卓信反欺诈浏览器和小程序SDK

import { createFilter } from '@rollup/pluginutils';
import { obfuscate } from 'javascript-obfuscator';
import fs from 'fs/promises';
 
export default function dynamicConfigPlugin(options: {
  customerConfig: Record<string, boolean>; // 客户配置-如{ja3: true, miniprogram: false}
  outputPath: string;
}) {
  const { customerConfig, outputPath } = options;
 
  return {
    name: 'rollup-plugin-dynamic-config',
    // 1. 动态生成入口文件
    async buildStart() {
      // 基础导入（必选模块）
      let entryCode = `import { generateDeviceId } from './core/device-id';\n`;
      // 根据配置导入扩展模块
      if (customerConfig.ja3) {
        entryCode += `import { initJA3 } from './extensions/ja3';\n`;
      }
      if (customerConfig.miniprogram) {
        entryCode += `import { initMiniProgram } from './extensions/miniprogram';\n`;
      }
      // 动态导出API
      entryCode += `export default {
        generateDeviceId: async () => {
          ${customerConfig.ja3 ? 'await initJA3();' : ''}
          ${customerConfig.miniprogram ? 'initMiniProgram();' : ''}
          return generateDeviceId();
        }
      };\n`;
      // 写入临时入口文件
      await fs.writeFile('./src/dynamic-entry.ts', entryCode);
      // 更新Rollup入口
      this.emitFile({
        type: 'chunk',
        id: './src/dynamic-entry.ts',
        fileName: 'device-fingerprint-sdk.js'
      });
    },
    // 2. 过滤未选中的扩展模块
    resolveId(id) {
      if (id.startsWith('./extensions/')) {
        const moduleName = id.split('/')[2];
        if (!customerConfig[moduleName]) {
          return null; // 排除未选中的模块
        }
      }
      return null;
    },
    // 3. 集成代码混淆（生产环境）
    async transform(code, id) {
      if (id.endsWith('.ts') && process.env.NODE_ENV === 'production') {
        const obfuscated = obfuscate(code, {
          compact: true,
          stringArray: true,
          stringArrayEncoding: 'base64'
        });
        return obfuscated.getObfuscatedCode();
      }
      return code;
    },
    // 4. 打包完成后返回下载路径
    async buildEnd() {
      // 此处可将打包产物上传至CDN，返回CDN路径
      const downloadUrl = `https://cdn.example.com/sdk/${Date.now()}/device-fingerprint-sdk.js`;
      this.emitAsset('download-url.txt', downloadUrl);
    }
  };
}

import crypto from 'crypto-js';
 
// 1. 运营商适配器接口
interface OperatorAdapter {
  getLoginParams(): Record<string, string>;
  encryptData(data: Record<string, string>): string;
  parseResponse(raw: string): { token: string; deviceId: string };
}
 
// 2. 电信适配器（处理跨域+加密）
class TelecomAdapter implements OperatorAdapter {
  private appKey = 'telecom_app_key';
  private secret = 'telecom_secret';
 
  getLoginParams() {
    return {
      appKey: this.appKey,
      timestamp: Date.now().toString(),
      format: 'jsonp' // 强制JSONP格式解决跨域
    };
  }
 
  // 轻量AES加密（仅引入CryptoJS核心模块）
  encryptData(data: Record<string, string>) {
    return crypto.AES.encrypt(
      JSON.stringify(data),
      crypto.enc.Utf8.parse(this.secret),
      { mode: crypto.mode.ECB, padding: crypto.pad.Pkcs7 }
    ).toString();
  }
 
  parseResponse(raw: string) {
    // 解析JSONP回调数据
    const jsonStr = raw.match(/callback\((.*)\)/)[1];
    const data = JSON.parse(jsonStr);
    return { token: data.accessToken, deviceId: data.deviceId };
  }
}
 
// 3. 移动适配器（常规请求）
class MobileAdapter implements OperatorAdapter {
  // 实现移动接口的参数、加密、解析逻辑...
}
 
// 4. JSONP轻量实现（100行内）
const jsonpRequest = (url: string, params: Record<string, string>) => {
  return new Promise((resolve, reject) => {
    const callbackName = `jsonp_${Date.now()}`;
    const script = document.createElement('script');
    // 拼接参数（含callback）
    const paramStr = new URLSearchParams({ ...params, callback: callbackName }).toString();
    script.src = `${url}?${paramStr}`;
    // 全局回调函数
    (window as any)[callbackName] = (data: any) => {
      resolve(data);
      // 清理
      delete (window as any)[callbackName];
      document.body.removeChild(script);
    };
    script.onerror = (err) => reject(err);
    document.body.appendChild(script);
  });
};
 
// 5. 统一登录入口
export const operatorLogin = async (operatorType: 'telecom' | 'mobile' | 'unicom') => {
  // 选择适配器
  let adapter: OperatorAdapter;
  switch (operatorType) {
    case 'telecom':
      adapter = new TelecomAdapter();
      break;
    case 'mobile':
      adapter = new MobileAdapter();
      break;
    // 联通适配器...
  }
 
  // 构建请求
  const baseUrl = getOperatorBaseUrl(operatorType);
  const baseParams = adapter.getLoginParams();
  const deviceId = await generateDeviceId(); // 复用之前生成的设备ID
  const encryptedData = adapter.encryptData({ deviceId, ...baseParams });
  const params = { ...baseParams, data: encryptedData };
 
  // 发起请求（电信用JSONP，其他用fetch）
  let response;
  if (operatorType === 'telecom') {
    response = await jsonpRequest(baseUrl, params);
  } else {
    response = await fetch(baseUrl, {
      method: 'POST',
      body: JSON.stringify(params),
      headers: { 'Content-Type': 'application/json' }
    }).then(res => res.json());
  }
 
  // 解析结果
  return adapter.parseResponse(response);
};