chore: 初始开源发布

iotlcm-upstream-chan：运营商上游通道适配服务（统一 /sim/* 协议）。 - 内联原私有依赖：yunze-public → internal/pub/（10 包 18 文件）， yunze-pb/pb → internal/pb/（9 文件）；Consul 注册改用官方 gogf/gf/contrib/registry/consul/v2（API 兼容） - Go module：yz-svr → git.5iot.com/iotlcm-public/iotlcm-upstream-chan - 修复 mingqian 包测试：实现重构后 `adapter.operations` 字段已移除，测试断言按当前实现语义重写（不改产品行为） - 凭据与内部标识脱敏：MySQL/Redis/Consul 凭据、私网与生产 IP、内网域名、真实手机号、注释里的真实 token/transid - 移除内部资产：CI 触发器、生产通道种子 SQL、真实凭据测试资源文档 - Dockerfile 改用公共基础镜像，移除写死的 registry 凭据 - 补 Apache-2.0 LICENSE，重写 README，LF 行尾 + .gitattributes
2026-10-22 15:42:29 +08:00
commit 96b1edff45
191 changed files with 30805 additions and 0 deletions
@@ -0,0 +1,232 @@
+package cmd
+
+import (
+	"context"
+	"fmt"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/controller/cardquery"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/controller/infopb"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/controller/msgcallpb"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/service"
+	sharedtoken "git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/token"
+
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/pub/xjpubconsts"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/pub/xjpubservice"
+	"github.com/gogf/gf/contrib/rpc/grpcx/v2"
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/net/ghttp"
+	"github.com/gogf/gf/v2/net/gsvc"
+	"github.com/gogf/gf/v2/os/gcmd"
+	"github.com/gogf/gf/v2/util/gconv"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/reflection"
+)
+
+const (
+	ServiceNamePrefix = "iotlcmupstreamchan"
+)
+
+var (
+	gGrpcPort = 8700
+	gAccessIP = "0.0.0.0"
+)
+var (
+	Main = gcmd.Command{
+		Name:  "main",
+		Usage: "main",
+		Brief: "start http server",
+		Func: func(ctx context.Context, parser *gcmd.Parser) (err error) {
+			s := g.Server()
+			gGrpcPort = gconv.Int(gcmd.GetOptWithEnv("grpcport"))
+			gAccessIP = gconv.String(gcmd.GetOptWithEnv("accessip"))
+
+			if len(gAccessIP) == 0 {
+				gAccessIP = "0.0.0.0"
+			}
+			if gGrpcPort == 0 {
+				gGrpcPort = 8110
+			}
+			nodeName := fmt.Sprintf("%s", ServiceNamePrefix)
+
+			xjpubservice.Info().SetInfoName(xjpubconsts.ServiceTypeAccess, fmt.Sprintf("%s-http-svc", ServiceNamePrefix), "上游运营商渠道服务", "上游运营商渠道服务")
+			xjpubservice.Info().AddInfoData("grpcport", gGrpcPort)
+			xjpubservice.Info().AddInfoData("accessip", gAccessIP)
+			xjpubservice.Info().AddInfoData("nodeName", nodeName)
+
+			xjpubservice.InfoRpc().SetInfoName(xjpubconsts.ServiceTypeAccess, fmt.Sprintf("%s-grpc-svc", ServiceNamePrefix), "上游运营商渠道服务", "上游运营商渠道服务")
+			xjpubservice.InfoRpc().AddInfoData("grpcport", gGrpcPort)
+			xjpubservice.InfoRpc().AddInfoData("accessip", gAccessIP)
+			xjpubservice.InfoRpc().AddInfoData("nodeName", nodeName)
+			bindHTTPRoutes(s)
+			err = service.ChannelConfig().Start(ctx)
+			if err != nil {
+				return err
+			}
+
+			err = service.UpstreamAPI().Start(ctx)
+			if err != nil {
+				return err
+			}
+
+			go func() {
+				c := grpcx.Server.NewConfig()
+				c.Endpoints = []string{fmt.Sprintf("%s:%d", gAccessIP, gGrpcPort)}
+				c.Options = append(c.Options, []grpc.ServerOption{
+					grpcx.Server.ChainUnary(
+						grpcx.Server.UnaryValidate,
+					),
+				}...)
