module-develop-kit 1.3.1 → 1.4.0

package/dist/commonjs-virtual-dir/browser.js

@@ -1,4 +1,7 @@
-var r = { exports: {} };
+import { getDefaultExportFromCjs as r } from "./_commonjsHelpers.js";
+import { __require as e } from "../vendor/debug/src/browser.js";
+var o = e();
+const i = /* @__PURE__ */ r(o);
 export {
-  r as __module
+  i as default
 };

package/dist/commonjs-virtual-dir/browser2.js

@@ -1,7 +1,4 @@
-import { getDefaultExportFromCjs as r } from "./_commonjsHelpers.js";
-import { __require as e } from "../vendor/debug/src/browser.js";
-var o = e();
-const i = /* @__PURE__ */ r(o);
+var r = { exports: {} };
 export {
-  i as default
+  r as __module
 };

package/dist/commonjs-virtual-dir/index.js

@@ -1,5 +1,7 @@
-import { __require as r } from "../vendor/sm-crypto/src/index.js";
-var s = r();
+import { getDefaultExportFromCjs as r } from "./_commonjsHelpers.js";
+import { __require as o } from "../vendor/sdp-transform/lib/index.js";
+var t = o();
+const a = /* @__PURE__ */ r(t);
 export {
-  s
+  a as default
 };

package/dist/commonjs-virtual-dir/index2.js

@@ -1,7 +1,5 @@
-import { getDefaultExportFromCjs as r } from "./_commonjsHelpers.js";
-import { __require as o } from "../vendor/sdp-transform/lib/index.js";
-var t = o();
-const a = /* @__PURE__ */ r(t);
+import { __require as r } from "../vendor/sm-crypto/src/index.js";
+var s = r();
 export {
-  a as default
+  s
 };

package/dist/commonjs-virtual-dir/index3.js

@@ -1,5 +1,2 @@
-import { __require as r } from "../vendor/gm-crypt/index.js";
-var p = r();
-export {
-  p as g
-};
+import { __require as e } from "../vendor/ieee754/index.js";
+e();

package/dist/commonjs-virtual-dir/index4.js

@@ -1,2 +1,4 @@
-import { __require as e } from "../vendor/ieee754/index.js";
-e();
+var r = {};
+export {
+  r as __exports
+};

package/dist/commonjs-virtual-dir/index5.js

@@ -1,4 +1,4 @@
-var r = {};
+var e = {};
 export {
-  r as __exports
+  e as __exports
 };

package/dist/main.d.ts

@@ -1,3 +1,8 @@
+/// <reference path="./types/axios.d.ts" />
+
+import { AxiosResponse } from 'axios';
+import { InternalAxiosRequestConfig } from 'axios';
+import { Plugin as Plugin_2 } from 'vue';
 import { Ref } from 'vue';
 import { supportedExtensions } from 'file-type';
 import { supportedMimeTypes } from 'file-type';
@@ -22,20 +27,6 @@ export declare const ALLOWED_FILE_TYPES: {
     readonly model: Set<string>;
 };
 
-/**
- * 防重放攻击策略
- * @param uid
- * @param salt
- * @param ts
- * @param data
- * @param headers
- */
-export declare function antiReplyAttackStrategy({ uid, salt, ts, data, ...headers }: IAntiReplyAttackStrategy): {
-    "X-Sign-Timestamp": string;
-    "X-Sign-Nonce": string;
-    "X-Sign-Client": string;
-};
-
 /**
  * 用于格式化输出会话过程中的日志信息
  */
@@ -122,9 +113,11 @@ export declare enum ECallStatus {
 
 declare enum EHeaderKey {
     publicKey = "X-Public-Key",
+    gcmPublicKey = "X-Client-SM2-Public-Key",
     encryptIv = "X-Encrypted-Iv",
     encryptKey = "X-Encrypted-Key",
     encryptIvLow = "x-encrypted-iv",
+    encryptTag = "X-Encrypted-Tag",
     encryptKeyLow = "x-encrypted-key"
 }
 
