orlabs · wujunze · Apr 1, 2019 · Mar 30, 2019 · Mar 30, 2019 · Mar 31, 2019
diff --git a/conf/orange.conf.example b/conf/orange.conf.example
@@ -10,6 +10,7 @@
         "property_rate_limiting",
         "basic_auth",
         "key_auth",
+        "hmac_auth",
         "signature_auth",
         "waf",
         "divide",

diff --git a/dashboard/routes/dashboard.lua b/dashboard/routes/dashboard.lua
@@ -172,6 +172,11 @@ return function(config, store)
         res:render("jwt_auth/jwt_auth")
     end)
 
+    -- HMAC AUTH
+    dashboard_router:get("/hmac_auth", function(req, res, next)
+        res:render("hmac_auth/hmac_auth")
+    end)
+
     dashboard_router:get("/waf", function(req, res, next)
         res:render("waf")
     end)

diff --git a/dashboard/static/js/hmac_auth.js b/dashboard/static/js/hmac_auth.js
@@ -0,0 +1,128 @@
+(function (L) {
+    var _this = null;
+    L.HmacAuth = L.HmacAuth || {};
+    _this = L.HmacAuth = {
+        data: {
+        },
+
+        init: function () {
+            L.Common.loadConfigs("hmac_auth", _this, true);
+            _this.initEvents();
+        },
+
+        initEvents: function () {
+            var op_type = "hmac_auth";
+            //添加规则对话框
+            L.Common.initRuleAddDialog(op_type, _this);
+            //删除规则对话框
+            L.Common.initRuleDeleteDialog(op_type, _this);
+            //编辑规则对话框
+            L.Common.initRuleEditDialog(op_type, _this);
+            L.Common.initRuleSortEvent(op_type, _this);
+
+            L.Common.initSelectorAddDialog(op_type, _this);
+            L.Common.initSelectorDeleteDialog(op_type, _this);
+            L.Common.initSelectorEditDialog(op_type, _this);
+            L.Common.initSelectorSortEvent(op_type, _this);
+            L.Common.initSelectorClickEvent(op_type, _this);
+            //选择器类型选择事件
+            L.Common.initSelectorTypeChangeEvent();
+            //添加或删除条件
+            L.Common.initConditionAddOrRemove();
+            //judge类型选择事件
+            L.Common.initJudgeTypeChangeEvent();
+            //condition类型选择事件
+            L.Common.initConditionTypeChangeEvent();
+
+            L.Common.initViewAndDownloadEvent(op_type, _this);
+            //redirect关闭、开启
+            L.Common.initSwitchBtn(op_type, _this);
+            //编辑规则对话框
+            L.Common.initSyncDialog(op_type, _this);
+        },
+
+        buildRule: function () {
+            let result = {
+                success: false,
+                data: {
+                    name: null,
+                    judge: {},
+                    handle: {}
+                }
+            };
+
+            //build name and judge
+            let buildJudgeResult = L.Common.buildJudge();
+            if (buildJudgeResult.success == true) {
+                result.data.name = buildJudgeResult.data.name;
+                result.data.judge = buildJudgeResult.data.judge;
+            } else {
+                result.success = false;
+                result.data = buildJudgeResult.data;
+                return result;
+            }
+
+            //build handle
+            let buildHandleResult = _this.buildHandle();
+            if (buildHandleResult.success == true) {
+                result.data.handle = buildHandleResult.handle;
+            } else {
+                result.success = false;
+                result.data = buildHandleResult.data;
+                return result;
+            }
+
+            //enable or not
+            let enable = $('#rule-enable').is(':checked');
+            result.data.enable = enable;
+
+            result.success = true;
+            return result;
+        },
+
+        buildHandle: function () {
+            let result = {};
+            let handle = {};
+            // 检查秘钥是否为空
+            let handle_secret = $("#rule-handle-secret").val();
+            if (!handle_secret) {
+                result.success = false;
+                result.data = "[秘钥] 不能为空";
+                return result
+            }
+
+            let handle_algorithm = $("#rule-handle-algorithm").val();
+            if (!handle_algorithm) {
+                result.success = false;
+                result.data = "[算法] 不能为空";
+                return result
+            }
+
+            let handle_timeout = $("#rule-handle-timeout").val();
+            if (!handle_timeout) {
+                result.success = false;
+                result.data = "[超时] 不能为空";
+                return result
+            }
+
+            handle.credentials = {};
+            handle.credentials.secret = handle_secret;
+            handle.credentials.algorithm = handle_algorithm;
+            handle.credentials.timeout = parseInt(handle_timeout);
+
+            // 检查处理码是否为空
+            let handle_code = $("#rule-handle-code").val();
+            if (!handle_code) {
+                result.success = false;
+                result.data = "[处理] 状态码不能为空";
+                return result;
+            }
+
+            handle.code = parseInt(handle_code);
+            handle.log = ($("#rule-handle-log").val() === "true");
+            result.success = true;
+            result.handle = handle;
+            return result;
+        },
+    };
+}(APP));
diff --git a/dashboard/views/common/left_nav.html b/dashboard/views/common/left_nav.html
@@ -90,7 +90,12 @@
                     <span class="nav-label">Jwt Auth</span>
                 </a>
             </li>
-
+            <li id="nav-hmac-auth">
+                <a href="/hmac_auth">
+                    <i class="fa fa-lock"></i>
+                    <span class="nav-label">Hmac Auth</span>
+                </a>
+            </li>
             <li id="nav-signature-auth">
                 <a href="/signature_auth">
                     <i class="fa fa-minus-circle"></i>

