oss上传秘钥加密及低代码平台嵌入

4 months ago · 1c3297c0c0
parent a7a04ff314
commit 1c3297c0c0
8 changed files with 91 additions and 50 deletions
--- a/package-lock.json
+++ b/package-lock.json
@ -4666,6 +4666,11 @@
        "randomfill": "^1.0.3"
      }
    },
+    "crypto-js": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q=="
+    },
    "css": {
      "version": "2.2.4",
      "resolved": "https://registry.npm.taobao.org/css/download/css-2.2.4.tgz",
@ -8912,6 +8917,11 @@
      "integrity": "sha1-peZUwuWi3rXyAdls77yoDA7y9RM=",
      "dev": true
    },
+    "jsencrypt": {
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/jsencrypt/-/jsencrypt-3.3.2.tgz",
+      "integrity": "sha512-arQR1R1ESGdAxY7ZheWr12wCaF2yF47v5qpB76TtV64H1pyGudk9Hvw8Y9tb/FiTIaaTRUyaSnm5T/Y53Ghm/A=="
+    },
    "jsesc": {
      "version": "2.5.2",
      "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz",
--- a/package.json
+++ b/package.json
@ -13,12 +13,14 @@
        "axios": "^0.19.2",
        "clipboard": "^2.0.10",
        "core-js": "^3.19.3",
+        "crypto-js": "^4.2.0",
        "element-ui": "^2.15.6",
        "file-saver": "^2.0.5",
        "html2canvas": "^1.4.1",
        "image-webpack-loader": "^8.1.0",
        "jquery": "^3.6.0",
        "js-cookie": "^3.0.1",
+        "jsencrypt": "^3.3.2",
        "jspdf": "^2.5.1",
        "lib-flexible": "^0.3.2",
        "mavon-editor": "^2.10.4",
--- a/src/App.vue
+++ b/src/App.vue
@ -19,23 +19,19 @@ export default {
        )
      );
    }
+    // 保证同一个浏览器只有一个当前系统能打开
+    if (!document.referrer) {
+      Util.exit()
+      return false
+    }
+
    //在页面刷新时将vuex里的信息保存到sessionStorage里
    window.addEventListener("beforeunload", () => {
-      const opened = +localStorage.getItem('opened')
-      if (opened) {
-        localStorage.setItem('opened', opened - 1)
-      } else {
-        localStorage.removeItem('opened')
-      }
+      localStorage.removeItem('opened')

      sessionStorage.setItem("store", JSON.stringify(this.$store.state));
    });

-    // 保证同一个浏览器只有一个当前系统能打开
-    if (!document.referrer) {
-      localStorage.setItem('opened', 2)
-      Util.exit()
-    }
  }
 };
 </script>
--- a/src/api/index.js
+++ b/src/api/index.js
@ -1,5 +1,6 @@
 import config from '@/config'
 export default {
+  encrypt: `nakadai/data/encrypt`,
  getCurrentTime: `competition/competition/management/getCurrentTime`,
  getProjectDetail: 'occupationlab/occupationlab/projectManage/getProjectDetail',
  submit: 'python/python/submit',
--- a/src/components/upload/config.js
+++ b/src/components/upload/config.js
@ -1,15 +1,41 @@
 /**
 * 阿里云oss配置
 * */
+import { get } from '@/api/http'
+import api from '@/api'
+import CryptoJS from 'crypto-js'
+import JSEncrypt from 'jsencrypt'

- export default {
-	// oss账号信息
-	config: {
-		region: 'oss-cn-shenzhen',
-		accessKeyId: 'LTAI4FzqQHnk4rozqLZ8jCNj',
-		accessKeySecret: 'mveW7B1OyFoKUkHm8WsxmrjHmkJWHq',
-		bucket: 'huoran'
-	},
-	// 上传成功url前置部分（成功回调没有返回url）
-	preUrl: 'https://huoran.oss-cn-shenzhen.aliyuncs.com/'
+const A = (key, encryptedData) => {
+  const keyHex = CryptoJS.enc.Base64.parse(key)
+  const decrypted = CryptoJS.AES.decrypt(encryptedData, keyHex, {
+    mode: CryptoJS.mode.ECB,
+    padding: CryptoJS.pad.Pkcs7
+  })
+  return decrypted.toString(CryptoJS.enc.Utf8)
+}
+
+const R = (encryptedKey, privateKey) => {
+  const decrypt = new JSEncrypt()
+  decrypt.setPrivateKey(privateKey)
+  const decryptedKey = decrypt.decrypt(encryptedKey)
+  return decryptedKey
+}
+
+export default async function () {
+  try {
+    const res = await get(api.encrypt)
+    const RE = A(R(res.encryptedKey, res.privateKey), res.encryptedData).split('/')
+    return {
+      // oss账号信息
+      config: {
+        region: 'oss-cn-shenzhen',
+        accessKeyId: RE[0],
+        accessKeySecret: RE[1],
+        bucket: 'huoran'
+      },
+      // 上传成功url前置部分（成功回调没有返回url）
+      preUrl: 'https://huoran.oss-cn-shenzhen.aliyuncs.com/'
+    }
+  } catch (e) { }
 }
--- a/src/components/upload/upload.js
+++ b/src/components/upload/upload.js
@ -5,33 +5,36 @@ import OssConfig from './config'
 import Util from '@/util'

