@lingjingai/lj-awb-cli-pre 0.3.15

package/packages/awb-core/src/auth.js

@@ -0,0 +1,80 @@
+import {
+  LingjingAwbCliError,
+  AUTH_PATH,
+  maskSecret,
+  nowIso,
+  readJson,
+  resolveRuntimeAccessKey,
+  trimSecret,
+  writeJson,
+} from './common.js';
+
+export async function loadAuth() {
+  return await readJson(AUTH_PATH, {});
+}
+
+export async function saveAuth(auth) {
+  const stored = {
+    ...auth,
+    updatedAt: Date.now(),
+    updatedAtText: nowIso(),
+  };
+  await writeJson(AUTH_PATH, stored, { secure: true });
+  return stored;
+}
+
+export async function clearAuth() {
+  await writeJson(AUTH_PATH, {}, { secure: true });
+}
+
+export async function resolveAuthContext({ required = true } = {}) {
+  const savedAuth = await loadAuth();
+  const accessKeyInfo = resolveRuntimeAccessKey(savedAuth);
+  if (!accessKeyInfo) {
+    if (!required) {
+      return { authenticated: false, auth: savedAuth, accessKeyInfo: null };
+    }
+    throw new LingjingAwbCliError('缺少 access key', {
+      type: 'auth_required',
+      exitCode: 3,
+      hint: '请设置 LINGJING_AWB_ACCESS_KEY / AWB_ACCESS_KEY，或运行 lj-awb auth login。',
+    });
+  }
+  return {
+    authenticated: true,
+    auth: savedAuth,
+    accessKeyInfo,
+    accessKey: accessKeyInfo.accessKey,
+  };
+}
+
+export function summarizeAuth(auth, accessKeyInfo = null) {
+  const info = accessKeyInfo || resolveRuntimeAccessKey(auth);
+  return {
+    loginState: info ? '已配置' : '未配置',
+    authType: info ? 'access_key' : null,
+    accessKey: info ? maskSecret(info.accessKey) : null,
+    accessKeySource: info?.source ?? null,
+    accessKeySourceName: info?.sourceName ?? null,
+    authPath: AUTH_PATH,
+    updatedAt: auth?.updatedAt ?? null,
+    updatedAtText: auth?.updatedAtText ?? null,
+  };
+}
+
+export async function saveAccessKey(rawAccessKey, options = {}) {
+  const accessKey = trimSecret(rawAccessKey);
+  if (!accessKey) {
+    throw new LingjingAwbCliError('access key 不能为空', {
+      type: 'argument_error',
+      exitCode: 2,
+    });
+  }
+  const auth = await saveAuth({
+    accessKey,
+    awbCode: accessKey,
+    authType: 'access_key',
+    verified: Boolean(options.verified),
+  });
+  return { auth, accessKey };
+}