@@ -172,6 +165,11 @@ export declare interface EventBusProps {
 
 declare type EventFnc = (...args: any) => void;
 
+/**
+ * gcm-crypto
+ */
+export declare const gcmCrypto: Plugin_2<IGcmCryptoOptions>;
+
 /**
  * 安全的解析html内容 防止xss攻击
  * @param input 输入的html内容
@@ -315,6 +313,39 @@ export declare interface IFileDetectionResult {
     mimeMatches?: boolean;
 }
 
+export declare interface IGcmCryptoOptions {
+    /**
+     * 获取公钥 API
+     */
+    getPublicKeyApi: () => Promise<string>;
+    /**
+     * 是否加密
+     */
+    isEncrypt: boolean;
+}
+
+/**
+ * 初始化公钥
+ */
+export declare const initPublicKey: () => Promise<void>;
+
+export declare interface IResponseDataEncryptionReturn {
+    /**
+     * 响应头
+     */
+    headers: {
+        [EHeaderKey.encryptIv]: string;
+        [EHeaderKey.encryptTag]: string;
+        [EHeaderKey.encryptKey]: string;
+    };
+    /**
+     * 加密后的数据
+     */
+    data: {
+        body: string;
+    };
+}
+
 export declare interface IResponseDataEncryptionStep {
     data: string;
     headers: Record<EHeaderKey, string>;
@@ -387,28 +418,41 @@ export declare interface IUrlSanitizeOptions {
     strictMode?: boolean;
 }
 
+/**
+ * 添加请求前加密回调
+ * @param callback
+ */
+export declare const requestDataBeforeGcmCrypto: (callback: TRequestBeforeCryptoCallBack) => void;
+
 /**
  * 请求数据加密
  * @param publicKey 公钥
- * @param _data 数据
+ * @param data 原始数据
+ * @param uri 当前请求的路径
  */
-export declare function requestDataEncryption(publicKey: string, _data?: TData): {
-    headers: {
-        "X-Encrypted-Iv": string;
-        "X-Encrypted-Key": string;
-    };
-    data: {
-        body: string;
-    };
-};
+export declare const requestDataEncryption: <T>(publicKey: string, data: T, uri: string) => IResponseDataEncryptionReturn;
+
+/**
+ * gcm 加密请求拦截器
+ */
+export declare const requestDataGcmCryptoInterceptor: <T>(config: InternalAxiosRequestConfig<T>) => InternalAxiosRequestConfig<T>;
 
 /**
  * 响应数据解密
- * @param stepCb
+ * @param sm4Key 解密后的 SM4 密钥
+ * @param data
+ * @param uri
+ * @param headers
  */
-export declare function responseDataEncryption<T>(stepCb: (_headers: {
-    [EHeaderKey.publicKey]: string;
-}) => Promise<IResponseDataEncryptionStep>): Promise<T>;
+export declare const responseDataDecryption: (sm4Key: string, data: string, uri: string, headers: IResponseDataEncryptionReturn["headers"]) => any;
+
+/**
+ * gcm 解密响应
+ * @param response
+ */
+export declare const responseDataGcmCryptoInterceptor: <T extends {
+    data: unknown;
+}>(response: AxiosResponse<T>) => AxiosResponse<T, any, {}>;
 
 /**
  * 消毒 URL，返回安全的 URL 或替代 URL
@@ -500,6 +544,8 @@ export declare type TNullable<T> = T | null;
 
 export declare type TObj<K extends keyof any = string, T = any> = Record<K, T>;
 
+declare type TRequestBeforeCryptoCallBack = (config: InternalAxiosRequestConfig) => void;
+
 export declare type TUndefinable<T> = T | undefined;
 
