oss上传秘钥加密

package-lock.json

@@ -5071,6 +5071,11 @@
         "randomfill": "^1.0.3"
       }
     },
+    "crypto-js": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q=="
+    },
     "css-color-names": {
       "version": "0.0.4",
       "resolved": "https://registry.npmjs.org/css-color-names/-/css-color-names-0.0.4.tgz",
@@ -10283,6 +10288,11 @@
       "resolved": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz",
       "integrity": "sha1-peZUwuWi3rXyAdls77yoDA7y9RM="
     },
+    "jsencrypt": {
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/jsencrypt/-/jsencrypt-3.3.2.tgz",
+      "integrity": "sha512-arQR1R1ESGdAxY7ZheWr12wCaF2yF47v5qpB76TtV64H1pyGudk9Hvw8Y9tb/FiTIaaTRUyaSnm5T/Y53Ghm/A=="
+    },
     "jsesc": {
       "version": "2.5.2",
       "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz",

package.json

@@ -13,12 +13,14 @@
     "axios": "^0.26.1",
     "babel-polyfill": "^6.26.0",
     "core-js": "^2.6.10",
+    "crypto-js": "^4.2.0",
     "echarts": "^4.9.0",
     "element-theme": "^2.0.1",
     "element-ui": "^2.15.9",
     "html2canvas": "^1.3.2",
     "image-webpack-loader": "^8.1.0",
     "js-cookie": "^2.2.1",
+    "jsencrypt": "^3.3.2",
     "jspdf": "^2.5.1",
     "mavon-editor": "^2.10.4",
     "moment": "^2.29.4",

src/api/index.js

@@ -28,6 +28,7 @@ export default {
   // 阿里云文件/视频管理
   getPlayAuth: `${uploadURL}oss/manage/getPlayAuth`, // 获取播放凭证
   getPlayAuthNakadai: `nakadai/nakadai/oss/getPlayAuth`, // 获取播放凭证
+  encrypt: `nakadai/data/encrypt`,
 
   platformLogList: `nakadai/nakadai/log/platformLogList`,
   logNotification: `nakadai/nakadai/log/logNotification`,

src/components/upload/config.js

@@ -1,15 +1,41 @@
 /**
  * 阿里云oss配置
  * */
+import { get } from '@/plugins/requests/index.js'
+import api from '@/api'
+import CryptoJS from 'crypto-js'
+import JSEncrypt from 'jsencrypt'
 
- export default {
-	// oss账号信息
-	config: {
-		region: 'oss-cn-shenzhen',
-		accessKeyId: 'LTAI4FzqQHnk4rozqLZ8jCNj',
-		accessKeySecret: 'mveW7B1OyFoKUkHm8WsxmrjHmkJWHq',
-		bucket: 'huoran'
-	},
-	// 上传成功url前置部分（成功回调没有返回url）
-	preUrl: 'https://huoran.oss-cn-shenzhen.aliyuncs.com/'
+const A = (key, encryptedData) => {
+  const keyHex = CryptoJS.enc.Base64.parse(key)
+  const decrypted = CryptoJS.AES.decrypt(encryptedData, keyHex, {
+    mode: CryptoJS.mode.ECB,
+    padding: CryptoJS.pad.Pkcs7
+  })
+  return decrypted.toString(CryptoJS.enc.Utf8)
+}
+
+const R = (encryptedKey, privateKey) => {
+  const decrypt = new JSEncrypt()
+  decrypt.setPrivateKey(privateKey)
+  const decryptedKey = decrypt.decrypt(encryptedKey)
+  return decryptedKey
+}
+
+export default async function () {
+  try {
+    const res = await get(api.encrypt)
+    const RE = A(R(res.encryptedKey, res.privateKey), res.encryptedData).split('/')
+    return {
+      // oss账号信息
+      config: {
+        region: 'oss-cn-shenzhen',
+        accessKeyId: RE[0],
+        accessKeySecret: RE[1],
+        bucket: 'huoran'
+      },
+      // 上传成功url前置部分（成功回调没有返回url）
+      preUrl: 'https://huoran.oss-cn-shenzhen.aliyuncs.com/'
+    }
+  } catch (e) { }
 }

