50 lines
1.9 KiB
JavaScript
50 lines
1.9 KiB
JavaScript
const NodeRSA = require('node-rsa')
|
|
const { getNetIPInfo, readHostList, writeHostList, readKey, writeKey, randomStr, isProd, AESEncrypt } = require('./utils')
|
|
|
|
const isDev = !isProd()
|
|
|
|
// 存储本机IP, 供host列表接口调用
|
|
async function initLocalIp() {
|
|
if(isDev) return consola.info('非生产环境不初始化保存本地IP')
|
|
const localNetIPInfo = await getNetIPInfo()
|
|
let vpsList = readHostList()
|
|
let { ip: localNetIP } = localNetIPInfo
|
|
if(vpsList.some(({ host }) => host === localNetIP)) return consola.info('本机IP已储存: ', localNetIP)
|
|
vpsList.unshift({ name: 'server-side-host', host: localNetIP, group: 'default' })
|
|
writeHostList(vpsList)
|
|
consola.info('Task: 生产环境首次启动储存本机IP: ', localNetIP)
|
|
}
|
|
|
|
// 初始化公私钥, 供登录、保存ssh密钥/密码等加解密
|
|
async function initRsa() {
|
|
let keyObj = readKey()
|
|
if(keyObj.privateKey && keyObj.publicKey) return consola.info('公私钥已存在[重新生成会导致已保存的ssh密钥信息失效]')
|
|
|
|
let key = new NodeRSA({ b: 1024 })
|
|
key.setOptions({ encryptionScheme: 'pkcs1' })
|
|
let privateKey = key.exportKey('pkcs1-private-pem')
|
|
let publicKey = key.exportKey('pkcs8-public-pem')
|
|
keyObj.privateKey = AESEncrypt(privateKey) // 加密私钥
|
|
keyObj.publicKey = publicKey // 公开公钥
|
|
writeKey(keyObj)
|
|
consola.info('Task: 已生成新的非对称加密公私钥')
|
|
}
|
|
|
|
// 随机的commonKey secret
|
|
function randomJWTSecret() {
|
|
let keyObj = readKey()
|
|
if(keyObj.commonKey) return consola.info('commonKey密钥已存在')
|
|
|
|
keyObj.commonKey = randomStr(16)
|
|
writeKey(keyObj)
|
|
consola.info('Task: 已生成新的随机commonKey密钥')
|
|
}
|
|
|
|
module.exports = () => {
|
|
randomJWTSecret() // 先生成全局唯一密钥
|
|
initLocalIp()
|
|
initRsa()
|
|
// 用于记录客户端登录IP的列表
|
|
global.loginRecord = []
|
|
}
|