 /**

package/dist/main.js

@@ -1,41 +1,46 @@
-import { useCall as o } from "./src/outside-call/index.js";
+import { useCall as r } from "./src/outside-call/index.js";
 import { createCosFileName as i } from "./src/shield/create-cos-file-name.js";
-import { antiReplyAttackStrategy as a, requestDataEncryption as E, responseDataEncryption as l } from "./src/shield/crypto/index.js";
-import { ALLOWED_FILE_MIMES as n, ALLOWED_FILE_TYPES as m, detectFileByExtension as x, detectFileByMime as f, detectionFilesByExtension as S, detectionFilesByMime as d, isValidDocument as _, isValidFile as c, isValidImage as y, isValidVideo as u } from "./src/shield/file-detection.js";
-import { htmlSanitize as M } from "./src/shield/html-sanitize.js";
+import { ALLOWED_FILE_MIMES as p, ALLOWED_FILE_TYPES as a, detectFileByExtension as m, detectFileByMime as l, detectionFilesByExtension as n, detectionFilesByMime as E, isValidDocument as c, isValidFile as x, isValidImage as f, isValidVideo as y } from "./src/shield/file-detection.js";
+import { requestDataEncryption as u, responseDataDecryption as D } from "./src/shield/gcm-crypto/index.js";
+import { htmlSanitize as C } from "./src/shield/html-sanitize.js";
 import { startNoDebugger as I } from "./src/shield/no-debugger.js";
-import { isUrlSafe as g, sanitizeUrl as A, sanitizeUrls as C } from "./src/shield/url-sanitize.js";
-import { EventBus as B } from "./src/utils/eventBus.js";
-import { CallLogger as O } from "./src/outside-call/utils.js";
-import { ECallStatus as T, EMIT_EVENT_NAME as U, SIP_CODE_MESSAGE as z, SIP_ERROR_CAUSES as P } from "./src/outside-call/constants.js";
-import { supportedExtensions as b, supportedMimeTypes as h } from "./vendor/file-type/source/index.js";
+import { isUrlSafe as M, sanitizeUrl as L, sanitizeUrls as g } from "./src/shield/url-sanitize.js";
+import { EventBus as V } from "./src/utils/eventBus.js";
+import { CallLogger as G } from "./src/outside-call/utils.js";
+import { ECallStatus as O, EMIT_EVENT_NAME as P, SIP_CODE_MESSAGE as T, SIP_ERROR_CAUSES as U } from "./src/outside-call/constants.js";
+import { supportedExtensions as z, supportedMimeTypes as R } from "./vendor/file-type/source/index.js";
+import { gcmCrypto as W, initPublicKey as h, requestDataBeforeGcmCrypto as v, requestDataGcmCryptoInterceptor as K, responseDataGcmCryptoInterceptor as Y } from "./src/shield/gcm-crypto/init.js";
 export {
-  n as ALLOWED_FILE_MIMES,
-  m as ALLOWED_FILE_TYPES,
-  O as CallLogger,
-  T as ECallStatus,
-  U as EMIT_EVENT_NAME,
-  B as EventBus,
-  z as SIP_CODE_MESSAGE,
-  P as SIP_ERROR_CAUSES,
-  a as antiReplyAttackStrategy,
+  p as ALLOWED_FILE_MIMES,
+  a as ALLOWED_FILE_TYPES,
+  G as CallLogger,
+  O as ECallStatus,
+  P as EMIT_EVENT_NAME,
+  V as EventBus,
+  T as SIP_CODE_MESSAGE,
+  U as SIP_ERROR_CAUSES,
   i as createCosFileName,
-  x as detectFileByExtension,
-  f as detectFileByMime,
-  S as detectionFilesByExtension,
-  d as detectionFilesByMime,
-  M as htmlSanitize,
-  g as isUrlSafe,
-  _ as isValidDocument,
-  c as isValidFile,
-  y as isValidImage,
-  u as isValidVideo,
-  E as requestDataEncryption,
-  l as responseDataEncryption,
-  A as sanitizeUrl,
-  C as sanitizeUrls,
+  m as detectFileByExtension,
+  l as detectFileByMime,
+  n as detectionFilesByExtension,
+  E as detectionFilesByMime,
+  W as gcmCrypto,
+  C as htmlSanitize,
+  h as initPublicKey,
+  M as isUrlSafe,
+  c as isValidDocument,
+  x as isValidFile,
+  f as isValidImage,
+  y as isValidVideo,
+  v as requestDataBeforeGcmCrypto,
+  u as requestDataEncryption,
+  K as requestDataGcmCryptoInterceptor,
+  D as responseDataDecryption,
+  Y as responseDataGcmCryptoInterceptor,
+  L as sanitizeUrl,
+  g as sanitizeUrls,
   I as startNoDebugger,
-  b as supportedExtensions,
-  h as supportedMimeTypes,
-  o as useCall
+  z as supportedExtensions,
+  R as supportedMimeTypes,
+  r as useCall
 };

