219 lines
10 KiB
C#
219 lines
10 KiB
C#
using System.Security.Cryptography;
|
||
using Microsoft.Extensions.Options;
|
||
using YD_Event.Application.Auth;
|
||
using YD_Event.Application.Common;
|
||
using YD_Event.Core.Infrastructure.Aliyun.Oss;
|
||
using YD_Event.Core.Options;
|
||
|
||
namespace YD_Event.Application.AppUpdate;
|
||
|
||
/// <summary>内部 Android 裁判端 APK 发布与升级检查。</summary>
|
||
[ApiDescriptionSettings("裁判端升级")]
|
||
[Route("api/app-updates")]
|
||
[Authorize]
|
||
public class AppUpdateController : IDynamicApiController
|
||
{
|
||
private const string PackageName = "com.yd.event.yd_pattern_scoring_system";
|
||
private const long MaxApkSize = 200L * 1024 * 1024;
|
||
private const string RELEASE_OSS_BUCKET = "yuedong-wechatapplet";
|
||
private const string RELEASE_OSS_DOMAIN = "https://yuedong-wechatapplet.oss-cn-shanghai.aliyuncs.com";
|
||
// Keep the directory spelling requested for the existing OSS layout.
|
||
private const string RELEASE_OSS_PREFIX = "app-realse/";
|
||
private readonly ISqlSugarRepository<JudgeAppRelease> _releases;
|
||
private readonly AuthManager _auth;
|
||
private readonly IIdGenerator _ids;
|
||
private readonly FileService _files;
|
||
private readonly OssService _oss;
|
||
private readonly IOptionsMonitor<OssConnectionOptions> _ossOptions;
|
||
private readonly string _channel;
|
||
|
||
public AppUpdateController(ISqlSugarRepository<JudgeAppRelease> releases,
|
||
AuthManager auth, IIdGenerator ids, FileService files,
|
||
IOptionsMonitor<OssConnectionOptions> ossOptions, OssService oss)
|
||
{
|
||
_releases = releases;
|
||
_auth = auth;
|
||
_ids = ids;
|
||
_files = files;
|
||
_oss = oss;
|
||
_ossOptions = ossOptions;
|
||
_channel = Environment.GetEnvironmentVariable("APP_UPDATE_CHANNEL")?.Trim().ToLowerInvariant() ?? "production";
|
||
}
|
||
|
||
/// <summary>登录前即可查询当前环境的最新 APK。</summary>
|
||
[HttpGet("latest")]
|
||
[AllowAnonymous]
|
||
public async Task<object> Latest()
|
||
{
|
||
var release = await _releases.AsQueryable()
|
||
.Where(x => x.Channel == _channel && x.ReleaseStatus == 1 && x.PackageName == PackageName)
|
||
.OrderByDescending(x => x.VersionCode).FirstAsync();
|
||
return release == null ? new { available = false } : new
|
||
{
|
||
available = true, release.Id, release.PackageName, release.VersionCode,
|
||
release.VersionName, release.NotesZh, release.NotesEn,
|
||
release.IsMandatory, release.FileSize, release.Sha256,
|
||
release.CertificateSha256, downloadUrl = DownloadUrlFor(release),
|
||
fallbackDownloadUrl = $"/api/app-updates/download/{release.Id}",
|
||
release.PublishedTime
|
||
};
|
||
}
|
||
|
||
/// <summary>OSS 已启用时直连阿里云/CDN；配置缺失或不安全时仍使用受控下载接口。</summary>
|
||
private string DownloadUrlFor(JudgeAppRelease release)
|
||
{
|
||
var fallback = $"/api/app-updates/download/{release.Id}";
|
||
if (TryGetReleaseObjectKey(release.FileUrl, out _)) return release.FileUrl;
|
||
// Earlier releases may reside on the server or a different bucket.
|
||
// Never rewrite their URL to the dedicated release bucket.