src/components/upload/index.vue

@@ -1,25 +1,13 @@
 <template>
-  <el-upload :disabled="uploading"
-             :before-upload="beforeUpload"
-             :on-remove="onRemove"
-             :on-error="uploadError"
-             :limit="limit"
-             action=""
-             :on-exceed="handleExceed"
-             :show-file-list="showFiles"
-             :file-list="fileList"
-             :http-request="handleRequest"
-             name="file">
+  <el-upload :disabled="uploading" :before-upload="beforeUpload" :on-remove="onRemove" :on-error="uploadError"
+    :limit="limit" action="" :on-exceed="handleExceed" :show-file-list="showFiles" :file-list="fileList"
+    :http-request="handleRequest" name="file">
     <slot name="trigger">
-      <el-button size="small"
-                 :loading="uploading">{{ uploading ? '正在上传' : '上传文件' }}</el-button>
+      <el-button size="small" :loading="uploading">{{ uploading ? '正在上传' : '上传文件' }}</el-button>
     </slot>
-    <div slot="tip"
-         class="el-upload__tip">
-      <el-progress v-if="uploading"
-                   class="upload-progress"
-                   :stroke-width="3"
-                   :percentage="uploadProgress"></el-progress>
+    <div slot="tip" class="el-upload__tip">
+      <el-progress v-if="uploading" class="upload-progress" :stroke-width="3"
+        :percentage="uploadProgress"></el-progress>
       <slot name="tip">
         <p>支持扩展名：.rar .zip .doc .docx .pdf .jpg...</p>
       </slot>
@@ -69,7 +57,8 @@ export default {
       client: null,
       uploading: false,
       uploadProgress: 0,
-      showFiles: this.showFileList
+      showFiles: this.showFileList,
+      Oss: {},
     };
   },
   mounted () {
@@ -77,8 +66,9 @@ export default {
   },
   methods: {
     // 初始化oss
-    initOss () {
-      this.client = new OSS(OssConfig.config)
+    async initOss () {
+      this.Oss = await OssConfig()
+      this.client = new OSS(this.Oss.config)
     },
     // 附件上传前
     beforeUpload (file) {
@@ -107,7 +97,7 @@ export default {
         });
 
         this.uploading = false
-        const url = OssConfig.preUrl + name
+        const url = this.Oss.preUrl + name
         this.changeFileList && this.$emit('update:fileList', [
           ...this.fileList,
           {
@@ -143,8 +133,8 @@ export default {
 </script>
 <style lang="scss" scoped>
 /deep/.upload-progress {
-    max-width: 300px;
-    margin: 10px 0;
-    white-space: nowrap;
+  max-width: 300px;
+  margin: 10px 0;
+  white-space: nowrap;
 }
 </style>

src/components/upload/upload.js

@@ -5,33 +5,36 @@ import OssConfig from './config'
 import Util from '@/libs/util'
 
 let client = null
+let Oss
 // 初始化oss
-const initOss = () => {
-	if (!client) client = new OSS(OssConfig.config)
+const initOss = async () => {
+  Oss = await OssConfig()
+  if (!client) client = new OSS(Oss.config)
 }
+initOss()
 
 export default {
-	// 上传文件
-	upload(file) {
-		initOss()
-		return new Promise(async (resolve, reject) => {
-			try {
-				// 上传到阿里云oss
-				const res = await client.multipartUpload(Date.now() + '.' + Util.getFileExt(file.name), file);
-				resolve({
-					format: Util.getFileExt(file.name),
+  // 上传文件
+  upload (file) {
+    initOss()
+    return new Promise(async (resolve, reject) => {
+      try {
+        // 上传到阿里云oss
+        const res = await client.multipartUpload(Date.now() + '.' + Util.getFileExt(file.name), file);
+        resolve({
+          format: Util.getFileExt(file.name),
           name: file.name,
-          url: OssConfig.preUrl + res.name,
+          url: Oss.preUrl + res.name,
           size: file.size,
-				})
-			} catch (error) {
-				reject()
-			}
-		})
-	},
-	// 删除文件（传完整url，不是没有https的name，因为很多接口没有存name，只存url，所以统一使用url）
-	async del(url) {
-		initOss()
-		await client.delete(url.replace(OssConfig.preUrl, ''));
-	}
+        })
+      } catch (error) {
+        reject()
+      }
+    })
+  },
+  // 删除文件（传完整url，不是没有https的name，因为很多接口没有存name，只存url，所以统一使用url）
+  async del (url) {
+    initOss()
+    await client.delete(url.replace(Oss.preUrl, ''));
+  }
 }

src/pages/account/login/index.vue

@@ -88,7 +88,7 @@
             <el-input v-model="phoneCode" placeholder="请输入验证码" maxlength="6"></el-input>
             <el-button style="top: 1px" type="text" @click="sendPhoneCode(1)"
               :disabled="binding === '' || phoneDisabled">{{
-              phoneBtnText }}
+                phoneBtnText }}
             </el-button>
           </div>
         </el-form-item>