package/dist/src/outside-call/utils.js

@@ -1,4 +1,4 @@
-import c from "../../commonjs-virtual-dir/index2.js";
+import c from "../../commonjs-virtual-dir/index.js";
 const g = {
   log(e, ...r) {
     console.log(`%c【${(/* @__PURE__ */ new Date()).toLocaleString()}】`, "color: green; font-weight: bold;", e, ...r);

package/dist/src/shield/crypto/const.js

@@ -1,4 +1,4 @@
-var p = /* @__PURE__ */ ((c) => (c.publicKey = "X-Public-Key", c.encryptIv = "X-Encrypted-Iv", c.encryptKey = "X-Encrypted-Key", c.encryptIvLow = "x-encrypted-iv", c.encryptKeyLow = "x-encrypted-key", c))(p || {});
+var t = /* @__PURE__ */ ((c) => (c.publicKey = "X-Public-Key", c.gcmPublicKey = "X-Client-SM2-Public-Key", c.encryptIv = "X-Encrypted-Iv", c.encryptKey = "X-Encrypted-Key", c.encryptIvLow = "x-encrypted-iv", c.encryptTag = "X-Encrypted-Tag", c.encryptKeyLow = "x-encrypted-key", c))(t || {});
 export {
-  p as EHeaderKey
+  t as EHeaderKey
 };

package/dist/src/shield/crypto/sm2.js

@@ -1,7 +1,7 @@
-import { s as o } from "../../../commonjs-virtual-dir/index.js";
-const c = o.sm2.generateKeyPairHex, s = 1, a = (e, r) => `04${o.sm2.doEncrypt(r, e.toLowerCase(), s)}`, p = (e, r) => o.sm2.doDecrypt(r.toLowerCase().replace(/^04/, ""), e.toLowerCase(), s);
+import { s as r } from "../../../commonjs-virtual-dir/index2.js";
+r.sm2.generateKeyPairHex;
+const s = 1, c = (e, o) => `04${r.sm2.doEncrypt(o, e.toLowerCase(), s)}`, p = (e, o) => r.sm2.doDecrypt(o.toLowerCase().replace(/^04/, ""), e.toLowerCase(), s);
 export {
-  c as generateKeyPairHex,
   p as sm2Decrypt,
-  a as sm2Encrypt
+  c as sm2Encrypt
 };

package/dist/src/shield/crypto/util.js

@@ -1,29 +1,17 @@
-function o(n) {
-  return typeof n == "object" ? JSON.stringify(n ?? {}) : typeof n == "number" ? String(n) : n ?? "";
-}
-const i = (n = 16) => {
-  const r = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
-  let e = "";
-  for (let t = 0; t < n; t++)
-    e += r.charAt(Math.floor(Math.random() * r.length));
-  return e;
-};
-function a(n) {
-  const r = new Uint8Array(n.length / 2);
-  for (let t = 0; t < n.length; t += 2)
-    r[t / 2] = parseInt(n.slice(t, t + 2), 16);
-  const e = String.fromCharCode(...r);
+function o(r) {
+  const n = new Uint8Array(r.length / 2);
+  for (let t = 0; t < r.length; t += 2)
+    n[t / 2] = parseInt(r.slice(t, t + 2), 16);
+  const e = String.fromCharCode(...n);
   return btoa(e);
 }
-function g(n) {
-  const r = atob(n), e = new Uint8Array(r.length);
-  for (let t = 0; t < r.length; t++)
-    e[t] = r.charCodeAt(t);
+function i(r) {
+  const n = atob(r), e = new Uint8Array(n.length);
+  for (let t = 0; t < n.length; t++)
+    e[t] = n.charCodeAt(t);
   return Array.from(e, (t) => t.toString(16).padStart(2, "0")).join("");
 }
 export {
-  g as base64ToHex,
-  o as dataToStr,
-  i as generateRandomString,
-  a as hexToBase64
+  i as base64ToHex,
+  o as hexToBase64
 };

