perf: dns支持新网互联

packages/ui/certd-server/package.json

@@ -121,7 +121,8 @@
     "svg-captcha": "^1.4.0",
     "tencentcloud-sdk-nodejs": "^4.1.112",
     "typeorm": "^0.3.20",
-    "uuid": "^10.0.0"
+    "uuid": "^10.0.0",
+    "xml2js": "^0.6.2"
   },
   "devDependencies": {
     "@midwayjs/mock": "3.20.11",

packages/ui/certd-server/src/plugins/index.ts

@@ -37,3 +37,4 @@ export * from './plugin-dokploy/index.js'
 export * from './plugin-godaddy/index.js'
 export * from './plugin-captcha/index.js'
 export * from './plugin-xinnet/index.js'
+export * from './plugin-xinnetconnet/index.js'

packages/ui/certd-server/src/plugins/plugin-xinnet/access-agent.ts

@@ -0,0 +1,79 @@
+// import { IsAccess, AccessInput, BaseAccess } from "@certd/pipeline";
+// import { XinnetClient } from "@certd/plugin-plus";
+
+// /**
+//  * 这个注解将注册一个授权配置
+//  * 在certd的后台管理系统中，用户可以选择添加此类型的授权
+//  */
+// @IsAccess({
+//   name: "xinnetagent",
+//   title: "新网授权（代理方式）",
+//   icon: "lsicon:badge-new-filled",
+//   desc: ""
+// })
+// export class XinnetAccess extends BaseAccess {
+
+//   /**
+//    * 授权属性配置
+//    */
+//   @AccessInput({
+//     title: "代理账号",
+//     component: {
+//       placeholder: "代理账号，如：agent0001"
+//     },
+//     required: true,
+//     encrypt: false
+//   })
+//   username = "";
+
+//   @AccessInput({
+//     title: "API密钥",
+//     component: {
+//       name: "a-input-password",
+//       vModel: "value",
+//       placeholder: "API密钥"
+//     },
+//     required: true,
+//     encrypt: true
+//   })
+//   apikey = "";
+
+//   @AccessInput({
+//     title: "测试",
+//     component: {
+//       name: "api-test",
+//       action: "TestRequest"
+//     },
+//     helper: "点击测试接口是否正常"
+//   })
+//   testRequest = true;
+
+//   async onTestRequest() {
+
+//     // const client = new XinnetClient({
+//     //   access: this,
+//     //   logger: this.ctx.logger,
+//     //   http: this.ctx.http
+//     // });
+
+//     await client.getDomainList({ pageNo: 1, pageSize: 1 });
+
+//     return "ok";
+//   }
+
+
+//   getCacheKey () {
+//     let hashStr = ""
+//     for (const key in this) {
+//       if (Object.prototype.hasOwnProperty.call(this, key)) {
+//         const element = this[key];
+//         hashStr += element;
+//       }
+//     }
+//     const hashCode = this.ctx.utils.hash.sha256(hashStr);
+//     return `xinnet-${hashCode}`;
+//   }
+
+// }
+
+// new XinnetAccess();