 let client = null
+let Oss
 // 初始化oss
-const initOss = () => {
-	if (!client) client = new OSS(OssConfig.config)
+const initOss = async () => {
+  Oss = await OssConfig()
+  if (!client) client = new OSS(Oss.config)
 }
+initOss()

 export default {
-	// 上传文件
-	upload(file) {
-		initOss()
-		return new Promise(async (resolve, reject) => {
-			try {
-				// 上传到阿里云oss
-				const res = await client.multipartUpload(Date.now() + '.' + Util.getFileExt(file.name), file);
-				resolve({
-					format: Util.getFileExt(file.name),
+  // 上传文件
+  upload (file) {
+    initOss()
+    return new Promise(async (resolve, reject) => {
+      try {
+        // 上传到阿里云oss
+        const res = await client.multipartUpload(Date.now() + '.' + Util.getFileExt(file.name), file);
+        resolve({
+          format: Util.getFileExt(file.name),
          name: file.name,
-          url: OssConfig.preUrl + res.name,
+          url: Oss.preUrl + res.name,
          size: file.size,
-				})
-			} catch (error) {
-				reject()
-			}
-		})
-	},
-	// 删除文件（传完整url，不是没有https的name，因为很多接口没有存name，只存url，所以统一使用url）
-	async del(url) {
-		initOss()
-		await client.delete(url.replace(OssConfig.preUrl, ''));
-	}
+        })
+      } catch (error) {
+        reject()
+      }
+    })
+  },
+  // 删除文件（传完整url，不是没有https的name，因为很多接口没有存name，只存url，所以统一使用url）
+  async del (url) {
+    initOss()
+    await client.delete(url.replace(Oss.preUrl, ''));
+  }
 }
--- a/src/config/index.js
+++ b/src/config/index.js
@ -14,7 +14,7 @@ let bankPath = `${location.origin}/banksystem` // 银行系统
 // 121.37.12.51 | 192.168.31.151
 if (isDev) {
  host = 'http://192.168.31.217:9000/'
-  host = 'http://121.37.12.51:9000/'
+  host = 'http://121.37.12.217:9000/'
  // host = 'https://occupationlab.com/'
  bankPath = `http://${location.hostname}:8093`
 } else if (isPro) {
--- a/src/views/Home.vue
+++ b/src/views/Home.vue
@ -3,11 +3,11 @@
    <div class="header" :class="{ hh: $config.isHh }">
      <img v-if="$config.isHh" src="@/assets/images/logo-hh.png" alt="" class="logo">
      <p v-else>{{ curriculumName }}</p>
-      <p v-if="isAI">账号：{{ account }}；密码：112233aa</p>
+      <p v-if="third === 'ai'">账号：{{ account }}；密码：112233aa</p>
      <el-button class="back btn" type="primary" @click="back">退出实验</el-button>
    </div>
    <template v-if="!notAllowed">
-      <iframe v-if="isAI" class="AI" src="https://ai.huorantech.cn/" frameborder="0" width="100%"></iframe>
+      <iframe v-if="third" class="AI" :src="iframeSrc" frameborder="0" width="100%"></iframe>
      <template v-else>
        <div class="top">
          <div class="language">
@ -65,7 +65,8 @@ export default {
  data () {
    return {
      Config,
-      isAI: Cookie.get('admin-isAI') == 'true' ? true : false,
+      third: Cookie.get('admin-third'), // 第三方平台用iframe嵌入
+      iframeSrc: '',
      isSubmit: Cookie.get('admin-isSubmit') == 'true' ? true : false, // 是否提交的标识
      loaded: false, // 页面是否加载完的标识，页面默认隐藏，一进来先显示加载条，接口加载完后再显示页面，不然一开始会一闪而过没有样式的页面
      loadIns: null, // loading实例
@ -109,13 +110,15 @@ export default {
    testPanel
  },
  mounted () {
-    if (this.isAI) {
+    if (this.third) {
      this.language = 'vscode'
-      this.handleAI()
+      this.third === 'ai' && this.handleAI()
+      this.iframeSrc = this.third === 'ai' ? 'https://ai.huorantech.cn/' : 'https://lowcode.izhixinyun.com/'
      document.body.style.overflow = 'hidden'
      this.loaded = true
    } else {
      Cookie.set('admin-language', 'python3.7.9')
+
      // const opened = +localStorage.getItem('opened')
      // if (opened) {
      //   localStorage.setItem('opened', opened + 1)