1.4.5.2

EdgeCommon/pkg/nodeutils/aes_256.go

@@ -0,0 +1,72 @@
+package nodeutils
+
+import (
+	"bytes"
+	"crypto/aes"
+	"crypto/cipher"
+)
+
+type AES256CFBMethod struct {
+	block cipher.Block
+	iv    []byte
+}
+
+func (this *AES256CFBMethod) Init(key, iv []byte) error {
+	// 判断key是否为32长度
+	var l = len(key)
+	if l > 32 {
+		key = key[:32]
+	} else if l < 32 {
+		key = append(key, bytes.Repeat([]byte{' '}, 32-l)...)
+	}
+
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return err
+	}
+	this.block = block
+
+	// 判断iv长度
+	var l2 = len(iv)
+	if l2 > aes.BlockSize {
+		iv = iv[:aes.BlockSize]
+	} else if l2 < aes.BlockSize {
+		iv = append(iv, bytes.Repeat([]byte{' '}, aes.BlockSize-l2)...)
+	}
+	this.iv = iv
+
+	return nil
+}
+
+func (this *AES256CFBMethod) Encrypt(src []byte) (dst []byte, err error) {
+	if len(src) == 0 {
+		return
+	}
+
+	defer func() {
+		_ = recover()
+	}()
+
+	dst = make([]byte, len(src))
+
+	var encrypter = cipher.NewCFBEncrypter(this.block, this.iv)
+	encrypter.XORKeyStream(dst, src)
+
+	return
+}
+
+func (this *AES256CFBMethod) Decrypt(dst []byte) (src []byte, err error) {
+	if len(dst) == 0 {
+		return
+	}
+
+	defer func() {
+		_ = recover()
+	}()
+
+	src = make([]byte, len(dst))
+	var decrypter = cipher.NewCFBDecrypter(this.block, this.iv)
+	decrypter.XORKeyStream(src, dst)
+
+	return
+}

EdgeCommon/pkg/nodeutils/aes_utils.go

@@ -0,0 +1,115 @@
+// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved.
+
+package nodeutils
+
+import (
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"github.com/iwind/TeaGo/maps"
+	"time"
+)
+
+// EncryptMap 加密
+func EncryptMap(nodeUniqueId string, nodeSecret string, data maps.Map, timeout int32) (string, error) {
+	if data == nil {
+		data = maps.Map{}
+	}
+
+	var expiresAt int64
+	if timeout > 0 {
+		expiresAt = time.Now().Unix() + int64(timeout)
+	}
+
+	dataJSON, err := json.Marshal(maps.Map{
+		"expiresAt": expiresAt,
+		"data":      data,
+	})
+	if err != nil {
+		return "", fmt.Errorf("marshal data to json failed: %w", err)
+	}
+
+	var method = &AES256CFBMethod{}
+	err = method.Init([]byte(nodeUniqueId), []byte(nodeSecret))
+	if err != nil {
+		return "", err
+	}
+	result, err := method.Encrypt(dataJSON)
+	if err != nil {
+		return "", err
+	}
+
+	return base64.StdEncoding.EncodeToString(result), nil
+}
+
+// DecryptMap 解密
+func DecryptMap(nodeUniqueId string, nodeSecret string, encodedString string) (maps.Map, error) {
+	var method = &AES256CFBMethod{}
+	err := method.Init([]byte(nodeUniqueId), []byte(nodeSecret))
+	if err != nil {
+		return nil, err
+	}
+
+	encodedData, err := base64.StdEncoding.DecodeString(encodedString)
+	if err != nil {
+		return nil, fmt.Errorf("base64 decode failed: %w", err)
+	}
+
+	dataJSON, err := method.Decrypt(encodedData)
+	if err != nil {
+		return nil, err
+	}
+
+	var result = maps.Map{}
+	err = json.Unmarshal(dataJSON, &result)
+	if err != nil {
+		return nil, fmt.Errorf("unmarshal data failed: %w", err)
+	}
+
+	var expiresAt = result.GetInt64("expiresAt")
+	if expiresAt > 0 && expiresAt < time.Now().Unix() {
+		return nil, errors.New("data is expired")
+	}
+
+	return result.GetMap("data"), nil
+}
+
+// EncryptData 加密
+func EncryptData(nodeUniqueId string, nodeSecret string, data []byte) (string, error) {
+	if len(data) == 0 {
+		return "", nil
+	}
+
+	var method = &AES256CFBMethod{}
+	err := method.Init([]byte(nodeUniqueId), []byte(nodeSecret))
+	if err != nil {
+		return "", err
+	}
+	result, err := method.Encrypt(data)
+	if err != nil {
+		return "", err
+	}
+
+	return base64.StdEncoding.EncodeToString(result), nil
+}
+
+// DecryptData 解密
+func DecryptData(nodeUniqueId string, nodeSecret string, encodedString string) ([]byte, error) {
+	if len(encodedString) == 0 {
+		return nil, nil
+	}
+
+	var method = &AES256CFBMethod{}
+	err := method.Init([]byte(nodeUniqueId), []byte(nodeSecret))
+	if err != nil {
+		return nil, err
+	}
+
+	encodedData, err := base64.StdEncoding.DecodeString(encodedString)
+	if err != nil {
+		return nil, fmt.Errorf("base64 decode failed: %w", err)
+	}
+
+	return method.Decrypt(encodedData)
+}

