fhrons-mobile-next 2.0.5 → 2.0.6-beta.0

package/tests/crypto-vectors.json

@@ -0,0 +1,46 @@
+{
+  "description": "2026/10/27 gongml [需求 待补充] 从用户提供的原始JS生成的测试向量；换钥后需同步重新生成",
+  "keyFingerprint": "196af9ef9904021d3901857d8efea5f73f205d515e12cc4eb487781d8baf88ce",
+  "vectors": [
+    {
+      "input": "",
+      "encrypted": ""
+    },
+    {
+      "input": "123456",
+      "encrypted": "GVwmud8sJbfkvimcp3tDYA=="
+    },
+    {
+      "input": "P@ssWord_2026!",
+      "encrypted": "W8VH72O0AWjleIyrPAXXnQ=="
+    },
+    {
+      "input": "中文密码测试",
+      "encrypted": "ni6Pac84PpP4dYURVy/wQGVGnNdSZhw+yLxvN+Hxhnc="
+    },
+    {
+      "input": "aaaaaaaaaaaaaaa",
+      "encrypted": "oUvGpGsp5gJu/H/v916O6Q=="
+    },
+    {
+      "input": "aaaaaaaaaaaaaaaa",
+      "encrypted": "GAKYuhzXBB9PTHjY2BehwmGQY9tmQelw+nbU+rRsJd8="
+    },
+    {
+      "input": "aaaaaaaaaaaaaaaaa",
+      "encrypted": "GAKYuhzXBB9PTHjY2BehwtgK1VErXDPkRPfWFaiddMA="
+    },
+    {
+      "input": "emoji😀测试",
+      "encrypted": "an8PLfuVi8rdozHJ0q0NbsMx1HpZDWnHVq7gB6zfbys="
+    },
+    {
+      "input": "line\nbreak\t空格 ",
+      "encrypted": "FXTf5ytUh3dA+VOH2TwGf05ySu8VRKN++IGtGuZVZps="
+    },
+    {
+      "input": "{\"status\":\"SUCCESS\",\"tmpSecretId\":\"test-id\",\"tmpSecretKey\":\"test-only\",\"token\":\"test-token\"}",
+      "encrypted": "ybzBJqxEAwZhpDtjdzfOLCSHOadOdQKMDHkS+HapGI+tWOV/O27cUYn03paeq6AS9g4tuAkPISCqsHai3WSuyQfAe/H7d1m6CxXizFW+iGUEsmtU1LsP2OJHRS7QTue0"
+    }
+  ]
+}

