405 lines
16 KiB
Python
405 lines
16 KiB
Python
from __future__ import annotations
|
||
|
||
import json
|
||
import tkinter as tk
|
||
from pathlib import Path
|
||
from tkinter import filedialog, messagebox, ttk
|
||
from tkinter.scrolledtext import ScrolledText
|
||
|
||
from issue_license import (
|
||
BACKEND_LICENSE_SERVICE_FILE,
|
||
PUBLIC_KEY_FILE,
|
||
get_key_status,
|
||
get_machine_fingerprint,
|
||
issue_license_file,
|
||
rotate_key_pair,
|
||
sync_backend_public_key,
|
||
verify_license_file,
|
||
)
|
||
|
||
|
||
class LicenseIssuerApp(tk.Tk):
|
||
def __init__(self) -> None:
|
||
super().__init__()
|
||
self.title("InSAR 授权签发工具")
|
||
self.geometry("920x720")
|
||
self.minsize(860, 620)
|
||
|
||
self.fingerprint_var = tk.StringVar()
|
||
self.issue_to_var = tk.StringVar()
|
||
self.issue_fingerprint_var = tk.StringVar()
|
||
self.issue_days_var = tk.StringVar(value="365")
|
||
self.issue_output_var = tk.StringVar()
|
||
self.verify_path_var = tk.StringVar()
|
||
self.backend_target_var = tk.StringVar(value=str(BACKEND_LICENSE_SERVICE_FILE))
|
||
self.status_var = tk.StringVar(value="就绪")
|
||
self.key_summary_var = tk.StringVar(value="")
|
||
|
||
self._build_ui()
|
||
self.refresh_fingerprint()
|
||
self.refresh_keys()
|
||
|
||
def _build_ui(self) -> None:
|
||
container = ttk.Frame(self, padding=12)
|
||
container.pack(fill="both", expand=True)
|
||
|
||
header = ttk.Frame(container)
|
||
header.pack(fill="x")
|
||
|
||
ttk.Label(
|
||
header,
|
||
text="InSAR 授权签发工具",
|
||
font=("Segoe UI", 16, "bold"),
|
||
).pack(anchor="w")
|
||
ttk.Label(
|
||
header,
|
||
text="基于现有 LIC2 协议，通过桌面窗体完成指纹获取、签发、验签和密钥管理。",
|
||
).pack(anchor="w", pady=(4, 10))
|
||
|
||
notebook = ttk.Notebook(container)
|
||
notebook.pack(fill="both", expand=True)
|
||
|
||
self._build_fingerprint_tab(notebook)
|
||
self._build_issue_tab(notebook)
|
||
self._build_verify_tab(notebook)
|
||
self._build_keys_tab(notebook)
|
||
|
||
status_bar = ttk.Label(
|
||
container,
|
||
textvariable=self.status_var,
|
||
relief="sunken",
|
||
anchor="w",
|
||
padding=(8, 4),
|
||
)
|
||
status_bar.pack(fill="x", pady=(10, 0))
|
||
|
||
def _build_fingerprint_tab(self, notebook: ttk.Notebook) -> None:
|
||
frame = ttk.Frame(notebook, padding=12)
|
||
notebook.add(frame, text="机器指纹")
|
||
|
||
ttk.Label(
|
||
frame,
|
||
text="获取当前机器指纹。该值可以发给签发端，用于生成绑定本机的授权文件。",
|
||
wraplength=760,
|
||
).pack(anchor="w")
|
||
|
||
row = ttk.Frame(frame)
|
||
row.pack(fill="x", pady=(16, 8))
|
||
ttk.Entry(row, textvariable=self.fingerprint_var, state="readonly").pack(
|
||
side="left",
|
||
fill="x",
|
||
expand=True,
|
||
)
|
||
|
||
button_row = ttk.Frame(frame)
|
||
button_row.pack(fill="x", pady=(4, 8))
|
||
ttk.Button(button_row, text="刷新", command=self.refresh_fingerprint).pack(side="left")
|
||
ttk.Button(button_row, text="复制", command=self.copy_fingerprint).pack(side="left", padx=(8, 0))
|
||
ttk.Button(
|
||
button_row,
|
||
text="填入签发表单",
|
||
command=self.use_current_fingerprint_for_issue,
|
||
).pack(side="left", padx=(8, 0))
|
||
|
||
self.fingerprint_details = ScrolledText(frame, height=18, wrap="word")
|
||
self.fingerprint_details.pack(fill="both", expand=True, pady=(12, 0))
|
||
self._set_text(
|
||
self.fingerprint_details,
|
||
"当前指纹由硬件标识计算得到，算法与 backend/app/license_service.py 保持一致。\n",
|
||
)
|
||
|
||
def _build_issue_tab(self, notebook: ttk.Notebook) -> None:
|
||
frame = ttk.Frame(notebook, padding=12)
|
||