+				sGRPC := grpcx.Server.New(c)
+				sGRPC.Service(&gsvc.LocalService{
+					Name:      fmt.Sprintf("%s-grpc-svc", ServiceNamePrefix),
+					Endpoints: gsvc.Endpoints{gsvc.NewEndpoint(fmt.Sprintf("%s:%d", gAccessIP, gGrpcPort))},
+					Metadata: gsvc.Metadata{
+						gsvc.MDProtocol: "grpc",
+						gsvc.MDInsecure: true,
+					},
+				})
+				infopb.Register(sGRPC)
+				msgcallpb.Register(sGRPC)
+				reflection.Register(sGRPC.Server)
+				g.Log().Infof(ctx, "GRPC Server启动, listenPort:%d", gGrpcPort)
+				sGRPC.Run()
+				g.Log().Infof(ctx, "GRPC Server堵塞运行结束")
+			}()
+
+			s.Run()
+			service.UpstreamAPI().Stop(ctx)
+			service.ChannelConfig().Stop(ctx)
+			return nil
+		},
+	}
+)
+
+type sharedTokenGetter interface {
+	GetSharedToken(ctx context.Context) (sharedtoken.OneLinkToken, error)
+}
+
+func bindHTTPRoutes(s *ghttp.Server) {
+	s.Group("/", func(group *ghttp.RouterGroup) {
+		group.Middleware(ghttp.MiddlewareHandlerResponse)
+		group.Bind(
+			cardquery.NewV1(),
+		)
+		// Internal control endpoint used to apply a single channel change
+		// without waiting for the periodic full reload.
+		group.POST("/internal/channel/test", func(r *ghttp.Request) {
+			input := new(model.ChannelTestInput)
+			if err := r.Parse(input); err != nil {
+				r.SetError(err)
+				return
+			}
+			output, err := service.UpstreamAPI().TestChannel(r.Context(), input)
+			if err != nil {
+				r.SetError(err)
+				return
+			}
+			r.Response.WriteJson(g.Map{"code": 0, "message": "success", "data": output})
+		})
+		group.POST("/internal/channel/refresh", func(r *ghttp.Request) {
+			chanKey := r.GetQuery("chanKey").String()
+			if chanKey == "" {
+				chanKey = r.Get("chanKey").String()
+			}
+			if err := service.UpstreamAPI().RefreshChannel(r.Context(), chanKey); err != nil {
+				r.SetError(err)
+				return
+			}
+			r.Response.WriteJson(g.Map{
+				"code":    0,
+				"message": "success",
+				"data":    g.Map{"chanKey": chanKey, "refreshed": true},
+			})
+		})
+		group.POST("/internal/channel/remove", func(r *ghttp.Request) {
+			chanKey := r.GetQuery("chanKey").String()
+			if chanKey == "" {
+				chanKey = r.Get("chanKey").String()
+			}
+			if err := service.UpstreamAPI().RemoveChannel(r.Context(), chanKey); err != nil {
+				r.SetError(err)
+				return
+			}
+			r.Response.WriteJson(g.Map{
+				"code":    0,
+				"message": "success",
+				"data":    g.Map{"chanKey": chanKey, "removed": true},
+			})
+		})
+		group.POST("/internal/channel/shared-token", func(r *ghttp.Request) {
+			chanKey := r.Get("chanKey").String()
+			if chanKey == "" {
+				r.Response.WriteJson(g.Map{
+					"code":    50,
+					"message": "chanKey不能为空",
+				})
+				return
+			}
+			channelCache, ok := service.UpstreamAPI().GetChan(chanKey)
+			if !ok || channelCache.Instance == nil {
+				if err := service.UpstreamAPI().RefreshChannel(r.Context(), chanKey); err != nil {
+					g.Log().Errorf(r.Context(), "shared-token refresh channel failed, chanKey: %s, err: %+v", chanKey, err)
+					r.Response.WriteJson(g.Map{
+						"code":    50,
+						"message": "通道实例化失败",
+					})
+					return