|
||
return fallback;
|
||
}
|
||
|
||
private static bool TryGetReleaseObjectKey(string fileUrl, out string objectKey)
|
||
{
|
||
objectKey = string.Empty;
|
||
if (!Uri.TryCreate(fileUrl, UriKind.Absolute, out var uri) ||
|
||
uri.Scheme != Uri.UriSchemeHttps || !string.IsNullOrEmpty(uri.UserInfo) ||
|
||
!string.IsNullOrEmpty(uri.Query) || !string.IsNullOrEmpty(uri.Fragment))
|
||
return false;
|
||
var baseUrl = RELEASE_OSS_DOMAIN + "/";
|
||
if (!uri.AbsoluteUri.StartsWith(baseUrl + RELEASE_OSS_PREFIX, StringComparison.OrdinalIgnoreCase))
|
||
return false;
|
||
objectKey = uri.AbsoluteUri[baseUrl.Length..];
|
||
return !objectKey.Contains("..", StringComparison.Ordinal) &&
|
||
objectKey.EndsWith(".apk", StringComparison.OrdinalIgnoreCase);
|
||
}
|
||
|
||
/// <summary>只允许下载当前环境已发布的版本，沿用现有文件服务流式返回。</summary>
|
||
[HttpGet("download/{id:long}")]
|
||
[AllowAnonymous]
|
||
public async Task<IActionResult> Download(long id)
|
||
{
|
||
var release = await _releases.GetFirstAsync(x => x.Id == id && x.Channel == _channel &&
|
||
x.PackageName == PackageName && x.ReleaseStatus == 1);
|
||
if (release == null || string.IsNullOrWhiteSpace(release.FileUrl)) return new NotFoundResult();
|
||
if (TryGetReleaseObjectKey(release.FileUrl, out var objectKey))
|
||
{
|
||
var stream = _oss.GetObjectFromBucket(RELEASE_OSS_BUCKET, objectKey);
|
||
return new FileStreamResult(stream, "application/vnd.android.package-archive")
|
||
{
|
||
FileDownloadName = Path.GetFileName(objectKey)
|
||
};
|
||
}
|
||
return _files.Download(release.FileUrl);
|
||
}
|
||
|
||
[HttpGet("admin/releases")]
|
||
public async Task<object> Releases()
|
||
{
|
||
EnsureAdmin();
|
||
return await _releases.AsQueryable().Where(x => x.Channel == _channel)
|
||
.OrderByDescending(x => x.VersionCode).ToListAsync();
|
||
}
|
||
|
||
[HttpPost("admin/upload")]
|
||
[DisplayName("上传裁判端 APK 草稿")]
|
||
[RequestSizeLimit(MaxApkSize + 1024 * 1024)]
|
||
[RequestFormLimits(MultipartBodyLengthLimit = MaxApkSize + 1024 * 1024)]
|
||
public async Task<JudgeAppRelease> Upload([FromForm] IFormFile file,
|
||
[FromForm] string versionName, [FromForm] int versionCode,
|
||
[FromForm] string certificateSha256, [FromForm] string notesZh,
|
||
[FromForm] string? notesEn = null,
|
||
[FromForm] bool isMandatory = false)
|
||
{
|
||
EnsureAdmin();
|
||
if (file == null || file.Length < 1024 || file.Length > MaxApkSize ||
|
||
!string.Equals(Path.GetExtension(file.FileName), ".apk", StringComparison.OrdinalIgnoreCase))
|
||
throw Oops.Bah("仅允许上传 1KB 至 200MB 的 APK");
|
||
if (string.IsNullOrWhiteSpace(notesZh)) throw Oops.Bah("请填写中文更新说明");
|
||
if (versionCode <= 0 || string.IsNullOrWhiteSpace(versionName) || versionName.Length > 64)
|
||
throw Oops.Bah("请填写有效的版本名和正整数版本号");
|
||
// 本阶段由超级管理员提供 build-info.json 中的元数据；后续再恢复 APK 内部解析与签名比对。
|
||
// 文件哈希仍在服务端计算，平板安装前仍会核对真实 APK 的包名、版本和签名。
|
||
var fingerprint = certificateSha256?.Trim().Replace(":", "").ToUpperInvariant();
|
||
if (fingerprint == null || !Regex.IsMatch(fingerprint, "^[0-9A-F]{64}$"))
|
||
throw Oops.Bah("请填写 64 位的公开签名证书 SHA-256 指纹");
|
||
var existing = await _releases.GetFirstAsync(x => x.Channel == _channel &&
|
||
x.PackageName == PackageName && x.VersionCode == versionCode);
|
||
if (existing != null) throw Oops.Bah("该版本号已存在，请使用新的递增版本号");
|
||
