@cloudbase/manager-node 5.5.3 → 5.5.4

package/lib/env/index.js

@@ -12,6 +12,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.EnvService = void 0;
 const cos_nodejs_sdk_v5_1 = __importDefault(require("cos-nodejs-sdk-v5"));
 const util_1 = __importDefault(require("util"));
+const http_request_1 = require("../utils/http-request");
+const signature_nodejs_1 = require("@cloudbase/signature-nodejs");
 const error_1 = require("../error");
 const utils_1 = require("../utils");
 const constant_1 = require("../constant");
@@ -26,6 +28,7 @@ class EnvService {
         this.tcbService = new utils_1.CloudService(environment.cloudBaseContext, 'tcb', '2018-06-08');
         this.commonService = environment.getCommonService('lowcode', '2021-01-08');
         this.billingService = new billing_1.BillingService(environment.cloudBaseContext);
+        this.tokenCache = new Map();
     }
     /**
      * 列出所有环境
@@ -410,6 +413,74 @@ class EnvService {
     async describeApiKeyList(options) {
         return this.tcbService.request('DescribeApiKeyList', Object.assign({ EnvId: this.envId }, options));
     }
+    /**
+     * 根据密钥信息获取管理员访问令牌
+     * 使用 secretId、secretKey 和 sessionToken 签发访问令牌
+     * 默认从初始化时的 cloudBaseContext 中读取密钥，也可显式传入 credentials 覆盖
+     * @param {Object} [credentials] 密钥信息，不传则使用初始化时的密钥
+     * @param {string} credentials.secretId 密钥ID
+     * @param {string} credentials.secretKey 密钥Key
+     * @param {string} [credentials.token] sessionToken
+     * @returns {Promise<string>} 访问令牌
+     */
+    async getAdminAccessToken(credentials) {
+        const { secretId, secretKey, token } = credentials || this.environment.cloudBaseContext;
+        if (!secretId || !secretKey) {
+            throw new error_1.CloudBaseError('missing secretId or secretKey of tencent cloud');
+        }
+        const envId = this.envId;
+        const cacheKey = `access_token_secret_${envId}_${secretId}`;
+        const cached = this.tokenCache.get(cacheKey);
+        if (cached && cached.expiry > Date.now()) {
+            return cached.token;
+        }
+        const host = `${envId}${this.environment.cloudBaseContext.isInternalEndpoint()
+            ? '.api.intl.tcloudbasegateway.com'
+            : '.api.tcloudbasegateway.com'}`;
+        const url = `https://${host}/auth/v1/token/clientCredential`;
+        const method = 'POST';
+        const headers = {
+            'Content-Type': 'application/json',
+            Host: host,
+        };
+        const data = { grant_type: 'client_credentials' };
+        const timestamp = Math.floor(new Date().getTime() / 1000) - 1;
+        const { authorization, timestamp: signTimestamp } = (0, signature_nodejs_1.sign)({
+            secretId,
+            secretKey,
+            method,
+            url,
+            headers,
+            params: data,
+            timestamp,
+            withSignedParams: false,
+            isCloudApi: true,
+        });
+        headers['Authorization'] = `${authorization}, Timestamp=${signTimestamp}${token ? `, Token=${token}` : ''}`;
+        headers['X-Signature-Expires'] = 600;
+        headers['X-Timestamp'] = signTimestamp;
+        try {
+            const response = await (0, http_request_1.fetch)(url, {
+                method,
+                headers,
+                body: JSON.stringify(data),
+            });
+            const res = await response.json();
+            const access_token = res === null || res === void 0 ? void 0 : res.access_token;
+            const expires_in = (res === null || res === void 0 ? void 0 : res.expires_in) || 0;
+            if (access_token && expires_in) {
+                this.tokenCache.set(cacheKey, {
+                    token: access_token,
+                    expiry: Date.now() + (expires_in * 1000) / 2,
+                });
+            }
+            return access_token;
+        }
+        catch (e) {
+            console.log(e);
+            throw e;
+        }
+    }
     // 创建自定义登录私钥
     async createCustomLoginKeys() {
         return this.cloudService.request('CreateCustomLoginKeys', {

package/lib/storage/index.js

@@ -1335,8 +1335,8 @@ class StorageService {
                 typeof cacheControl === 'number' ? `max-age=${cacheControl}` : String(cacheControl);
         }
         if (metadata) {
-            // X-Metadata 放在 Header 里，具体大小限制由服务端/网关决定
-            headers['X-Metadata'] = Buffer.from(JSON.stringify(metadata), 'utf8').toString('base64');
+            // x-metadata 放在 Header 里，具体大小限制由服务端/网关决定
+            headers['x-metadata'] = Buffer.from(JSON.stringify(metadata), 'utf8').toString('base64');
         }
         if (upsert) {
             headers['x-upsert'] = 'true';

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@cloudbase/manager-node",
-    "version": "5.5.3",
+    "version": "5.5.4",
     "description": "The node manage service api for cloudbase.",
     "main": "lib/index.js",
     "scripts": {
@@ -41,6 +41,7 @@
         "typescript": "^5.8.3"
     },
     "dependencies": {
+        "@cloudbase/signature-nodejs": "^1.0.0",
         "@cloudbase/database": "^0.6.2",
         "archiver": "^3.1.1",
         "cos-nodejs-sdk-v5": "^2.14.0",

package/types/env/index.d.ts

@@ -559,6 +559,7 @@ export declare class EnvService {
     private envType?;
     private commonService;
     private billingService;
+    private tokenCache;
     constructor(environment: Environment);
     /**
      * 列出所有环境
@@ -779,6 +780,21 @@ export declare class EnvService {
      * @returns {Promise<IDescribeApiKeyListRes>}
      */
     describeApiKeyList(options?: IDescribeApiKeyListParams): Promise<IDescribeApiKeyListRes>;
+    /**
+     * 根据密钥信息获取管理员访问令牌
+     * 使用 secretId、secretKey 和 sessionToken 签发访问令牌
+     * 默认从初始化时的 cloudBaseContext 中读取密钥，也可显式传入 credentials 覆盖
+     * @param {Object} [credentials] 密钥信息，不传则使用初始化时的密钥
+     * @param {string} credentials.secretId 密钥ID
+     * @param {string} credentials.secretKey 密钥Key
+     * @param {string} [credentials.token] sessionToken
+     * @returns {Promise<string>} 访问令牌
+     */
+    getAdminAccessToken(credentials?: {
+        secretId: string;
+        secretKey: string;
+        token?: string;
+    }): Promise<string>;
     createCustomLoginKeys(): Promise<{
         PrivateKey: string;
         KeyID: string;

package/types/storage/type.d.ts

@@ -18,7 +18,7 @@ export interface IUploadObjectHttpOptions {
      * 缓存控制；传 number 自动转换为 max-age=<value>，传 string 直接作为 Cache-Control 头值
      */
     cacheControl?: number | string;
-    /** 自定义 metadata（JSON 对象），将以 Base64 编码后放入 X-Metadata 头 */
+    /** 自定义 metadata（JSON 对象），将以 Base64 编码后放入 x-metadata 头 */
     metadata?: Record<string, any>;
     /** 爬虫指令（X-Robots-Tag 头） */
     xRobotsTag?: string;