+				}
+				channelCache, ok = service.UpstreamAPI().GetChan(chanKey)
+				if !ok || channelCache.Instance == nil {
+					r.Response.WriteJson(g.Map{
+						"code":    50,
+						"message": "通道不存在",
+					})
+					return
+				}
+			}
+			provider, ok := channelCache.Instance.(sharedTokenGetter)
+			if !ok {
+				r.Response.WriteJson(g.Map{
+					"code":    50,
+					"message": "该通道不支持共享Token",
+				})
+				return
+			}
+			tok, err := provider.GetSharedToken(r.Context())
+			if err != nil {
+				g.Log().Errorf(r.Context(), "shared-token get token failed, chanKey: %s, err: %+v", chanKey, err)
+				r.Response.WriteJson(g.Map{
+					"code":    50,
+					"message": "获取共享Token失败",
+				})
+				return
+			}
+			if tok.Value == "" {
+				r.Response.WriteJson(g.Map{
+					"code":    50,
+					"message": "该通道尚未获取共享Token",
+				})
+				return
+			}
+			chanAlias := ""
+			if channelConf, ok := service.ChannelConfig().GetChannel(chanKey); ok && channelConf.Channel != nil {
+				chanAlias = channelConf.Channel.ChanAlias
+			}
+			tokenExpire := ""
+			if !tok.ExpiresAt.IsZero() {
+				// Go time layouts use the reference date, not PHP-style format tokens.
+				tokenExpire = tok.ExpiresAt.Format("2006-01-02 15:04:05")
+			}
+			r.Response.WriteJson(g.Map{
+				"code":    0,
+				"message": "success",
+				"data": g.Map{
+					"chanAlias":         chanAlias,
+					"chanKey":           chanKey,
+					"accessToken":       tok.Value,
+					"accessTokenExpire": tokenExpire,
+				},
+			})
+		})
+	})
+}
@@ -0,0 +1,68 @@
+package cmd
+
+import (
+	"fmt"
+	"net/http"
+	"strings"
+	"testing"
+
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/net/ghttp"
+	"github.com/gogf/gf/v2/os/gcfg"
+)
+
+func TestInternalChannelTestWithoutTokenReachesRequestValidation(t *testing.T) {
+	oldAdapter := g.Cfg().GetAdapter()
+	adapter, err := gcfg.NewAdapterContent(`{"internal":{}}`)
+	if err != nil {
+		t.Fatal(err)
+	}
+	g.Cfg().SetAdapter(adapter)
+	t.Cleanup(func() { g.Cfg().SetAdapter(oldAdapter) })
+
+	server := ghttp.GetServer(t.Name())
+	server.SetAddr("127.0.0.1:0")
+	bindHTTPRoutes(server)
+	if err := server.Start(); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = server.Shutdown() })
+	response, err := http.Post(fmt.Sprintf("http://127.0.0.1:%d/internal/channel/test", server.GetListenedPort()), "application/json", strings.NewReader(`{}`))
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer response.Body.Close()
+	if response.StatusCode == http.StatusForbidden {
+		t.Fatalf("request was rejected before existing parameter validation: status=%d", response.StatusCode)
+	}
+}
+
+func TestBindHTTPRoutesRegistersChannelControlRoutes(t *testing.T) {
+	server := ghttp.GetServer("chan-channel-control-route-test")
+	server.SetAddr("127.0.0.1:0")
+	bindHTTPRoutes(server)
+	if err := server.Start(); err != nil {
+		t.Fatalf("start HTTP server: %v", err)
+	}
+	t.Cleanup(func() {
+		if err := server.Shutdown(); err != nil {
+			t.Errorf("shutdown HTTP server: %v", err)
+		}
+	})
+
+	want := map[string]bool{
+		"/internal/channel/test":    false,
+		"/internal/channel/refresh": false,
