136 lines
4.0 KiB
TypeScript
136 lines
4.0 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { getPublicProjectDb } from '@/lib/project-auth';
|
|
import { verifyLicenseRequestSignature } from '@/lib/request-signature';
|
|
import { buildPremiumModuleEntitlement } from '@/lib/premium-module-manifest';
|
|
import { generateLicenseConfig, type HardwareFingerprint } from '@/lib/types';
|
|
import { calculateFingerprintMatchScore, createPendingAlertOnce } from '@/lib/abuse-detection';
|
|
import { z } from 'zod';
|
|
|
|
const premiumModuleDownloadSchema = z.object({
|
|
instanceId: z.string(),
|
|
fingerprint: z.object({
|
|
machineId: z.string(),
|
|
hostname: z.string(),
|
|
macAddress: z.string(),
|
|
cpuId: z.string().optional(),
|
|
instanceId: z.string(),
|
|
}),
|
|
timestamp: z.number(),
|
|
});
|
|
|
|
export async function POST(
|
|
request: NextRequest,
|
|
{ params }: { params: Promise<{ projectCode: string; moduleId: string }> }
|
|
) {
|
|
try {
|
|
const { projectCode, moduleId } = await params;
|
|
const projectDbResult = await getPublicProjectDb(projectCode);
|
|
|
|
if (!projectDbResult.success) {
|
|
return projectDbResult.response;
|
|
}
|
|
|
|
const body = await request.json().catch(() => ({}));
|
|
const signatureResult = verifyLicenseRequestSignature('premium-module-download', projectCode, {
|
|
...body,
|
|
moduleId,
|
|
});
|
|
if (!signatureResult.valid) {
|
|
return NextResponse.json(
|
|
{ success: false, error: '请求签名无效' },
|
|
{ status: signatureResult.response.status }
|
|
);
|
|
}
|
|
|
|
const parsed = premiumModuleDownloadSchema.safeParse(body);
|
|
if (!parsed.success) {
|
|
return NextResponse.json(
|
|
{ success: false, error: '请求参数无效' },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
const { instanceId, fingerprint, timestamp } = parsed.data;
|
|
if (Math.abs(Date.now() - timestamp) > 5 * 60 * 1000) {
|
|
return NextResponse.json(
|
|
{ success: false, error: '请求已过期' },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
const activation = await projectDbResult.prisma.activation.findFirst({
|
|
where: {
|
|
instanceId,
|
|
isActive: true,
|
|
},
|
|
include: {
|
|
license: true,
|
|
},
|
|
});
|
|
|
|
if (!activation) {
|
|
return NextResponse.json(
|
|
{ success: false, error: '激活记录不存在' },
|
|
{ status: 404 }
|
|
);
|
|
}
|
|
|
|
const { license } = activation;
|
|
if (license.licenseType === 'FREE') {
|
|
return NextResponse.json(
|
|
{ success: false, error: '免费版不提供付费模块授权凭证' },
|
|
{ status: 403 }
|
|
);
|
|
}
|
|
|
|
if (license.status === 'disabled') {
|
|
return NextResponse.json(
|
|
{ success: false, error: '许可证已被禁用' },
|
|
{ status: 403 }
|
|
);
|
|
}
|
|
|
|
if (license.status === 'expired' || (license.expiresAt && license.expiresAt < new Date())) {
|
|
return NextResponse.json(
|
|
{ success: false, error: '许可证已过期' },
|
|
{ status: 403 }
|
|
);
|
|
}
|
|
|
|
const storedFingerprint = activation.fingerprint as unknown as HardwareFingerprint;
|
|
const matchScore = calculateFingerprintMatchScore(storedFingerprint, fingerprint);
|
|
if (matchScore < 70) {
|
|
await createPendingAlertOnce(projectDbResult.prisma, license.id, 'premium_module_download_fingerprint_mismatch', {
|
|
instanceId,
|
|
moduleId,
|
|
matchScore,
|
|
});
|
|
|
|
return NextResponse.json(
|
|
{ success: false, error: '硬件指纹不匹配，无法获取付费模块授权凭证' },
|
|
{ status: 403 }
|
|
);
|
|
}
|
|
|
|
const config = generateLicenseConfig(license.licenseType, license.expiresAt);
|
|
const leaseExpiresAt = new Date(config.leaseExpiresAt || Date.now());
|
|
const entitlement = buildPremiumModuleEntitlement({
|
|
moduleId,
|
|
licenseType: license.licenseType,
|
|
instanceId,
|
|
leaseExpiresAt,
|
|
});
|
|
|
|
return NextResponse.json({
|
|
success: true,
|
|
entitlement,
|
|
});
|
|
} catch (error) {
|
|
console.error('付费模块授权凭证生成失败:', error);
|
|
return NextResponse.json(
|
|
{ success: false, error: '服务器内部错误' },
|
|
{ status: 500 }
|
|
);
|
|
}
|
|
}
|