package/tests/crypto.cjs

@@ -0,0 +1,90 @@
+// 2026/10/27 gongml [需求 待补充] 验证原SM4协议、全局兼容入口、上传内置解密和发布文件完整性
+const assert = require('assert');
+const fs = require('fs');
+const path = require('path');
+const vm = require('vm');
+const { createHash } = require('crypto');
+const root = path.resolve(__dirname, '..');
+const cryptoDir = path.join(root, 'assets/js/crypto');
+const config = require(path.join(cryptoDir, 'config'));
+const codec = require(path.join(cryptoDir, 'legacy.cjs'));
+let checks = 0;
+function check(value, message) {
+    assert.ok(value, message);
+    checks += 1;
+}
+const baseline = require('./crypto-vectors.json');
+check(createHash('sha256').update(config.secretKey).digest('hex') === baseline.keyFingerprint, '换钥后请使用服务端确认的原始脚本重新生成测试向量');
+const samples = baseline.vectors.map(item => item.input);
+for (const { input, encrypted } of baseline.vectors) {
+    check(codec.encrypt(input) === encrypted, '与用户原始JS测试向量不一致');
+    check(codec.decrypt(encrypted) === input, '原始密文解密失败');
+}
+check(codec.encrypt(null) === '', '保留原脚本null输入行为');
+const wrapper = fs.readFileSync(path.join(cryptoDir, 'index.js'), 'utf8')
+    .replace("import FHEncrypt from './legacy.cjs';", '')
+    .replace(/^export const /gm, 'const ')
+    .replace('export default FHEncrypt;', '');
+const browser = { window: {}, FHEncrypt: codec };
+vm.runInNewContext(wrapper, browser);
+check(browser.window.FHENCYPT === codec, '模块加载时同步注册全局兼容对象');
+vm.runInNewContext(wrapper, { FHEncrypt: codec });
+checks += 1;
+const rootEntry = fs.readFileSync(path.join(root, 'index.js'), 'utf8');
+check(rootEntry.indexOf("from './assets/js/crypto'") < rootEntry.indexOf("import './fhcommon/dist/fhcommon.min.js'"), '加密入口必须在公共包之前初始化');
+const uploadSource = fs.readFileSync(path.join(root, 'fhcommon/upload.js'), 'utf8');
+check(uploadSource.includes("import FHEncrypt from '../assets/js/crypto'"), '上传显式导入本地实现');
+check(uploadSource.includes('FHEncrypt.decrypt(res.data || res)'), '上传响应使用本地解密');
+check(!uploadSource.includes('fhEncypt.js'), '上传源码不能请求远程加密脚本');
+const distPath = path.join(root, 'fhcommon/dist/fhcommon.min.js');
+const dist = fs.readFileSync(distPath, 'utf8');
+check(!dist.includes('fhEncypt.js'), '发布产物不能包含远程加密脚本地址，请先执行npm run build:common');
+const Vue = { use(plugin) { plugin.install(this); }, component() {} };
+const isolatedWindow = { Vue, axios: {}, COS: {}, lrz: {}, html2canvas: {} };
+const context = { window: isolatedWindow, self: isolatedWindow, console, process: { env: {} }, setTimeout, clearTimeout, setInterval, clearInterval, URL, URLSearchParams, TextEncoder, TextDecoder, navigator: { userAgent: 'crypto-test' } };
+try {
+    vm.runInNewContext(dist, context);
+} catch (error) {
+    throw new Error(`公共发布包加载失败: ${error.message}`);
+}
+check(typeof isolatedWindow.FHENCYPT.encrypt === 'function', '公共发布包独立加载也能初始化加密入口');
+for (const input of samples) {
+    check(isolatedWindow.FHENCYPT.encrypt(input) === codec.encrypt(input), '公共发布包和源码加密结果一致');
+    check(isolatedWindow.FHENCYPT.decrypt(codec.encrypt(input)) === input, '公共发布包和源码交叉解密一致');
+}
+// 2026/10/27 gongml [需求 待补充] 无全局加密对象时验证真实上传函数的凭证解密和错误传播
+async function verifyUpload() {
+    const credentials = { status: 'SUCCESS', tmpSecretId: 'test-id', tmpSecretKey: 'test-only', token: 'test-token', sessionToken: 'session-test', bucketName: 'test-bucket', region: 'test-region', cdnUrl: 'https://example.invalid' };
+    let response = { data: codec.encrypt(JSON.stringify(credentials)) };
+    let uploaded = 0;
+    const requests = [];
+    function MockCOS(options) {
+        options.getAuthorization({}, value => check(value.TmpSecretKey === credentials.tmpSecretKey, '上传使用正确解密后的临时凭证'));
+        this.putObject = value => {
+            check(value.Key === 'test/file.png', '上传保持原对象路径');
+            uploaded += 1;
+            return Promise.resolve({ statusCode: 200 });
+        };
+    }
+    const axios = { post(url, data) { requests.push({ url, data }); return Promise.resolve(response); } };
+    const mockWindow = { axios, COS: MockCOS, lrz: {} };
+    const scope = { FHEncrypt: codec, window: mockWindow, axios, COS: MockCOS, process: { env: { VUE_APP_NAME: 'crypto-test', VUE_APP_ENV_CONFIG: 'uat' } }, location: { origin: 'https://example.invalid' }, console: { log() {}, error() {} } };
+    vm.createContext(scope);
+    vm.runInContext(uploadSource.replace(/^import FHEncrypt[^\n]+/m, '').replace(/^export /gm, ''), scope);
+    const param = { file: { name: 'file.png', type: 'image/png' }, keyFunc: () => '/test/file.png' };
+    const url = await scope.upload(param);
+    check(url === 'https://example.invalid/test/file.png', '上传返回原协议文件地址');
+    check(!mockWindow.FHENCYPT, '上传不依赖全局加密对象');
+    check(requests.length === 1 && requests[0].url === '/funapi/cbsconfig/oss/secureSign', '仅请求上传凭证接口');
+    response = { data: credentials };
+    await scope.upload(param);
+    check(uploaded === 2, '继续兼容未加密对象响应');
+    response = { data: codec.encrypt(JSON.stringify({ status: 'FAILED', message: 'test failure' })) };
+    await assert.rejects(scope.upload(param), /test failure/);
+    checks += 1;
+    check(uploaded === 2, '接口失败时不执行上传');
+}
+verifyUpload().then(() => process.stdout.write(`crypto checks passed: ${checks}\n`)).catch(error => {
+    process.stderr.write(`${error.stack}\n`);
+    process.exitCode = 1;
+});