+		"/internal/channel/remove":  false,
+	}
+	for _, route := range server.GetRoutes() {
+		if _, ok := want[route.Route]; ok && strings.EqualFold(route.Method, "POST") {
+			want[route.Route] = true
+		}
+	}
+	for route, found := range want {
+		if !found {
+			t.Fatalf("POST %s route was not registered: %+v", route, server.GetRoutes())
+		}
+	}
+}
@@ -0,0 +1,84 @@
+package cmd
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"testing"
+
+	_ "git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/logic/channelconfig"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/logic/upstreamapi"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/model"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/model/entity"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/service"
+
+	"github.com/gogf/gf/v2/net/ghttp"
+)
+
+type sharedTokenGateConfig struct {
+	service.IChannelConfig
+	config *model.SimChannelConfigItemCache
+}
+
+func (c *sharedTokenGateConfig) RefreshChannel(context.Context, string) error { return nil }
+func (c *sharedTokenGateConfig) GetChannel(string) (*model.SimChannelConfigItemCache, bool) {
+	return c.config, true
+}
+
+type sharedTokenGateTemplate struct{ calls int }
+
+func (f *sharedTokenGateTemplate) NewTemp(context.Context, *model.SimChannelConfigItemCache) model.SimCardChannelI {
+	f.calls++
+	return nil
+}
+
+func TestSharedTokenCannotCreateIneligibleChannel(t *testing.T) {
+	// The endpoint uses the real RefreshChannel implementation; no database or carrier calls.
+	oldAPI := service.UpstreamAPI()
+	t.Cleanup(func() { service.RegisterUpstreamAPI(oldAPI) })
+	oldConfig := service.ChannelConfig()
+	config := &sharedTokenGateConfig{}
+	service.RegisterChannelConfig(config)
+	t.Cleanup(func() { service.RegisterChannelConfig(oldConfig) })
+	api := upstreamapi.NewUpstreamAPI()
+	service.RegisterUpstreamAPI(api)
+	factory := &sharedTokenGateTemplate{}
+	api.RegisterTemp("gate_test", factory)
+	server := ghttp.GetServer(t.Name())
+	server.SetAddr("127.0.0.1:0")
+	bindHTTPRoutes(server)
+	if err := server.Start(); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = server.Shutdown() })
+	one, unexpected := 1, 2
+	for _, value := range []*int{nil, &one, &unexpected} {
+		config.config = &model.SimChannelConfigItemCache{
+			Channel:  &entity.TSimChannels{ChanKey: "gate_channel", TempKey: "gate_test"},
+			Template: &entity.TSimChannelTemplate{TempKey: "gate_test"},
+			IsNormal: value,
+		}
+		resp, err := http.Post(fmt.Sprintf("http://127.0.0.1:%d/internal/channel/shared-token?chanKey=gate_channel", server.GetListenedPort()), "", nil)
+		if err != nil {
+			t.Fatal(err)
+		}
+		var body struct {
+			Code int `json:"code"`
+		}
+		err = json.NewDecoder(resp.Body).Decode(&body)
+		resp.Body.Close()
+		if err != nil {
+			t.Fatal(err)
+		}
+		if body.Code != 50 {
+			t.Fatalf("unexpected response: %+v", body)
+		}
+		if factory.calls != 0 {
+			t.Fatal("shared-token endpoint bypassed the normal gate")
+		}
+		if _, ok := api.GetChan("gate_channel"); ok {
+			t.Fatal("shared-token endpoint cached an ineligible instance")
+		}
+	}
+}