package/dist/src/shield/gcm-crypto/gcm.service.js

@@ -0,0 +1,29 @@
+class i {
+  /**
+   * 公钥
+   */
+  publicKey = "";
+  /**
+   * 是否加密
+   */
+  isEncrypt = !1;
+  /**
+   * 获取公钥
+   */
+  // eslint-disable-next-line
+  getPublicKeyApi = () => Promise.resolve("");
+  requestBeforeCryptoCallBacks = [];
+  init(e) {
+    this.getPublicKeyApi = e.getPublicKeyApi, this.isEncrypt = e.isEncrypt;
+  }
+  async initPublicKey() {
+    this.publicKey || (this.publicKey = await this.getPublicKeyApi());
+  }
+  addRequestBeforeCryptoCallback(e) {
+    this.requestBeforeCryptoCallBacks.push(e);
+  }
+}
+const c = new i();
+export {
+  c as gcmService
+};

package/dist/src/shield/gcm-crypto/hex.js

@@ -0,0 +1,18 @@
+const o = (e) => Array.from(crypto.getRandomValues(new Uint8Array(e))).map((n) => n.toString(16).padStart(2, "0")).join(""), a = (e) => {
+  let n = "";
+  for (let t = 0; t < e.length; t += 32768)
+    n += String.fromCharCode(...e.subarray(t, t + 32768));
+  return btoa(n);
+}, c = (e) => new TextEncoder().encode(e), i = (e) => new TextDecoder().decode(e), s = (e) => {
+  const n = atob(e), r = new Uint8Array(n.length);
+  for (let t = 0; t < n.length; t++)
+    r[t] = n.charCodeAt(t);
+  return Array.from(r, (t) => t.toString(16).padStart(2, "0")).join("");
+};
+export {
+  s as base64ToHex,
+  a as bytesToBase64,
+  o as generateHex,
+  c as stringToUtf8Bytes,
+  i as utf8BytesToString
+};

package/dist/src/shield/gcm-crypto/index.js

@@ -0,0 +1,40 @@
+import { sm4 as i } from "../../../vendor/sm-crypto-v2/dist/index.js";
+import { EHeaderKey as r } from "../crypto/const.js";
+import { sm2Encrypt as d } from "../crypto/sm2.js";
+import { hexToBase64 as g } from "../crypto/util.js";
+import { generateHex as c, stringToUtf8Bytes as u, bytesToBase64 as m, base64ToHex as y, utf8BytesToString as f } from "./hex.js";
+import { dataToStr as T } from "./string.js";
+const H = (s, n, p) => {
+  const t = c(12), e = c(16), { output: o, tag: a } = i.encrypt(T(n), e, {
+    mode: "gcm",
+    iv: t,
+    associatedData: u(`uri=${p}`),
+    output: "array",
+    outputTag: !0
+  });
+  if (!o || !a)
+    throw new Error("sm4 加密失败");
+  return {
+    headers: {
+      [r.encryptIv]: t,
+      [r.encryptTag]: m(a),
+      [r.encryptKey]: g(d(s, e))
+    },
+    data: {
+      body: m(o)
+    }
+  };
+}, S = (s, n, p, t) => {
+  const e = t[r.encryptIv], o = y(t[r.encryptTag]), a = i.decrypt(y(n), s, {
+    mode: "gcm",
+    iv: e,
+    associatedData: u(`uri=${p}`),
+    output: "array",
+    tag: o
+  });
+  return JSON.parse(f(a));
+};
+export {
+  H as requestDataEncryption,
+  S as responseDataDecryption
+};