if (!_ossOptions.CurrentValue.Enable)
|
||
throw Oops.Bah("裁判端 APK OSS 未启用，请先配置阿里云对象存储");
|
||
if (!Regex.IsMatch(_channel, "^[a-z0-9-]{1,32}$"))
|
||
throw Oops.Bah("APP_UPDATE_CHANNEL 配置无效");
|
||
var temp = Path.Combine(Path.GetTempPath(), $"yd-app-release-{Guid.NewGuid():N}.apk");
|
||
try
|
||
{
|
||
await using (var output = System.IO.File.Create(temp))
|
||
await using (var source = file.OpenReadStream())
|
||
await source.CopyToAsync(output);
|
||
await using (var input = System.IO.File.OpenRead(temp))
|
||
{
|
||
var magic = new byte[4];
|
||
if (await input.ReadAsync(magic) != 4 || magic[0] != 0x50 || magic[1] != 0x4B || magic[2] != 0x03 || magic[3] != 0x04)
|
||
throw Oops.Bah("文件不是有效的 APK/ZIP");
|
||
}
|
||
await using var hashStream = System.IO.File.OpenRead(temp);
|
||
var sha = Convert.ToHexString(await SHA256.HashDataAsync(hashStream));
|
||
await using var uploadStream = System.IO.File.OpenRead(temp);
|
||
var objectKey = $"{RELEASE_OSS_PREFIX}{_channel}/{Guid.NewGuid():N}.apk";
|
||
await _oss.PutObjectToBucketAsync(RELEASE_OSS_BUCKET, objectKey, uploadStream);
|
||
var release = new JudgeAppRelease
|
||
{
|
||
Id = _ids.NextId(), Channel = _channel, PackageName = PackageName,
|
||
VersionCode = versionCode, VersionName = versionName.Trim(),
|
||
NotesZh = notesZh?.Trim() ?? string.Empty, NotesEn = notesEn?.Trim() ?? string.Empty,
|
||
IsMandatory = isMandatory, FileSize = uploadStream.Length,
|
||
Sha256 = sha, CertificateSha256 = fingerprint,
|
||
FileUrl = $"{RELEASE_OSS_DOMAIN}/{objectKey}",
|
||
ReleaseStatus = 0, CreatedUserId = _auth.UserId, CreatedTime = DateTime.UtcNow
|
||
};
|
||
await _releases.InsertAsync(release);
|
||
return release;
|
||
}
|
||
finally { if (System.IO.File.Exists(temp)) System.IO.File.Delete(temp); }
|
||
}
|
||
|
||
[HttpPost("admin/{id:long}/publish")]
|
||
public async Task<JudgeAppRelease> Publish(long id)
|
||
{
|
||
EnsureAdmin();
|
||
var release = await FindOwn(id);
|
||
if (release.ReleaseStatus != 0) throw Oops.Bah("只有草稿可以发布");
|
||
var latest = await _releases.AsQueryable()
|
||
.Where(x => x.Channel == _channel && x.PackageName == PackageName && x.ReleaseStatus != 0)
|
||
.OrderByDescending(x => x.VersionCode).FirstAsync();
|
||
if (latest != null && release.VersionCode <= latest.VersionCode)
|
||
throw Oops.Bah("版本号必须高于当前已发布版本");
|
||
release.ReleaseStatus = 1;
|
||
release.PublishedUserId = _auth.UserId;
|
||
release.PublishedTime = DateTime.UtcNow;
|
||
await _releases.UpdateAsync(release);
|
||
return release;
|
||
}
|
||
|
||
[HttpPost("admin/{id:long}/withdraw")]
|
||
public async Task<JudgeAppRelease> Withdraw(long id)
|
||
{
|
||
EnsureAdmin();
|
||
var release = await FindOwn(id);
|
||
if (release.ReleaseStatus != 1) throw Oops.Bah("只有已发布版本可以撤回");
|
||
release.ReleaseStatus = 2;
|
||
release.WithdrawnUserId = _auth.UserId;
|
||
release.WithdrawnTime = DateTime.UtcNow;
|
||
await _releases.UpdateAsync(release);
|
||
return release;
|
||
}
|
||
|
||
private void EnsureAdmin()
|
||
{
|
||
if (!_auth.IsSuperAdmin) throw Oops.Bah("仅超级管理员可管理裁判端版本");
|
||
}
|
||
|
||
private async Task<JudgeAppRelease> FindOwn(long id)
|
||
{
|
||
var release = await _releases.GetFirstAsync(x => x.Id == id && x.Channel == _channel);
|
||
return release ?? throw Oops.Bah("版本不存在");
|
||
}
|
||
|
||
}
|