EdgeCommon/pkg/nodeutils/aes_utils_test.go

@@ -0,0 +1,46 @@
+// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved.
+
+package nodeutils
+
+import (
+	"github.com/iwind/TeaGo/maps"
+	"testing"
+)
+
+func TestEncryptMap(t *testing.T) {
+	e, err := EncryptMap("a", "b", maps.Map{
+		"c": 1,
+	}, 5)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("e:", e)
+
+	s, err := DecryptMap("a", "b", e)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("s:", s)
+}
+
+func TestEncryptData(t *testing.T) {
+	encoded, err := EncryptData("a", "b", []byte("Hello, World"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("encoded:", encoded)
+
+	source, err := DecryptData("a", "b", encoded)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("source:", string(source))
+}
+
+func BenchmarkEncryptData(b *testing.B) {
+	for i := 0; i < b.N; i++ {
+		_, _ = EncryptMap("a", "b", maps.Map{
+			"c": 1,
+		}, 5)
+	}
+}

EdgeCommon/pkg/nodeutils/base64_map.go

@@ -0,0 +1,37 @@
+// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved.
+
+package nodeutils
+
+import (
+	"encoding/base64"
+	"encoding/json"
+	"github.com/iwind/TeaGo/maps"
+)
+
+// Base64EncodeMap 对Map进行Base64编码
+func Base64EncodeMap(m maps.Map) (string, error) {
+	if m == nil {
+		m = maps.Map{}
+	}
+	data, err := json.Marshal(m)
+	if err != nil {
+		return "", err
+	}
+	var result = base64.StdEncoding.EncodeToString(data)
+	return result, nil
+}
+
+// Base64DecodeMap 对Map进行Base64解码
+func Base64DecodeMap(encodedString string) (maps.Map, error) {
+	data, err := base64.StdEncoding.DecodeString(encodedString)
+	if err != nil {
+		return nil, err
+	}
+
+	var result = maps.Map{}
+	err = json.Unmarshal(data, &result)
+	if err != nil {
+		return nil, err
+	}
+	return result, nil
+}

EdgeCommon/pkg/nodeutils/base64_map_test.go

@@ -0,0 +1,55 @@
+// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved.
+
+package nodeutils
+
+import (
+	"github.com/iwind/TeaGo/maps"
+	"testing"
+)
+
+func TestBase64EncodeMap(t *testing.T) {
+	{
+		var m maps.Map
+		encodedString, err := Base64EncodeMap(m)
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Log("encoded string:", encodedString)
+
+		m, err = Base64DecodeMap(encodedString)
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Logf("%#v", m)
+	}
+
+	{
+		var m = maps.Map{}
+		encodedString, err := Base64EncodeMap(m)
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Log("encoded string:", encodedString)
+
+		m, err = Base64DecodeMap(encodedString)
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Logf("%#v", m)
+	}
+
+	{
+		var m = maps.Map{"userId": 1, "name": "李白"}
+		encodedString, err := Base64EncodeMap(m)
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Log("encoded string:", encodedString)
+
+		m, err = Base64DecodeMap(encodedString)
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Logf("%#v", m)
+	}
+}