package/dist/src/shield/gcm-crypto/init.js

@@ -0,0 +1,61 @@
+import { sm2 as K } from "../../../vendor/sm-crypto-v2/dist/index.js";
+import { EHeaderKey as r } from "../crypto/const.js";
+import { sm2Decrypt as b } from "../crypto/sm2.js";
+import { base64ToHex as f } from "../crypto/util.js";
+import { gcmService as o } from "./gcm.service.js";
+import { requestDataEncryption as C, responseDataDecryption as D } from "./index.js";
+import { formatUrlToGcmCryptoUri as s } from "./string.js";
+import { isNullOrUndefined as n } from "../../utils/is.js";
+import "vue";
+const B = {
+  install: (t, e) => {
+    o.init(e);
+  }
+}, G = () => o.initPublicKey(), I = (t) => {
+  o.addRequestBeforeCryptoCallback(t);
+}, m = /* @__PURE__ */ new Map(), c = (t, e) => t && (t[e] || t.get(e)) || "", k = (t) => {
+  if (!o.isEncrypt || !o.publicKey)
+    return t;
+  if (!t.isNotAutoEncryption && t.url) {
+    o.requestBeforeCryptoCallBacks.forEach((a) => {
+      a(t);
+    });
+    const { headers: e, data: p } = C(
+      o.publicKey,
+      t.data,
+      s(t.url)
+    );
+    if (c(t.headers, "Content-Type") !== "multipart/form-data" && (t.data = n(t.data) ? t.data : p), t.isAutoDecryptionResponse) {
+      const { publicKey: a, privateKey: i } = K.generateKeyPairHex();
+      m.set(a, i), t.headers.set(r.gcmPublicKey, a);
+    }
+    t.headers.set(e);
+  }
+  return t;
+}, R = (t) => {
+  if (t.config.isAutoDecryptionResponse && t.request.responseType !== "blob") {
+    const { data: e, ...p } = t.data, a = c(t.headers, r.gcmPublicKey);
+    if (!a)
+      return t;
+    const i = m.get(a);
+    if (i && !n(e)) {
+      const u = c(t.headers, r.encryptIv), d = c(t.headers, r.encryptKey), l = c(t.headers, r.encryptTag), y = b(i, f(d));
+      t.data = {
+        ...p,
+        data: D(y, e, s(t.config.url), {
+          [r.encryptIv]: u,
+          [r.encryptKey]: y,
+          [r.encryptTag]: l
+        })
+      };
+    }
+  }
+  return t;
+};
+export {
+  B as gcmCrypto,
+  G as initPublicKey,
+  I as requestDataBeforeGcmCrypto,
+  k as requestDataGcmCryptoInterceptor,
+  R as responseDataGcmCryptoInterceptor
+};

package/dist/src/shield/gcm-crypto/string.js

@@ -0,0 +1,10 @@
+const t = (o) => typeof o == "object" ? JSON.stringify(o ?? {}) : typeof o == "number" ? String(o) : o ?? "", i = (o) => {
+  if (!o)
+    return "";
+  const r = o.split("/").filter(Boolean);
+  return r.shift(), `/${r.join("/")}`;
+};
+export {
+  t as dataToStr,
+  i as formatUrlToGcmCryptoUri
+};

package/dist/src/utils/is.js

@@ -0,0 +1,4 @@
+const d = (n) => n == null;
+export {
+  d as isNullOrUndefined
+};

package/dist/types/axios.d.ts

@@ -0,0 +1,16 @@
+import "axios";
+
+declare module "axios" {
+  export interface InternalAxiosRequestConfig {
+    /**
+     * 接口是否不需要自动加密
+     * @default false
+     */
+    isNotAutoEncryption?: boolean;
+    /**
+     * 响应是否需要自动解密
+     * @default false
+     */
+    isAutoDecryptionResponse?: boolean;
+  }
+}