Comely
fe5aa5bbf0
update-client-hardening 四工作流合入（构建/静态检查已过）： - 配置：不可变产品策略经 UpdateClientResources.cmake 归一化校验后 内嵌 qrc（URL/相对路径/主程序必须落 install_root/版本/UUID 格式， CMake override 写入前复验）；可变机器状态迁系统级原生存储； 运行目录不再落可编辑 app_config.json。 - i18n：生产源全英文（no-Han 检查 41/41），中文进 translations/ zh_CN 目录；翻译加载收敛 Common/TranslationHelper 唯一入口； Bootstrap 补资源文件。 - 依赖：Qt/OpenSSL/架构/Perl 机器路径改 imported targets + UpdateClientDependencies.cmake，3rdparty 由父工程契约供给。 - 清理：旧 README/SDK README/3 个重复 PowerShell 打包脚本/PDF 提取 文本删除，canonical README + 5 份结构化英文文档替代；Launcher requireAdministrator manifest；统一 MSVC /utf-8 删运行时编码设置。
78 lines
3.3 KiB
C++
78 lines
3.3 KiB
C++
#pragma once
|
|
#include <QObject>
|
|
#include "HttpHelper.h"
|
|
#include "FileHelper.h"
|
|
#include <QJsonObject>
|
|
#include <QJsonArray>
|
|
#include <QJsonDocument>
|
|
#include <QStringList>
|
|
#include <QNetworkReply>
|
|
#include <QMap>
|
|
#include <QElapsedTimer>
|
|
|
|
struct FileDownloadItem
|
|
{
|
|
QString path;
|
|
QString url;
|
|
QString sha256;
|
|
qint64 size;
|
|
};
|
|
|
|
class UpdaterLogic : public QObject
|
|
{
|
|
Q_OBJECT
|
|
public:
|
|
explicit UpdaterLogic(QObject* parent = nullptr);
|
|
|
|
void getManifest(const QString& appId, const QString& channel, const QString& targetVer, int versionId);
|
|
bool verifyManifestSignature(const QString& publicKeyPath = ":/simcae/update-client/manifest-public-key.pem") const;
|
|
bool validateLocalFiles(const QString& stagingDir, const QString& installedDir = QString()) const;
|
|
bool saveManifestCache(const QString& cacheDir) const;
|
|
bool loadManifestCache(const QString& cacheDir, const QString& version);
|
|
bool loadOfflinePackage(const QString& packagePath, const QString& stagingDir = QString());
|
|
QString offlineError() const { return m_offlineError; }
|
|
|
|
void getDownloadUrl(const QString& appId, const QString& channel, const QString& targetVer, int versionId);
|
|
void reportResult(const QString& deviceId, const QString& fromVer, const QString& toVer, bool success);
|
|
void reportDownloadResult(const QString& appId, const QString& channel, const QString& version, bool success);
|
|
bool downloadAllFiles(const QString& tempDir, const QString& targetDir);
|
|
qint64 estimateAdditionalDiskBytes(const QString& targetDir, const QStringList& obsoletePaths) const;
|
|
QString calcLocalFileSha256(const QString& filePath) const;
|
|
|
|
QList<FileDownloadItem> getFileList() const;
|
|
QJsonObject getManifest() const { return m_manifest; }
|
|
QStringList obsoleteFilesComparedTo(const QJsonObject& oldManifest) const;
|
|
QString getManifestText() const { return m_manifestText; }
|
|
bool allDownloadSuccess() const { return m_downloadAllOk; }
|
|
|
|
signals:
|
|
void fetchUrlFinished();
|
|
void downloadProgress(qint64 receivedBytes, qint64 totalBytes,
|
|
const QString& currentPath, double bytesPerSecond);
|
|
|
|
private:
|
|
bool downloadSingleFile(const QString& url, const QString& savePath, const QString& expectSha256,
|
|
qint64 expectedSize, const QString& resumePartPath);
|
|
bool validateOnlineManifest(const QJsonObject& manifest, const QString& appId,
|
|
const QString& channel, const QString& targetVer,
|
|
int versionId, QList<FileDownloadItem>* fileItems) const;
|
|
bool isSafeRelativePath(const QString& path) const;
|
|
bool isRuntimeProtectedPath(const QString& path) const;
|
|
QByteArray canonicalManifestBytes(const QJsonObject& manifest) const;
|
|
bool verifySignature(const QByteArray& payload, const QString& signatureBase64, const QString& publicKeyPath) const;
|
|
|
|
HttpHelper m_http;
|
|
QString m_serverAddr;
|
|
QJsonObject m_manifest;
|
|
QString m_manifestText;
|
|
QList<FileDownloadItem> m_fileItems;
|
|
mutable bool m_manifestSignatureVerified = false;
|
|
bool m_downloadAllOk = false;
|
|
qint64 m_downloadTotalBytes = 0;
|
|
qint64 m_downloadCompletedBytes = 0;
|
|
qint64 m_sessionDownloadedBytes = 0;
|
|
QString m_currentDownloadPath;
|
|
QString m_offlineError;
|
|
QElapsedTimer m_downloadTimer;
|
|
};
|