diff --git a/dashboard/views/hmac_auth/credential-add.html b/dashboard/views/hmac_auth/credential-add.html
@@ -0,0 +1,34 @@
+<!-- 私钥 -->
+<div id="secret-area">
+    <div class="form-group secret-holder">
+        <label class="col-sm-1 control-label">秘钥</label>
+        <div class="col-sm-11">
+            <input type="text" class="form-control" name="rule-handle-secret" id="rule-handle-secret" placeholder="秘钥">
+        </div>
+    </div>
+</div>
+
+<!-- 算法 -->
+<div id="algorithm-area">
+    <div class="form-group algorithm-holder">
+        <label class="col-sm-1 control-label">算法</label>
+        <div class="col-sm-11">
+            <select class="form-control" name="rule-handle-algorithm" id="rule-handle-algorithm">
+                <option value="hmac-sha1">HMAC-SHA1</option>
+                <option value="hmac-sha256" disabled>HMAC-SHA256（依赖openssl模块）</option>
+                <option value="hmac-sha384" disabled>HMAC-SHA384（依赖openssl模块）</option>
+                <option value="hmac-sha512" disabled>HMAC-SHA512（依赖openssl模块）</option>
+            </select>
+        </div>
+    </div>
+</div>
+
+<!-- 超时 -->
+<div id="timeout-area">
+    <div class="form-group secret-holder">
+        <label class="col-sm-1 control-label">超时</label>
+        <div class="col-sm-11">
+            <input type="text" class="form-control" name="rule-handle-timeout" id="rule-handle-timeout" placeholder="超时（秒）">
+        </div>
+    </div>
+</div>
diff --git a/dashboard/views/hmac_auth/credential-edit.html b/dashboard/views/hmac_auth/credential-edit.html
@@ -0,0 +1,34 @@
+<!-- 私钥 -->
+<div id="secret-area">
+    <div class="form-group secret-holder">
+        <label class="col-sm-1 control-label">秘钥</label>
+        <div class="col-sm-11">
+            <input type="text" class="form-control" name="rule-handle-secret" id="rule-handle-secret" placeholder="秘钥" value="${r.handle.credentials.secret}">
+        </div>
+    </div>
+</div>
+
+<!-- 算法 -->
+<div id="algorithm-area">
+    <div class="form-group algorithm-holder">
+        <label class="col-sm-1 control-label">算法</label>
+        <div class="col-sm-11">
+            <select class="form-control" name="rule-handle-algorithm" id="rule-handle-algorithm">
+                <option value="hmac-sha1" {@if r.handle.credentials.algorithm == 'hmac-sha1' } selected {@/if}>HMAC-SHA1</option>
+                <option value="hmac-sha256" {@if r.handle.credentials.algorithm == 'hmac-sha256' } selected {@/if} disabled>HMAC-SHA256（依赖openssl模块）</option>
+                <option value="hmac-sha384" {@if r.handle.credentials.algorithm == 'hmac-sha384' } selected {@/if} disabled>HMAC-SHA384（依赖openssl模块）</option>
+                <option value="hmac-sha512" {@if r.handle.credentials.algorithm == 'hmac-sha512' } selected {@/if} disabled>HMAC-SHA512（依赖openssl模块）</option>
+            </select>
+        </div>
+    </div>
+</div>
+
+<!-- 超时 -->
+<div id="timeout-area">
+    <div class="form-group secret-holder">
+        <label class="col-sm-1 control-label">超时</label>
+        <div class="col-sm-11">
+            <input type="text" class="form-control" name="rule-handle-timeout" id="rule-handle-timeout" placeholder="超时（秒）" value="${r.handle.credentials.timeout}">
+        </div>
+    </div>
+</div>
diff --git a/dashboard/views/hmac_auth/credential-tmpl.html b/dashboard/views/hmac_auth/credential-tmpl.html
@@ -0,0 +1,30 @@
+<script type="text/template" id="single-credential-tmpl">
+    <div class="form-group pair credential-holder">
+        <label class="col-sm-1 control-label"></label>
+        <div class="col-sm-3" style="width: 120px; line-height: 38px;">
+            <select class="form-control" name="rule-handle-credential-type">
+                <option value="1">Header</option>
+                <option value="2">Query</option>
+                <option value="3">PostParam</option>
+            </select>
+        </div>
+
+        <div class="col-sm-3" style="padding-left:0">
+            <input type="text" class="form-control" name="rule-handle-credential-key" placeholder="key">
+        </div>
+        <div class="col-sm-3" style="padding-left:0">
+            <input type="text" class="form-control" name="rule-handle-credential-target-value" placeholder="target value">
+        </div>
+        <div class="col-sm-1" style="margin-top:5px">
+            <span class="input-group-btn">
+                <a class="btn btn-remove" style="padding:0 5px;">
+                    <i class="fa fa-remove"></i>
+                </a>
+                <a class="btn btn-add" style="padding:0 5px;">
+                    <i class="fa fa-plus"></i>
+                </a>
+            </span>
+        </div>
+    </div>
+</script>
+<!--single credential tmpl-->