119 lines
4.3 KiB
JavaScript
119 lines
4.3 KiB
JavaScript
const jwt = require('jsonwebtoken')
|
|
const { getNetIPInfo, readKey, writeKey, RSADecrypt, AESEncrypt, SHA1Encrypt, sendEmailToConfList, getNotifySwByType } = require('../utils')
|
|
|
|
const getpublicKey = ({ res }) => {
|
|
let { publicKey: data } = readKey()
|
|
if(!data) return res.fail({ msg: 'publicKey not found, Try to restart the server', status: 500 })
|
|
res.success({ data })
|
|
}
|
|
|
|
let timer = null
|
|
const allowErrCount = 5 // 允许错误的次数
|
|
const forbidTimer = 60 * 5 // 禁止登录时间
|
|
let loginErrCount = 0 // 每一轮的登录错误次数
|
|
let loginErrTotal = 0 // 总的登录错误次数
|
|
let loginCountDown = forbidTimer
|
|
let forbidLogin = false
|
|
|
|
const login = async ({ res, request }) => {
|
|
let { body: { ciphertext, jwtExpires }, ip: clientIp } = request
|
|
if(!ciphertext) return res.fail({ msg: '参数错误' })
|
|
|
|
if(forbidLogin) return res.fail({ msg: `禁止登录! 倒计时[${ loginCountDown }s]后尝试登录或重启面板服务` })
|
|
|
|
loginErrCount++
|
|
loginErrTotal++
|
|
if(loginErrCount >= allowErrCount) {
|
|
const { ip, country, city } = await getNetIPInfo(clientIp)
|
|
// 发送通知&禁止登录
|
|
let sw = getNotifySwByType('err_login')
|
|
if(sw) sendEmailToConfList('登录错误提醒', `重新登录次数: ${ loginErrTotal }<br/>地点：${ country + city }<br/>IP: ${ ip }`)
|
|
forbidLogin = true
|
|
loginErrCount = 0
|
|
|
|
// forbidTimer秒后解禁
|
|
setTimeout(() => {
|
|
forbidLogin = false
|
|
}, loginCountDown * 1000)
|
|
|
|
// 计算登录倒计时
|
|
timer = setInterval(() => {
|
|
if(loginCountDown <= 0){
|
|
clearInterval(timer)
|
|
loginCountDown = forbidTimer
|
|
return
|
|
}
|
|
loginCountDown--
|
|
}, 1000)
|
|
}
|
|
|
|
// 登录流程
|
|
try {
|
|
// console.log('ciphertext', ciphertext)
|
|
let password = RSADecrypt(ciphertext)
|
|
// console.log('Decrypt解密password:', password)
|
|
let { pwd } = readKey()
|
|
if(password === 'admin' && pwd === 'admin') {
|
|
const token = await beforeLoginHandler(clientIp, jwtExpires)
|
|
return res.success({ data: { token, jwtExpires }, msg: '登录成功，请及时修改默认密码' })
|
|
}
|
|
password = SHA1Encrypt(password)
|
|
if(password !== pwd) return res.fail({ msg: '密码错误' })
|
|
const token = await beforeLoginHandler(clientIp, jwtExpires)
|
|
return res.success({ data: { token, jwtExpires }, msg: '登录成功' })
|
|
} catch (error) {
|
|
console.log('解密失败：', error)
|
|
res.fail({ msg: '解密失败, 请查看服务端日志' })
|
|
}
|
|
}
|
|
|
|
const beforeLoginHandler = async (clientIp, jwtExpires) => {
|
|
loginErrCount = loginErrTotal = 0 // 登录成功, 清空错误次数
|
|
|
|
// consola.success('登录成功, 准备生成token', new Date())
|
|
// 生产token
|
|
let { commonKey } = readKey()
|
|
let token = jwt.sign({ date: Date.now() }, commonKey, { expiresIn: jwtExpires }) // 生成token
|
|
token = AESEncrypt(token) // 对称加密token后再传输给前端
|
|
|
|
// 记录客户端登录IP(用于判断是否异地且只保留最近10条)
|
|
const clientIPInfo = await getNetIPInfo(clientIp)
|
|
const { ip, country, city } = clientIPInfo || {}
|
|
|
|
// 邮件登录通知
|
|
let sw = getNotifySwByType('login')
|
|
if(sw) sendEmailToConfList('登录提醒', `地点：${ country + city }<br/>IP: ${ ip }`)
|
|
|
|
global.loginRecord.unshift(clientIPInfo)
|
|
if(global.loginRecord.length > 10) global.loginRecord = global.loginRecord.slice(0, 10)
|
|
return token
|
|
}
|
|
|
|
const updatePwd = async ({ res, request }) => {
|
|
let { body: { oldPwd, newPwd } } = request
|
|
let rsaOldPwd = RSADecrypt(oldPwd)
|
|
oldPwd = rsaOldPwd === 'admin' ? 'admin' : SHA1Encrypt(rsaOldPwd)
|
|
let keyObj = readKey()
|
|
if(oldPwd !== keyObj.pwd) return res.fail({ data: false, msg: '旧密码校验失败' })
|
|
// 旧密钥校验通过，加密保存新密码
|
|
newPwd = RSADecrypt(newPwd) === 'admin' ? 'admin' : SHA1Encrypt(RSADecrypt(newPwd))
|
|
keyObj.pwd = newPwd
|
|
writeKey(keyObj)
|
|
|
|
let sw = getNotifySwByType('updatePwd')
|
|
if(sw) sendEmailToConfList('密码修改提醒', '面板登录密码已更改')
|
|
|
|
res.success({ data: true, msg: 'success' })
|
|
}
|
|
|
|
const getLoginRecord = async ({ res }) => {
|
|
res.success({ data: global.loginRecord, msg: 'success' })
|
|
}
|
|
|
|
module.exports = {
|
|
login,
|
|
getpublicKey,
|
|
updatePwd,
|
|
getLoginRecord
|
|
}
|