yangxiangyuan
e4f84caa23
- 重构市场定投评估逻辑：优先读取本地估值快照，必要时通过探针补抓海外数据，后端接口新增force参数支持强制刷新，更新前后端注释与交互文案 - 优化Cloud工具全链路： - 新增运营商登录页地址字段，支持一键复制账号密码并打开对应登录页 - 缓存密钥派生结果，避免重复阻塞事件循环，提升列表加载性能 - 完善接口错误处理，新增面板级加载失败提示与自动重试功能 - 修复云资源代理转发时的Cookie缺失问题 - 并行加载所有面板数据，优化首屏渲染速度 - 新增登录按钮样式与错误提示样式 - 新增4个Cloud工具调试脚本，用于性能测试、解密审计、回归验证与加载耗时统计 - 启动定投评估工具的定时调度任务
54 lines
2.4 KiB
JavaScript
54 lines
2.4 KiB
JavaScript
// 调试脚本：逐行审计 cloud ecs/vas 加密字段，区分"明文原本为空"与"解密失败"
|
|
// 用法：node dev_test_scripts/debug/debug_cloud_decrypt_audit.js
|
|
const crypto = require('crypto')
|
|
const fs = require('fs')
|
|
const path = require('path')
|
|
const os = require('os')
|
|
|
|
// 与 index.js 相同的凭据加载逻辑
|
|
const userProfile = process.env.USERPROFILE || process.env.HOME || os.homedir()
|
|
const credsPath = path.join(userProfile, 'Toolbox_local_creds.env.local')
|
|
if (fs.existsSync(credsPath)) {
|
|
fs.readFileSync(credsPath, 'utf-8').split(/\r?\n/).forEach(line => {
|
|
const t = line.trim()
|
|
if (!t || t.startsWith('#')) return
|
|
const i = t.indexOf('=')
|
|
if (i <= 0) return
|
|
const k = t.slice(0, i).trim()
|
|
const v = t.slice(i + 1).trim()
|
|
if (k && !Object.prototype.hasOwnProperty.call(process.env, k)) process.env[k] = v
|
|
})
|
|
console.log('creds loaded from', credsPath)
|
|
} else {
|
|
console.log('WARN: creds file not found')
|
|
}
|
|
|
|
const { db } = require('../../src/server/db')
|
|
const cfg = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'config', 'cloud.json'), 'utf-8'))
|
|
const saltStr = String(cfg.machine_salt || '')
|
|
const passphrase = process.env.CLOUD_PASSPHRASE || process.env.SYSTEM_AUTH_PASS_93220 || ''
|
|
console.log('passphrase present:', !!passphrase)
|
|
const key = crypto.scryptSync(passphrase + saltStr, Buffer.from(saltStr || 'default', 'utf-8'), 32)
|
|
|
|
const audit = (table, ec, ivc, tagc) => {
|
|
const rows = db.prepare(`SELECT id, ${ec}, ${ivc}, ${tagc} FROM ${table}`).all()
|
|
let empty = 0
|
|
let fail = 0
|
|
let ok = 0
|
|
for (const r of rows) {
|
|
if (!r[ec] || !r[ivc] || !r[tagc]) continue
|
|
try {
|
|
const d = crypto.createDecipheriv('aes-256-gcm', key, r[ivc])
|
|
d.setAuthTag(r[tagc])
|
|
const pt = Buffer.concat([d.update(r[ec]), d.final()]).toString('utf-8')
|
|
if (pt === '') { empty++; console.log(`${table} id=${r.id}: 解密成功但明文为空（原本就没填）`) } else ok++
|
|
} catch (e) { fail++; console.log(`${table} id=${r.id}: 解密失败 ${String(e.message)}`) }
|
|
}
|
|
console.log(`${table}: ok_non_empty=${ok} empty_plaintext=${empty} auth_fail=${fail}`)
|
|
}
|
|
|
|
audit('cloud_operators', 'login_password_enc', 'login_password_iv', 'login_password_tag')
|
|
audit('cloud_ecs', 'rdp_password_enc', 'rdp_password_iv', 'rdp_password_tag')
|
|
audit('cloud_vas', 'access_text_enc', 'access_text_iv', 'access_text_tag')
|
|
console.log('audit done')
|