notebook.add(frame, text="签发授权")
|
||
|
||
form = ttk.Frame(frame)
|
||
form.pack(fill="x")
|
||
form.columnconfigure(1, weight=1)
|
||
|
||
ttk.Label(form, text="授权对象").grid(row=0, column=0, sticky="w", pady=6)
|
||
ttk.Entry(form, textvariable=self.issue_to_var).grid(row=0, column=1, sticky="ew", pady=6)
|
||
|
||
ttk.Label(form, text="机器指纹").grid(row=1, column=0, sticky="w", pady=6)
|
||
ttk.Entry(form, textvariable=self.issue_fingerprint_var).grid(row=1, column=1, sticky="ew", pady=6)
|
||
|
||
ttk.Label(form, text="有效天数").grid(row=2, column=0, sticky="w", pady=6)
|
||
ttk.Entry(form, textvariable=self.issue_days_var, width=12).grid(row=2, column=1, sticky="w", pady=6)
|
||
|
||
ttk.Label(form, text="输出文件").grid(row=3, column=0, sticky="w", pady=6)
|
||
output_row = ttk.Frame(form)
|
||
output_row.grid(row=3, column=1, sticky="ew", pady=6)
|
||
output_row.columnconfigure(0, weight=1)
|
||
ttk.Entry(output_row, textvariable=self.issue_output_var).grid(row=0, column=0, sticky="ew")
|
||
ttk.Button(output_row, text="浏览", command=self.browse_issue_output).grid(row=0, column=1, padx=(8, 0))
|
||
|
||
button_row = ttk.Frame(frame)
|
||
button_row.pack(fill="x", pady=(10, 8))
|
||
ttk.Button(button_row, text="使用本机指纹", command=self.use_current_fingerprint_for_issue).pack(side="left")
|
||
ttk.Button(button_row, text="生成授权文件", command=self.issue_license_action).pack(side="left", padx=(8, 0))
|
||
|
||
self.issue_output_box = ScrolledText(frame, height=20, wrap="word")
|
||
self.issue_output_box.pack(fill="both", expand=True, pady=(8, 0))
|
||
self._set_text(
|
||
self.issue_output_box,
|
||
"填写表单后，点击“生成授权文件”。\n",
|
||
)
|
||
|
||
def _build_verify_tab(self, notebook: ttk.Notebook) -> None:
|
||
frame = ttk.Frame(notebook, padding=12)
|
||
notebook.add(frame, text="验证授权")
|
||
|
||
ttk.Label(
|
||
frame,
|
||
text="使用当前目录中的 public_key.b64 验证已有的 .lic 授权文件。",
|
||
wraplength=760,
|
||
).pack(anchor="w")
|
||
|
||
row = ttk.Frame(frame)
|
||
row.pack(fill="x", pady=(14, 8))
|
||
row.columnconfigure(0, weight=1)
|
||
ttk.Entry(row, textvariable=self.verify_path_var).grid(row=0, column=0, sticky="ew")
|
||
ttk.Button(row, text="浏览", command=self.browse_verify_file).grid(row=0, column=1, padx=(8, 0))
|
||
ttk.Button(row, text="开始验证", command=self.verify_license_action).grid(row=0, column=2, padx=(8, 0))
|
||
|
||
self.verify_output_box = ScrolledText(frame, height=24, wrap="word")
|
||
self.verify_output_box.pack(fill="both", expand=True, pady=(8, 0))
|
||
self._set_text(
|
||
self.verify_output_box,
|
||
"选择一个授权文件，然后点击“开始验证”。\n",
|
||
)
|
||
|
||
def _build_keys_tab(self, notebook: ttk.Notebook) -> None:
|
||
frame = ttk.Frame(notebook, padding=12)
|
||
notebook.add(frame, text="密钥管理")
|
||
|
||
ttk.Label(
|
||
frame,
|
||
text="管理签发密钥，并可选地将 public_key.b64 同步到 backend/app/license_service.py。",
|
||
wraplength=760,
|
||
).pack(anchor="w")
|
||
|
||
target_row = ttk.Frame(frame)
|
||
target_row.pack(fill="x", pady=(14, 8))
|
||
target_row.columnconfigure(1, weight=1)
|
||
ttk.Label(target_row, text="后端目标文件").grid(row=0, column=0, sticky="w")
|
||
ttk.Entry(target_row, textvariable=self.backend_target_var).grid(row=0, column=1, sticky="ew", padx=(8, 0))
|
||
ttk.Button(target_row, text="浏览", command=self.browse_backend_target).grid(row=0, column=2, padx=(8, 0))
|
||
|
||
ttk.Label(frame, textvariable=self.key_summary_var, wraplength=780).pack(anchor="w", pady=(6, 8))
|
||
|
||
button_row = ttk.Frame(frame)
|
||
