@dofe/infra-common 0.1.49 → 0.1.51

package/dist/encryption.service.d.ts

@@ -1,14 +1,25 @@
 /**
  * 加密服务
- * 提供对称加密/解密功能，用于敏感数据保护
+ * 提供 AES-256-GCM 对称加密/解密功能，用于敏感数据保护。
+ *
+ * 加密格式: AES256:{iv_hex}:{authTag_hex}:{ciphertext_hex}
+ *
+ * 向后兼容: 不带 AES256: 前缀的数据被视为旧版明文，解密时原样返回。
+ * 如果未配置 ENCRYPTION_KEY 环境变量，则回退到透传模式（与旧版行为一致）。
  */
 export declare class EncryptionService {
     /**
-     * 加密数据
+     * 获取加密密钥
+     */
+    private getKey;
+    /**
+     * 加密数据 (AES-256-GCM)
+     * 未配置密钥时回退到透传模式
      */
     encrypt(data: string): string;
     /**
-     * 解密数据
+     * 解密数据 (AES-256-GCM)
+     * 不带 AES256: 前缀的数据视为旧版明文
      */
     decrypt(encrypted: string): string;
 }

package/dist/encryption.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.service.d.ts","sourceRoot":"","sources":["../../../packages/common/src/encryption.service.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,qBACa,iBAAiB;IAC5B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAK7B;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAInC"}
+{"version":3,"file":"encryption.service.d.ts","sourceRoot":"","sources":["../../../packages/common/src/encryption.service.ts"],"names":[],"mappings":"AAOA;;;;;;;;GAQG;AACH,qBACa,iBAAiB;IAC5B;;OAEG;IACH,OAAO,CAAC,MAAM;IAQd;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAa7B;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CA4BnC"}

package/dist/encryption.service.js

@@ -1,31 +1,118 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EncryptionService = void 0;
 const common_1 = require("@nestjs/common");
+const crypto = __importStar(require("crypto"));
+const AES_PREFIX = 'AES256:';
+const KEY_LENGTH = 32; // 256-bit key
+const IV_LENGTH = 16; // 128-bit IV for GCM
 /**
  * 加密服务
- * 提供对称加密/解密功能，用于敏感数据保护
+ * 提供 AES-256-GCM 对称加密/解密功能，用于敏感数据保护。
+ *
+ * 加密格式: AES256:{iv_hex}:{authTag_hex}:{ciphertext_hex}
+ *
+ * 向后兼容: 不带 AES256: 前缀的数据被视为旧版明文，解密时原样返回。
+ * 如果未配置 ENCRYPTION_KEY 环境变量，则回退到透传模式（与旧版行为一致）。
  */
 let EncryptionService = class EncryptionService {
     /**
-     * 加密数据
+     * 获取加密密钥
+     */
+    getKey() {
+        const key = process.env.ENCRYPTION_KEY;
+        if (!key || key.length < KEY_LENGTH) {
+            return null;
+        }
+        return Buffer.from(key.slice(0, KEY_LENGTH), 'utf8');
+    }
+    /**
+     * 加密数据 (AES-256-GCM)
+     * 未配置密钥时回退到透传模式
      */
     encrypt(data) {
-        // TODO: 实现实际加密逻辑
-        return data;
+        if (data == null)
+            return data;
+        const key = this.getKey();
+        if (!key)
+            return data;
+        const iv = crypto.randomBytes(IV_LENGTH);
+        const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+        let encrypted = cipher.update(String(data), 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        const authTag = cipher.getAuthTag();
+        return `${AES_PREFIX}${iv.toString('hex')}:${authTag.toString('hex')}:${encrypted}`;
     }
     /**
-     * 解密数据
+     * 解密数据 (AES-256-GCM)
+     * 不带 AES256: 前缀的数据视为旧版明文
      */
     decrypt(encrypted) {
-        // TODO: 实现实际解密逻辑
-        return encrypted;
+        if (encrypted == null)
+            return encrypted;
+        if (typeof encrypted !== 'string' || !encrypted.startsWith(AES_PREFIX)) {
+            return encrypted;
+        }
+        const key = this.getKey();
+        if (!key)
+            return encrypted;
+        try {
+            const payload = encrypted.slice(AES_PREFIX.length);
+            const sep1 = payload.indexOf(':');
+            const sep2 = payload.indexOf(':', sep1 + 1);
+            if (sep1 === -1 || sep2 === -1)
+                return encrypted;
+            const iv = Buffer.from(payload.slice(0, sep1), 'hex');
+            const authTag = Buffer.from(payload.slice(sep1 + 1, sep2), 'hex');
+            const ciphertext = payload.slice(sep2 + 1);
+            const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+            decipher.setAuthTag(authTag);
+            let decrypted = decipher.update(ciphertext, 'hex', 'utf8');
+            decrypted += decipher.final('utf8');
+            return decrypted;
+        }
+        catch {
+            return encrypted;
+        }
     }
 };
 exports.EncryptionService = EncryptionService;

package/dist/encryption.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.service.js","sourceRoot":"","sources":["../../../packages/common/src/encryption.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAE5C;;;GAGG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC5B;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,iBAAiB;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiB;QACvB,iBAAiB;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AAhBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;GACA,iBAAiB,CAgB7B"}
+{"version":3,"file":"encryption.service.js","sourceRoot":"","sources":["../../../packages/common/src/encryption.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,+CAAiC;AAEjC,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,cAAc;AACrC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAE,qBAAqB;AAE5C;;;;;;;;GAQG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC5B;;OAEG;IACK,MAAM;QACZ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAY;QAClB,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3D,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,GAAG,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;IACtF,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,SAAiB;QACvB,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAE3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;YAC5C,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YAEjD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAClE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAE3C,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACjE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC3D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF,CAAA;AA7DY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;GACA,iBAAiB,CA6D7B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dofe/infra-common",
-  "version": "0.1.49",
+  "version": "0.1.51",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -395,8 +395,8 @@
     "uuid": "^14.0.0",
     "winston": "^3.13.0",
     "zod": "^4.3.6",
-    "@dofe/infra-contracts": "^0.1.49",
-    "@dofe/infra-redis": "^0.1.49"
+    "@dofe/infra-redis": "^0.1.51",
+    "@dofe/infra-contracts": "^0.1.51"
   },
   "dependencies": {
     "@dofe/infra-i18n": "^0.1.48",