@cloudbase/manager-node 5.5.2 → 5.5.3-beta.0

package/lib/database/index.js

@@ -46,6 +46,14 @@ class DatabaseService {
             Tag: Databases[0].InstanceId
         };
     }
+    getMongoConnector() {
+        const currEnv = this.environment;
+        const { Databases } = currEnv.lazyEnvironmentConfig;
+        return {
+            DatabaseName: Databases[0].InstanceId,
+            InstanceId: 'flexdb'
+        };
+    }
     async checkCollectionExists(collectionName) {
         try {
             const result = await this.describeCollection(collectionName);
@@ -63,10 +71,10 @@ class DatabaseService {
         }
     }
     async createCollection(collectionName) {
-        let { Tag } = this.getDatabaseConfig();
+        const MongoConnector = this.getMongoConnector();
         const res = await this.dbOpService.request('CreateTable', {
             EnvId: this.envId,
-            Tag,
+            MongoConnector,
             TableName: collectionName
         });
         return res;
@@ -75,10 +83,10 @@ class DatabaseService {
         // 先检查当前集合是否存在
         const existRes = await this.checkCollectionExists(collectionName);
         if (existRes.Exists) {
-            let { Tag } = this.getDatabaseConfig();
+            const MongoConnector = this.getMongoConnector();
             const res = await this.dbOpService.request('DeleteTable', {
                 EnvId: this.envId,
-                Tag,
+                MongoConnector,
                 TableName: collectionName
             });
             return res;
@@ -88,15 +96,15 @@ class DatabaseService {
         }
     }
     async updateCollection(collectionName, indexiesInfo) {
-        let { Tag } = this.getDatabaseConfig();
-        const res = await this.dbOpService.request('UpdateTable', Object.assign({ EnvId: this.envId, Tag, TableName: collectionName }, indexiesInfo));
+        const MongoConnector = this.getMongoConnector();
+        const res = await this.dbOpService.request('UpdateTable', Object.assign({ EnvId: this.envId, MongoConnector, TableName: collectionName }, indexiesInfo));
         return res;
     }
     async describeCollection(collectionName) {
-        let { Tag } = this.getDatabaseConfig();
+        const MongoConnector = this.getMongoConnector();
         return this.dbOpService.request('DescribeTable', {
             EnvId: this.envId,
-            Tag,
+            MongoConnector,
             TableName: collectionName
         });
     }
@@ -105,14 +113,14 @@ class DatabaseService {
         MgoLimit: this.DEFAULT_MGO_LIMIT,
         MgoOffset: this.DEFAULT_MGO_OFFSET
     }) {
-        let { Tag } = this.getDatabaseConfig();
+        const MongoConnector = this.getMongoConnector();
         if (options.MgoLimit === undefined) {
             options.MgoLimit = this.DEFAULT_MGO_LIMIT;
         }
         if (options.MgoOffset === undefined) {
             options.MgoOffset = this.DEFAULT_MGO_OFFSET;
         }
-        const res = await this.dbOpService.request('ListTables', Object.assign({ EnvId: this.envId, Tag }, options));
+        const res = await this.dbOpService.request('ListTables', Object.assign({ EnvId: this.envId, MongoConnector }, options));
         if (res.Tables === null) {
             // 无集合
             res.Collections = [];
@@ -277,12 +285,16 @@ class DatabaseService {
     }
     /**
      * 执行文档型数据库命令
-     * @param options 命令参数（命令列表、可选的 Tag/EnvId/MongoConnector）
+     * @param options 命令参数（命令列表、可选的 EnvId/MongoConnector）
      * @returns 执行结果，Data 为 JSON 字符串数组
      */
     async runCommands(options) {
-        let { Tag } = this.getDatabaseConfig();
-        return this.dbOpService.request('RunCommands', Object.assign({ MgoCommands: options.MgoCommands, Tag: options.Tag || Tag, EnvId: options.EnvId || this.envId }, (options.MongoConnector ? { MongoConnector: options.MongoConnector } : {})));
+        const MongoConnector = options.MongoConnector || this.getMongoConnector();
+        return this.dbOpService.request('RunCommands', {
+            MgoCommands: options.MgoCommands,
+            MongoConnector,
+            EnvId: options.EnvId || this.envId,
+        });
     }
     /**
      * 在 PostgreSQL 数据库上执行 SQL 语句