button_row.pack(fill="x", pady=(0, 8))
|
||
ttk.Button(button_row, text="刷新状态", command=self.refresh_keys).pack(side="left")
|
||
ttk.Button(button_row, text="轮换密钥", command=self.rotate_key_action).pack(side="left", padx=(8, 0))
|
||
ttk.Button(button_row, text="强制轮换", command=lambda: self.rotate_key_action(force=True)).pack(side="left", padx=(8, 0))
|
||
ttk.Button(button_row, text="同步公钥到后端", command=self.sync_backend_action).pack(side="left", padx=(8, 0))
|
||
|
||
self.key_output_box = ScrolledText(frame, height=24, wrap="word")
|
||
self.key_output_box.pack(fill="both", expand=True, pady=(8, 0))
|
||
self._set_text(
|
||
self.key_output_box,
|
||
f"后端文件：{BACKEND_LICENSE_SERVICE_FILE}\n公钥文件：{PUBLIC_KEY_FILE}\n",
|
||
)
|
||
|
||
def _set_status(self, message: str) -> None:
|
||
self.status_var.set(message)
|
||
|
||
def _set_text(self, widget: ScrolledText, text: str) -> None:
|
||
widget.configure(state="normal")
|
||
widget.delete("1.0", "end")
|
||
widget.insert("1.0", text)
|
||
widget.configure(state="disabled")
|
||
|
||
def _copy_text(self, text: str) -> None:
|
||
self.clipboard_clear()
|
||
self.clipboard_append(text)
|
||
self.update()
|
||
|
||
def refresh_fingerprint(self) -> None:
|
||
fingerprint = get_machine_fingerprint()
|
||
self.fingerprint_var.set(fingerprint)
|
||
self._set_text(
|
||
self.fingerprint_details,
|
||
"当前机器指纹：\n\n"
|
||
f"{fingerprint}\n\n"
|
||
"可以点击“复制”发给签发端，也可以点击“填入签发表单”做本机测试。\n",
|
||
)
|
||
self._set_status("机器指纹已刷新")
|
||
|
||
def copy_fingerprint(self) -> None:
|
||
if not self.fingerprint_var.get().strip():
|
||
self.refresh_fingerprint()
|
||
self._copy_text(self.fingerprint_var.get().strip())
|
||
self._set_status("机器指纹已复制")
|
||
|
||
def use_current_fingerprint_for_issue(self) -> None:
|
||
if not self.fingerprint_var.get().strip():
|
||
self.refresh_fingerprint()
|
||
self.issue_fingerprint_var.set(self.fingerprint_var.get().strip())
|
||
self._set_status("签发表单已填入当前指纹")
|
||
|
||
def browse_issue_output(self) -> None:
|
||
path = filedialog.asksaveasfilename(
|
||
title="选择输出 .lic 文件",
|
||
defaultextension=".lic",
|
||
filetypes=[("授权文件", "*.lic"), ("所有文件", "*.*")],
|
||
initialfile="license.lic",
|
||
)
|
||
if path:
|
||
self.issue_output_var.set(path)
|
||
|
||
def browse_verify_file(self) -> None:
|
||
path = filedialog.askopenfilename(
|
||
title="选择 .lic 文件",
|
||
filetypes=[("授权文件", "*.lic"), ("所有文件", "*.*")],
|
||
)
|
||
if path:
|
||
self.verify_path_var.set(path)
|
||
|
||
def browse_backend_target(self) -> None:
|
||
path = filedialog.askopenfilename(
|
||
title="选择 backend/app/license_service.py",
|
||
filetypes=[("Python 文件", "*.py"), ("所有文件", "*.*")],
|
||
initialfile="license_service.py",
|
||
)
|
||
if path:
|
||
self.backend_target_var.set(path)
|
||
|
||
def issue_license_action(self) -> None:
|
||
try:
|
||
days = int(self.issue_days_var.get().strip() or "365")
|
||
result = issue_license_file(
|
||
issued_to=self.issue_to_var.get().strip(),
|
||
fingerprint=self.issue_fingerprint_var.get().strip(),
|
||
days=days,
|
||
output=self.issue_output_var.get().strip() or None,
|
||
)
|
||
except Exception as exc:
|
||
messagebox.showerror("签发授权", str(exc))
|
||
self._set_status("生成授权失败")
|
||
return
|
||
|
||
payload = result["payload"]
|
||
output_path = result["output_path"]
|
||
self.issue_output_var.set(output_path)
|
||
text = (
|
||
"授权文件生成成功。\n\n"
|
||
f"输出文件：{output_path}\n"
|
||
f"授权对象：{payload['issued_to']}\n"
|
||
f"机器指纹：{payload['fingerprint']}\n"