package/fhcommon/index.js

@@ -1,33 +0,0 @@
-// import FHCommon from './dist/fhcommon.min.js'
-// if (typeof window !== 'undefined' && window.Vue) {
-//     window.Vue.use(FHCommon)
-//     window.FHUpload = FHCommon
-// }
-
-// // expose FHCommon as default export
-// export default FHCommon;
-
-// 由于minio不支持esm模块导入，也就不支持treeshaking来去掉未用到的minio代码，所以只能准备两套代码
-import { upload, compressFile, loopCompressFile } from './upload'
-import { getDomImage } from './packages/html2canvas'
-
-import FHImage from "./packages/fhImage";
-import FHPresetImage from "./packages/fhPresetImage";
-const FHCommon = {
-    upload: upload,
-    compressFile: compressFile,
-    loopCompressFile: loopCompressFile,
-    getDomImage,
-    install (Vue) {
-        window.FHCommon = FHCommon
-        Vue.component('FHImage',FHImage)
-        Vue.component('FHPresetImage',FHPresetImage)
-    }
-}
-if (typeof window !== 'undefined' && window.Vue) {
-    window.Vue.use(FHCommon)
-    window.FHUpload = FHCommon
-}
-
-// expose FHCommon as default export
-export default FHCommon;

package/fhcommon/package.json

@@ -1,40 +0,0 @@
-{
-    "name": "fhcommon",
-    "version": "2.0.0",
-    "description": "泛华前端的上传方法",
-    "main": "dist/fhcommon.min.js",
-    "module": "dist/fhcommon.min.js",
-    "devDependencies": {
-        "@babel/core": "^7.25.8",
-        "@babel/preset-env": "^7.25.8",
-        "babel-loader": "^9.1.3",
-        "crypto-browserify": "^3.12.0",
-        "css-loader": "^6.7.4",
-        "eslint": "^9.0.0",
-        "https-browserify": "^1.0.0",
-        "less-loader": "^11.1.4",
-        "path-browserify": "^1.0.1",
-        "stream-browserify": "^3.0.0",
-        "stream-http": "^3.2.0",
-        "style-loader": "^3.3.3",
-        "terser-webpack-plugin": "^5.3.10",
-        "timers-browserify": "^2.0.12",
-        "uglify-js": "^3.17.4",
-        "vm-browserify": "^1.1.2",
-        "vue-loader": "^15.9.8",
-        "vue-template-compiler": "^2.7.16",
-        "webpack": "^5.91.0",
-        "webpack-cli": "^5.0.0",
-        "webpack-dev-server": "^5.0.4"
-    },
-    "scripts": {
-        "test": "echo \"Error: no test specified\" && exit 1",
-        "build": "npx webpack --config webpack.config.js"
-    },
-    "author": "",
-    "license": "ISC",
-    "dependencies": {
-        "core-js": "^3.38.1",
-        "minio": "^7.0.18"
-    }
-}