package/lib/env/index.js

@@ -12,6 +12,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.EnvService = void 0;
 const cos_nodejs_sdk_v5_1 = __importDefault(require("cos-nodejs-sdk-v5"));
 const util_1 = __importDefault(require("util"));
+const http_request_1 = require("../utils/http-request");
+const signature_nodejs_1 = require("@cloudbase/signature-nodejs");
 const error_1 = require("../error");
 const utils_1 = require("../utils");
 const constant_1 = require("../constant");
@@ -26,6 +28,7 @@ class EnvService {
         this.tcbService = new utils_1.CloudService(environment.cloudBaseContext, 'tcb', '2018-06-08');
         this.commonService = environment.getCommonService('lowcode', '2021-01-08');
         this.billingService = new billing_1.BillingService(environment.cloudBaseContext);
+        this.tokenCache = new Map();
     }
     /**
      * 列出所有环境
@@ -410,6 +413,74 @@ class EnvService {
     async describeApiKeyList(options) {
         return this.tcbService.request('DescribeApiKeyList', Object.assign({ EnvId: this.envId }, options));
     }
+    /**
+     * 根据密钥信息获取管理员访问令牌
+     * 使用 secretId、secretKey 和 sessionToken 签发访问令牌
+     * 默认从初始化时的 cloudBaseContext 中读取密钥，也可显式传入 credentials 覆盖
+     * @param {Object} [credentials] 密钥信息，不传则使用初始化时的密钥
+     * @param {string} credentials.secretId 密钥ID
+     * @param {string} credentials.secretKey 密钥Key
+     * @param {string} [credentials.token] sessionToken
+     * @returns {Promise<string>} 访问令牌
+     */
+    async getAdminAccessToken(credentials) {
+        const { secretId, secretKey, token } = credentials || this.environment.cloudBaseContext;
+        if (!secretId || !secretKey) {
+            throw new error_1.CloudBaseError('missing secretId or secretKey of tencent cloud');
+        }
+        const envId = this.envId;
+        const cacheKey = `access_token_secret_${envId}_${secretId}`;
+        const cached = this.tokenCache.get(cacheKey);
+        if (cached && cached.expiry > Date.now()) {
+            return cached.token;
+        }
+        const host = `${envId}${this.environment.cloudBaseContext.isInternalEndpoint()
+            ? '.api.intl.tcloudbasegateway.com'
+            : '.api.tcloudbasegateway.com'}`;
+        const url = `https://${host}/auth/v1/token/clientCredential`;
+        const method = 'POST';
+        const headers = {
+            'Content-Type': 'application/json',
+            Host: host,
+        };
+        const data = { grant_type: 'client_credentials' };
+        const timestamp = Math.floor(new Date().getTime() / 1000) - 1;
+        const { authorization, timestamp: signTimestamp } = (0, signature_nodejs_1.sign)({
+            secretId,
+            secretKey,
+            method,
+            url,
+            headers,
+            params: data,
+            timestamp,
+            withSignedParams: false,
+            isCloudApi: true,
+        });
+        headers['Authorization'] = `${authorization}, Timestamp=${signTimestamp}${token ? `, Token=${token}` : ''}`;
+        headers['X-Signature-Expires'] = 600;
+        headers['X-Timestamp'] = signTimestamp;
+        try {
+            const response = await (0, http_request_1.fetch)(url, {
+                method,
+                headers,
+                body: JSON.stringify(data),
+            });
+            const res = await response.json();
+            const access_token = res === null || res === void 0 ? void 0 : res.access_token;
+            const expires_in = (res === null || res === void 0 ? void 0 : res.expires_in) || 0;
+            if (access_token && expires_in) {
+                this.tokenCache.set(cacheKey, {
+                    token: access_token,
+                    expiry: Date.now() + (expires_in * 1000) / 2,
+                });
+            }
+            return access_token;
+        }
+        catch (e) {
+            console.log(e);
+            throw e;
+        }
+    }
     // 创建自定义登录私钥
     async createCustomLoginKeys() {
         return this.cloudService.request('CreateCustomLoginKeys', {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@cloudbase/manager-node",
-    "version": "5.5.2",
+    "version": "5.5.3-beta.0",
     "description": "The node manage service api for cloudbase.",
     "main": "lib/index.js",
     "scripts": {
@@ -41,6 +41,7 @@
         "typescript": "^5.8.3"
     },
     "dependencies": {
+        "@cloudbase/signature-nodejs": "^1.0.0",
         "@cloudbase/database": "^0.6.2",
         "archiver": "^3.1.1",
         "cos-nodejs-sdk-v5": "^2.14.0",

package/types/database/index.d.ts

@@ -155,6 +155,7 @@ export declare class DatabaseService {
     constructor(environment: Environment);
     getCurrEnvironment(): Environment;
     getDatabaseConfig(): IDatabaseConfig;
+    getMongoConnector(): IMongoConnector;
     checkCollectionExists(collectionName: string): Promise<IExistsRes>;
     createCollection(collectionName: string): Promise<any>;
     deleteCollection(collectionName: string): Promise<any>;
@@ -197,7 +198,7 @@ export declare class DatabaseService {
     restoreTables(time: string, modifyTableNamesInfo: IModifyTableNamesInfo[], instanceId?: string): Promise<IRestoreTCBTablesResult>;
     /**
      * 执行文档型数据库命令
-     * @param options 命令参数（命令列表、可选的 Tag/EnvId/MongoConnector）
+     * @param options 命令参数（命令列表、可选的 EnvId/MongoConnector）
      * @returns 执行结果，Data 为 JSON 字符串数组
      */
     runCommands(options: IRunCommandsOptions): Promise<IRunCommandsResult>;

package/types/env/index.d.ts

@@ -559,6 +559,7 @@ export declare class EnvService {
     private envType?;
     private commonService;
     private billingService;
+    private tokenCache;
     constructor(environment: Environment);
     /**
      * 列出所有环境
@@ -779,6 +780,21 @@ export declare class EnvService {
      * @returns {Promise<IDescribeApiKeyListRes>}
      */
     describeApiKeyList(options?: IDescribeApiKeyListParams): Promise<IDescribeApiKeyListRes>;
+    /**
+     * 根据密钥信息获取管理员访问令牌
+     * 使用 secretId、secretKey 和 sessionToken 签发访问令牌
+     * 默认从初始化时的 cloudBaseContext 中读取密钥，也可显式传入 credentials 覆盖
+     * @param {Object} [credentials] 密钥信息，不传则使用初始化时的密钥
+     * @param {string} credentials.secretId 密钥ID
+     * @param {string} credentials.secretKey 密钥Key
+     * @param {string} [credentials.token] sessionToken
+     * @returns {Promise<string>} 访问令牌
+     */
+    getAdminAccessToken(credentials?: {
+        secretId: string;
+        secretKey: string;
+        token?: string;
+    }): Promise<string>;
     createCustomLoginKeys(): Promise<{
         PrivateKey: string;
         KeyID: string;