slider-captcha-sdk 1.0.9 → 1.0.10

package/dist/password-validator.esm.js

@@ -0,0 +1,207 @@
+import JSEncrypt from 'jsencrypt';
+
+/**
+ * 密码校验工具类
+ * 提供密码加密和校验功能
+ */
+class PasswordValidator {
+  constructor(options = {}) {
+    this.options = {
+      // 获取公钥的接口地址
+      publicKeyUrl: options.publicKeyUrl || '/microservice/strongPassword/getPublicKey',
+      // 密码校验接口地址
+      validateUrl: options.validateUrl || '/microservice/strongPassword/checkPassword',
+      // 请求超时时间
+      timeout: options.timeout || 10000,
+      // 自定义请求头
+      headers: options.headers || {},
+      ...options
+    };
+
+    // 缓存公钥，避免重复请求
+    this.publicKeyCache = null;
+    this.publicKeyExpiry = null;
+  }
+
+  /**
+   * 获取公钥
+   * @returns {Promise<string>} 公钥字符串
+   */
+  async getPublicKey() {
+    // 检查缓存是否有效（5分钟有效期）
+    if (this.publicKeyCache && this.publicKeyExpiry && Date.now() < this.publicKeyExpiry) {
+      return this.publicKeyCache
+    }
+
+    try {
+      const response = await this.makeRequest(this.options.publicKeyUrl, {
+        method: 'GET'
+      });
+
+      if (response.code !== '0' ) {
+        throw new Error('获取公钥失败：' + (response.message || '未知错误'))
+      }
+
+      // 缓存公钥，设置5分钟过期时间
+      this.publicKeyCache = response.data;
+      this.publicKeyExpiry = Date.now() + 5 * 60 * 1000;
+
+      return this.publicKeyCache
+    } catch (error) {
+      console.error('获取公钥失败:', error);
+      throw new Error('获取公钥失败: ' + error.message)
+    }
+  }
+
+  /**
+   * 使用RSA公钥加密密码
+   * @param {string} password 原始密码
+   * @param {string} publicKey 公钥字符串
+   * @returns {string} 加密后的密码
+   */
+  encryptPassword(password, publicKey) {
+    try {
+      // 使用导入的JSEncrypt进行RSA加密
+      if (!JSEncrypt) {
+        throw new Error('JSEncrypt库未正确加载')
+      }
+
+      const encrypt = new JSEncrypt();
+      encrypt.setPublicKey(publicKey);
+      const encrypted = encrypt.encrypt(password);
+
+      if (!encrypted) {
+        throw new Error('密码加密失败')
+      }
+
+      return encrypted
+    } catch (error) {
+      console.error('密码加密失败:', error);
+      throw new Error('密码加密失败: ' + error.message)
+    }
+  }
+
+  /**
+   * 校验密码
+   * @param {string} password 原始密码
+   * @param {string} userName 用户
+   * @param {Object} additionalData 额外的校验数据
+   * @returns {Promise<Object>} 校验结果
+   */
+  async validatePassword(password, userName, additionalData = {}) {
+    try {
+      // 1. 获取公钥
+      const publicKey = await this.getPublicKey();
+
+      // 2. 加密密码
+      const encryptedPassword = this.encryptPassword(password, publicKey);
+
+      // 3. 调用校验接口
+      const response = await this.makeRequest(this.options.validateUrl, {
+        method: 'POST',
+        body: JSON.stringify({
+          userName: userName,
+          password: encryptedPassword,
+          timestamp: Date.now(),
+          ...additionalData
+        })
+      });
+
+      return {
+        success: response.success,
+        message: response.message,
+        data: response.data,
+        code: response.code
+      }
+    } catch (error) {
+      console.error('密码校验失败:', error);
+      return {
+        success: false,
+        message: error.message,
+        code: 'VALIDATION_ERROR'
+      }
+    }
+  }
+
+  /**
+   * 发送HTTP请求的通用方法
+   * @param {string} url 请求地址
+   * @param {Object} options 请求选项
+   * @returns {Promise<Object>} 响应结果
+   */
+  async makeRequest(url, options = {}) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.options.timeout);
+
+    try {
+      const response = await fetch(url, {
+        ...options,
+        headers: {
+          'Content-Type': 'application/json',
+          ...this.options.headers,
+          ...options.headers
+        },
+        signal: controller.signal
+      });
+
+      clearTimeout(timeoutId);
+
+      if (!response.ok) {
+        throw new Error(`HTTP错误: ${response.status} ${response.statusText}`)
+      }
+
+      return await response.json()
+    } catch (error) {
+      clearTimeout(timeoutId);
+
+      if (error.name === 'AbortError') {
+        throw new Error('请求超时')
+      }
+
+      throw error
+    }
+  }
+
+  /**
+   * 清除公钥缓存
+   */
+  clearCache() {
+    this.publicKeyCache = null;
+    this.publicKeyExpiry = null;
+  }
+
+  /**
+   * 更新配置
+   * @param {Object} newOptions 新的配置选项
+   */
+  updateOptions(newOptions) {
+    this.options = { ...this.options, ...newOptions };
+    // 清除缓存，使用新配置重新获取
+    this.clearCache();
+  }
+}
+
+/**
+ * 创建密码校验器实例的工厂函数
+ * @param {Object} options 配置选项
+ * @returns {PasswordValidator} 密码校验器实例
+ */
+function createPasswordValidator(options) {
+  return new PasswordValidator(options)
+}
+
+/**
+ * 快速校验密码的便捷函数
+ * @param {string} password 密码
+ * @param {Object} options 配置选项
+ * @param {Object} additionalData 额外数据
+ * @returns {Promise<Object>} 校验结果
+ */
+async function validatePassword(password, options = {}, additionalData = {}) {
+  const validator = new PasswordValidator(options);
+  // 修复：添加userName参数，可以从additionalData中提取或设为空字符串
+  const userName = additionalData.userName || '';
+  return await validator.validatePassword(password, userName, additionalData)
+}
+
+export { createPasswordValidator, PasswordValidator as default, validatePassword };