122 lines
3.5 KiB
TypeScript
122 lines
3.5 KiB
TypeScript
|
|
import { ENCRYPT_IV, ENCRYPT_KEY } from '../consts';
|
|
import { WhiteListModel } from '../db/RegionWhiteList';
|
|
const fs = require('fs');
|
|
const path = require('path');
|
|
import { aesDecrypt, aesEncrypt } from './util';
|
|
const crypto = require('crypto');
|
|
const isJSON = require('koa-is-json');
|
|
|
|
const privateKey = fs.readFileSync(path.resolve(__dirname, `../resource/privateKey`));
|
|
const publicKey = fs.readFileSync(path.resolve(__dirname, `../resource/publicKey`)); // 发推送加密的秘钥，和privateKey不是一对
|
|
|
|
|
|
export async function checkWhiteList(env: string, ip: string, uid: number) {
|
|
if(ip) {
|
|
let result = await WhiteListModel.checkIp(env, ip);
|
|
if(!!result) return true;
|
|
}
|
|
if(uid) {
|
|
let result = await WhiteListModel.checkUid(env, uid);
|
|
if(!!result) return true;
|
|
}
|
|
return false
|
|
}
|
|
|
|
export class MsgEncrypt {
|
|
private k: string = ENCRYPT_KEY;
|
|
private v: string = ENCRYPT_IV;
|
|
private encodeK: string = '';
|
|
private encodeV: string = '';
|
|
|
|
constructor(data: { k?: string, v?: string, encodeK?: string, encodeV?: string, originK?: string, originV?: string }) {
|
|
if(data.k && data.v) {
|
|
this.encodeAndSetKv(data.k, data.v);
|
|
}
|
|
if(data.encodeK && data.encodeV) {
|
|
this.decodeAndSetKv(data.encodeK, data.encodeV);
|
|
}
|
|
if(data.originK && data.originV) {
|
|
this.k = data.originK;
|
|
this.v = data.originV;
|
|
}
|
|
}
|
|
|
|
public decryptMsg(data: string) {
|
|
if(!data) return false
|
|
|
|
try {
|
|
const decodeStr = aesDecrypt(data, this.k, this.v);
|
|
console.log('decoded str:', decodeStr);
|
|
|
|
let body = JSON.parse(decodeStr);
|
|
return body
|
|
} catch(e) {
|
|
console.error(e);
|
|
return false;
|
|
}
|
|
}
|
|
|
|
public encryptMsg(json: Object) {
|
|
if(!isJSON(json)) return false;
|
|
|
|
try {
|
|
const encodeStr = aesEncrypt(JSON.stringify(json), this.k, this.v);
|
|
// console.log('encode str:', encodeStr);
|
|
|
|
return encodeStr;
|
|
} catch(e) {
|
|
console.error(e);
|
|
return false;
|
|
}
|
|
}
|
|
|
|
public decodeAndSetKv(requestK: string, requestV: string) {
|
|
if(requestK) {
|
|
this.encodeK = requestK;
|
|
this.k = this.privateDecrypt(Buffer.from(requestK, 'base64'));
|
|
}
|
|
if(requestV) {
|
|
this.encodeV = requestV;
|
|
this.v = this.privateDecrypt(Buffer.from(requestV, 'base64'));
|
|
}
|
|
return this.getKv();
|
|
}
|
|
|
|
public getKv() {
|
|
return { aesKey: this.k, aesIV: this.v }
|
|
}
|
|
|
|
public getEncodeKv() {
|
|
return { aesKey: this.encodeK, aesIV: this.encodeV }
|
|
}
|
|
|
|
private privateDecrypt(encryptMsg: Buffer) {
|
|
const decryptMsg = crypto.privateDecrypt(
|
|
{ key: privateKey, padding: crypto.constants.RSA_PKCS1_PADDING },
|
|
encryptMsg
|
|
);
|
|
return decryptMsg.toString();
|
|
}
|
|
|
|
private getRsaEncodedData(original: string) {
|
|
const encryptMsg = crypto.publicEncrypt(
|
|
{ key: publicKey, padding: crypto.constants.RSA_PKCS1_PADDING },
|
|
Buffer.from(original)
|
|
);
|
|
return encryptMsg.toString('base64');
|
|
}
|
|
|
|
private encodeAndSetKv(k: string, v: string) {
|
|
if(k) {
|
|
this.k = k;
|
|
this.encodeK = this.getRsaEncodedData(k);
|
|
}
|
|
if(v) {
|
|
this.v = v;
|
|
this.encodeV = this.getRsaEncodedData(v);
|
|
}
|
|
}
|
|
}
|
|
|