LoganandClaude
76ec9387f0
主要变更： - RDP 远程桌面：新增 backend/pkg/rdp（RDP 引擎 + credssp/display/rle/trace）、 backend/controller/rdp*（连接/凭证/文件/会话/实时）、frontend RDP 组件与 API - Windows SMB 文件传输：backend/pkg/winsmb - 云账单同步：backend/pkg/billingsync + billing_sync/aliyun_billing，前端账单详情 - Agent CLI Kubernetes 工具：kubernetes_action/get、pod_execute/logs - 服务器导入助手：server_import_helpers、ImportCredentialSettings - 国际化与组件重构（cloud/deploy/monitor/server/system 等多模块） - 清理编译产物二进制：移除 backend/server、backend/agent/bin/aiops-agent-* - .gitignore：新增 backend/agent/ 与 .cache/（避免 334MB go-build 缓存误入库） Co-Authored-By: Claude <noreply@anthropic.com>
75 lines
2.2 KiB
Go
75 lines
2.2 KiB
Go
package credssp
|
|
|
|
import "encoding/asn1"
|
|
|
|
const defaultCredSSPVersion = 6
|
|
|
|
// negoToken 是 CredSSP TSRequest 中的单个协商令牌 // Logan.Li
|
|
type negoToken struct {
|
|
Data []byte `asn1:"explicit,tag:0"`
|
|
}
|
|
|
|
// tsRequest 是 MS-CSSP 2.2.1.2 TSRequest 的最小实现 // Logan.Li
|
|
type tsRequest struct {
|
|
Version int `asn1:"explicit,tag:0"`
|
|
NegoTokens []negoToken `asn1:"optional,explicit,tag:1"`
|
|
AuthInfo []byte `asn1:"optional,explicit,tag:2"`
|
|
PubKeyAuth []byte `asn1:"optional,explicit,tag:3"`
|
|
ErrorCode int `asn1:"optional,explicit,tag:4"`
|
|
ClientNonce []byte `asn1:"optional,explicit,tag:5"`
|
|
}
|
|
|
|
type tsCredentials struct {
|
|
CredType int `asn1:"explicit,tag:0"`
|
|
Credentials []byte `asn1:"explicit,tag:1"`
|
|
}
|
|
|
|
type tsPasswordCreds struct {
|
|
DomainName []byte `asn1:"explicit,tag:0"`
|
|
UserName []byte `asn1:"explicit,tag:1"`
|
|
Password []byte `asn1:"explicit,tag:2"`
|
|
}
|
|
|
|
func encodeTSRequest(tokens [][]byte, authInfo, pubKeyAuth []byte) ([]byte, error) {
|
|
return encodeTSRequestWithNonce(tokens, authInfo, pubKeyAuth, nil)
|
|
}
|
|
|
|
func encodeTSRequestWithNonce(tokens [][]byte, authInfo, pubKeyAuth, clientNonce []byte) ([]byte, error) {
|
|
return encodeTSRequestVersion(defaultCredSSPVersion, tokens, authInfo, pubKeyAuth, clientNonce)
|
|
}
|
|
|
|
func encodeTSRequestVersion(version int, tokens [][]byte, authInfo, pubKeyAuth, clientNonce []byte) ([]byte, error) {
|
|
req := tsRequest{Version: version}
|
|
for _, token := range tokens {
|
|
req.NegoTokens = append(req.NegoTokens, negoToken{Data: token})
|
|
}
|
|
if len(authInfo) > 0 {
|
|
req.AuthInfo = authInfo
|
|
}
|
|
if len(pubKeyAuth) > 0 {
|
|
req.PubKeyAuth = pubKeyAuth
|
|
}
|
|
if len(clientNonce) > 0 {
|
|
req.ClientNonce = clientNonce
|
|
}
|
|
return asn1.Marshal(req)
|
|
}
|
|
|
|
func decodeTSRequest(data []byte) (*tsRequest, error) {
|
|
var req tsRequest
|
|
_, err := asn1.Unmarshal(data, &req)
|
|
return &req, err
|
|
}
|
|
|
|
func encodePasswordCredentials(domain, user, password string) ([]byte, error) {
|
|
pass, err := asn1.Marshal(tsPasswordCreds{
|
|
DomainName: utf16le(domain),
|
|
UserName: utf16le(user),
|
|
Password: utf16le(password),
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return asn1.Marshal(tsCredentials{CredType: 1, Credentials: pass})
|
|
}
|