
plugin.siteIds = []; plugin.siteIds = [];
await assert.rejects( await assert.rejects(() => (plugin as any).executeSaaS(null, null, 1, "test"), /SaaS证书模式下请先选择站点/);
() => (plugin as any).executeSaaS(null, null, 1, "test"),
/SaaS证书模式下请先选择站点/
);
}); });
it("executeSaaS throws error when multiple sites are selected", async () => { it("executeSaaS throws error when multiple sites are selected", async () => {
@@ -40,10 +37,7 @@ describe("AliyunDeployCertToESA", () => {
plugin.deployMode = "saas"; plugin.deployMode = "saas";
plugin.siteIds = ["site1", "site2"]; plugin.siteIds = ["site1", "site2"];
await assert.rejects( await assert.rejects(() => (plugin as any).executeSaaS(null, null, 1, "test"), /SaaS证书模式下站点只能单选/);
() => (plugin as any).executeSaaS(null, null, 1, "test"),
/SaaS证书模式下站点只能单选/
);
}); });
it("executeSaaS throws error when no SaaS domains selected", async () => { it("executeSaaS throws error when no SaaS domains selected", async () => {
@@ -53,10 +47,7 @@ describe("AliyunDeployCertToESA", () => {
plugin.siteIds = ["site1"]; plugin.siteIds = ["site1"];
plugin.saasDomainIds = []; plugin.saasDomainIds = [];
await assert.rejects( await assert.rejects(() => (plugin as any).executeSaaS(null, null, 1, "test"), /SaaS证书模式下请选择要部署的SaaS域名/);
() => (plugin as any).executeSaaS(null, null, 1, "test"),
/SaaS证书模式下请选择要部署的SaaS域名/
);
}); });
it("executeSaaS calls UpdateCustomHostname for each selected SaaS domain", async () => { it("executeSaaS calls UpdateCustomHostname for each selected SaaS domain", async () => {
@@ -120,4 +111,4 @@ describe("AliyunDeployCertToESA", () => {
assert.deepEqual(calledSites, ["site1", "site2"]); assert.deepEqual(calledSites, ["site1", "site2"]);
}); });
}); });
@@ -375,6 +375,7 @@ export class CertApplyPlugin extends CertApplyBasePlugin {
component: { component: {
name: "access-selector", name: "access-selector",
type: "acmeAccount", type: "acmeAccount",
defaultSelect: true,
}, },
required: false, required: false,
helper: "直接本地生成,无需外部注册\n点击选择按钮->添加->填写邮箱->生成账号即可", helper: "直接本地生成,无需外部注册\n点击选择按钮->添加->填写邮箱->生成账号即可",
@@ -150,7 +150,7 @@ export abstract class CertApplyBasePlugin extends CertApplyBaseConvertPlugin {
// 检查有效期 // 检查有效期
const leftDays = Math.floor((expires - dayjs().valueOf()) / (1000 * 60 * 60 * 24)); const leftDays = Math.floor((expires - dayjs().valueOf()) / (1000 * 60 * 60 * 24));
this.logger.info(`证书有效期剩余天数:${leftDays}`); this.logger.info(`证书有效期剩余天数:${leftDays}`);
if (totalDays < maxDays) { if (totalDays < 10 && totalDays < maxDays) {
this.logger.warn(`当前更新天数为${maxDays},证书总天数${totalDays},总天数小于更新天数(更新天数是指到期前多少天更新证书,您可以在任务配置中调整该值)`); this.logger.warn(`当前更新天数为${maxDays},证书总天数${totalDays},总天数小于更新天数(更新天数是指到期前多少天更新证书,您可以在任务配置中调整该值)`);
maxDays = Math.floor(totalDays / 2); maxDays = Math.floor(totalDays / 2);
if (maxDays < 2) { if (maxDays < 2) {