packages/ui/certd-server/src/plugins/plugin-xinnetconnet/access.ts

@@ -0,0 +1,147 @@
+import { IsAccess, AccessInput, BaseAccess } from '@certd/pipeline';
+
+/**
+ * 这个注解将注册一个授权配置
+ * 在certd的后台管理系统中，用户可以选择添加此类型的授权
+ */
+@IsAccess({
+  name: 'xinnetconnect',
+  title: '新网互联授权',
+  icon: 'lsicon:badge-new-filled',
+  desc: '仅支持代理账号，ip需要加入白名单',
+})
+export class XinnetConnectAccess extends BaseAccess {
+  /**
+   * 授权属性配置
+   */
+  @AccessInput({
+    title: '用户名',
+    component: {
+      placeholder: '代理用户名，如：agent001',
+      help: '新网互联的代理用户名',
+    },
+    required: true,
+    encrypt: false,
+  })
+  username = '';
+
+  @AccessInput({
+    title: '密码',
+    component: {
+      name: "a-input-password",
+      vModel: "value",
+      placeholder: '密码',
+    },
+    required: true,
+    encrypt: true,
+  })
+  password = '';
+
+
+
+  async addDnsRecord(req: {domain:string,hostRecord:string, value:string, type:string}): Promise<any> {
+    const { domain,hostRecord, value, type } = req;
+    const bodyXml =`
+     <add>
+        <domainname>${domain}</domainname>
+        <resolvetype>${type}</resolvetype>
+        <resolvehost>${hostRecord}</resolvehost>
+        <resolvevalue>${value}</resolvevalue>
+        <mxlevel>10</mxlevel>
+      </add>`
+
+    const res = await this.doRequest({
+      url: "/addDnsRecordService",
+      bodyXml: bodyXml,
+      service: "addDnsRecord",
+    })
+    return res
+  }
+
+  async delDnsRecord(req: {domain:string,hostRecord:string, type:string,value:string}): Promise<any> {
+    const { domain,hostRecord, type,value } = req;
+    const bodyXml =`
+     <del>
+        <domainname>${domain}</domainname>
+        <resolvetype>${type}</resolvetype>
+        <resolvehost>${hostRecord}</resolvehost>
+        <resolveoldvalue>${value}</resolveoldvalue>
+        <mxlevel>10</mxlevel>
+      </del>`
+
+    const res = await this.doRequest({
+      url: "/delDnsRecordService",
+      bodyXml: bodyXml,
+      service: "delDnsRecord",
+    })
+    return res
+  }
+  
+
+
+  buildUserXml(){
+      return `
+      <user>
+        <name>${this.username}</name>
+        <password>${this.password}</password>
+      </user>
+      `
+  }
+
+
+  async doRequest(req: {bodyXml:string,service:string,url:string}) {
+
+    const xml2js = await import('xml2js');
+
+      const soapRequest = `
+    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ws="http://ws/">
+       <soapenv:Header/>
+       <soapenv:Body>
+          <ws:${req.service}>
+             ${this.buildUserXml()}
+             ${req.bodyXml}
+          </ws:${req.service}>
+       </soapenv:Body>
+    </soapenv:Envelope>
+    `;
+
+
+    const response = await this.ctx.http.request({
+      url: req.url,
+      baseURL: "https://api.bizcn.com/rrpservices",
+      data: soapRequest,
+      headers: {
+        'Content-Type': 'text/xml; charset=utf-8',
+        'SOAPAction': '' // 根据WSDL，soapAction为空
+      },
+      method: "POST",
+      returnOriginRes: true,
+    })
+
+
+    // 解析SOAP响应
+    const parser = new xml2js.Parser({ explicitArray: false });
+    const result = await parser.parseStringPromise(response.data);
+
+    // 提取返回结果
+    const soapBody = result['soap:Envelope']['soap:Body'];
+    const addDnsRecordResponse = soapBody["ns1:addDnsRecordResponse"];
+    console.log(addDnsRecordResponse)
+    const resultData = addDnsRecordResponse.response.result;
+
+    const res = {
+      code: resultData.$.code,
+      msg: resultData.msg
+    }
+    console.log('操作结果:', res);
+
+    if (res.code != "200") {
+      throw new Error(res.msg + " code:" + res.code);
+    }
+
+    return resultData;
+  }
+
+}
+
+new XinnetConnectAccess();

packages/ui/certd-server/src/plugins/plugin-xinnetconnet/dns-provider.ts

@@ -0,0 +1,68 @@
+import { AbstractDnsProvider, CreateRecordOptions, IsDnsProvider, RemoveRecordOptions } from "@certd/plugin-cert";
+import { XinnetConnectAccess } from "./access.js";
+
+
+export type XinnetConnectRecord = {
+  domain: string;
+  hostRecord: string;
+  type: string;
+  value: string;
+};
+
+// 这里通过IsDnsProvider注册一个dnsProvider
+@IsDnsProvider({
+  name: 'xinnetconnect',
+  title: '新网互联',
+  desc: '新网互联',
+  icon: 'lsicon:badge-new-filled',
+  // 这里是对应的 cloudflare的access类型名称
+  accessType: 'xinnetconnect',
+  order:999,
+})
+export class XinnetConnectDnsProvider extends AbstractDnsProvider<XinnetConnectRecord> {
+  access!: XinnetConnectAccess;
+
+  async onInstance() {
+    //一些初始化的操作
+    // 也可以通过ctx成员变量传递context
+    this.access = this.ctx.access as XinnetConnectAccess;
+   
+  }
+
+  /**
+   * 创建dns解析记录，用于验证域名所有权
+   */
+  async createRecord(options: CreateRecordOptions): Promise<XinnetConnectRecord> {
+    const { fullRecord,hostRecord, value, type, domain } = options;
+    this.logger.info('添加域名解析：', fullRecord, value, type, domain);
+
+    const recordReq = {
+      domain: domain,
+      type: 'TXT',
+      hostRecord: hostRecord,
+      value: value,
+    }
+    await this.access.addDnsRecord(recordReq)
+    return recordReq;
+  }
+
+
+  /**
+   *  删除dns解析记录,清理申请痕迹
+   * @param options
+   */
+  async removeRecord(options: RemoveRecordOptions<XinnetConnectRecord>): Promise<void> {
+    const { fullRecord, value } = options.recordReq;
+    const record = options.recordRes;
+    this.logger.info('删除域名解析：', fullRecord, value);
+    if (!record) {
+      this.logger.info('record为空，不执行删除');
+      return;
+    }
+    await this.access.delDnsRecord(record)
+    this.logger.info(`删除域名解析成功:fullRecord=${fullRecord}`);
+  }
+}
+
+//实例化这个provider，将其自动注册到系统中
+new XinnetConnectDnsProvider();

packages/ui/certd-server/src/plugins/plugin-xinnetconnet/index.ts

@@ -0,0 +1,2 @@
+export * from './dns-provider.js';
+export * from './access.js';