|
||
f"签发时间：{payload['issued_at']}\n"
|
||
f"到期时间：{payload['expires_at']}\n"
|
||
)
|
||
self._set_text(self.issue_output_box, text)
|
||
self._set_status("授权文件已生成")
|
||
messagebox.showinfo("签发授权", f"授权文件已生成：\n{output_path}")
|
||
|
||
def verify_license_action(self) -> None:
|
||
path = self.verify_path_var.get().strip()
|
||
if not path:
|
||
messagebox.showwarning("验证授权", "请先选择一个 .lic 授权文件。")
|
||
return
|
||
|
||
try:
|
||
result = verify_license_file(path)
|
||
except Exception as exc:
|
||
messagebox.showerror("验证授权", str(exc))
|
||
self._set_status("授权验证失败")
|
||
return
|
||
|
||
if not result["ok"]:
|
||
self._set_text(
|
||
self.verify_output_box,
|
||
json.dumps(result, ensure_ascii=False, indent=2),
|
||
)
|
||
self._set_status("授权文件无效")
|
||
messagebox.showerror("验证授权", result["reason"])
|
||
return
|
||
|
||
text = (
|
||
"授权验证通过。\n\n"
|
||
f"授权文件：{result['license_file']}\n"
|
||
f"授权对象：{result.get('issued_to')}\n"
|
||
f"机器指纹：{result.get('fingerprint')}\n"
|
||
f"签发时间：{result.get('issued_at')}\n"
|
||
f"到期时间：{result.get('expires_at')}\n"
|
||
f"是否过期：{'是' if result.get('expired') else '否'}\n"
|
||
)
|
||
self._set_text(self.verify_output_box, text)
|
||
self._set_status("授权验证通过")
|
||
messagebox.showinfo("验证授权", "授权验证通过。")
|
||
|
||
def refresh_keys(self) -> None:
|
||
status = get_key_status(self.backend_target_var.get().strip() or None)
|
||
lines = [
|
||
f"私钥存在：{'是' if status['private_key_exists'] else '否'}",
|
||
f"公钥存在：{'是' if status['public_key_exists'] else '否'}",
|
||
f"公钥已同步：{'是' if status['backend_synced'] else '否'}",
|
||
f"私钥路径：{status['private_key_path']}",
|
||
f"公钥路径：{status['public_key_path']}",
|
||
f"后端文件：{status['backend_license_service_path']}",
|
||
]
|
||
self.key_summary_var.set("\n".join(lines))
|
||
|
||
key_details = {
|
||
"public_key_b64": status.get("public_key_b64"),
|
||
"backend_public_key_b64": status.get("backend_public_key_b64"),
|
||
"backend_synced": status.get("backend_synced"),
|
||
}
|
||
self._set_text(self.key_output_box, json.dumps(key_details, ensure_ascii=False, indent=2))
|
||
self._set_status("密钥状态已刷新")
|
||
|
||
def rotate_key_action(self, force: bool = False) -> None:
|
||
if force:
|
||
confirmed = messagebox.askyesno(
|
||
"强制轮换密钥",
|
||
"这会覆盖现有密钥对，并使旧授权文件失效。确认继续吗？",
|
||
)
|
||
if not confirmed:
|
||
return
|
||
|
||
try:
|
||
result = rotate_key_pair(force=force)
|
||
except Exception as exc:
|
||
messagebox.showerror("轮换密钥", str(exc))
|
||
self._set_status("密钥轮换失败")
|
||
return
|
||
|
||
self.refresh_keys()
|
||
self._copy_text(result["public_key_b64"])
|
||
self._set_status("密钥轮换完成，公钥已复制")
|
||
|
||
sync_now = messagebox.askyesno(
|
||
"轮换密钥",
|
||
"新密钥对已生成，公钥也已复制到剪贴板。\n\n现在要同步到 backend/app/license_service.py 吗？",
|
||
)
|
||
if sync_now:
|
||
self.sync_backend_action()
|
||
|
||
def sync_backend_action(self) -> None:
|
||
try:
|
||
result = sync_backend_public_key(
|
||
target_path=self.backend_target_var.get().strip() or None,
|
||
)
|
||
except Exception as exc:
|
||
messagebox.showerror("同步公钥", str(exc))
|
||
self._set_status("后端公钥同步失败")
|
||
return
|
||
|
||
self.refresh_keys()
|
||
changed_text = "已更新" if result["changed"] else "已是最新"
|
||
self._set_status(f"后端公钥{changed_text}")
|
||
messagebox.showinfo(
|
||
"同步公钥",
|
||
f"后端公钥{changed_text}：\n{result['target_path']}",
|
||
)
|
||
|
||
|
||
def main() -> None:
|
||
app = LicenseIssuerApp()
|
||
app.mainloop()
|
||
|
||
|
||
if __name__ == "__main__":
|
||
main()
|