\n \n

Larksuite Sentinel

Vui lòng đăng nhập hệ thống

\n ${\n error\n ? `

Sai tài khoản hoặc mật khẩu

`\n : \"\"\n }\n \n

\n \n \n \n `);\n});\n\napp.post(\"/login\", async (c) => {\n const body = await c.req.parseBody();\n if (body.username === ADMIN_USER && body.password === ADMIN_PASS) {\n await ensureDB();\n const newSessionId = crypto.randomUUID();\n await sqlite.execute(\n \"INSERT INTO lark_admin_sessions (session_id) VALUES (?)\",\n [newSessionId],\n );\n setCookie(c, COOKIE_NAME, newSessionId, {\n path: \"/\",\n secure: true,\n httpOnly: true,\n maxAge: 60 * 60 * 24 * 7,\n sameSite: \"Lax\",\n });\n return c.redirect(\"/\");\n }\n return c.redirect(\"/login?error=1\");\n});\n\napp.get(\"/logout\", async (c) => {\n const currentSessionId = getCookie(c, COOKIE_NAME);\n if (currentSessionId) {\n await ensureDB();\n await sqlite.execute(\n \"DELETE FROM lark_admin_sessions WHERE session_id = ?\",\n [currentSessionId],\n );\n }\n deleteCookie(c, COOKIE_NAME, { path: \"/\" });\n return c.redirect(\"/login\");\n});\n\napp.post(\"/api/auth/logout-others\", async (c) => {\n const currentSessionId = c.get(\"sessionId\");\n if (currentSessionId) {\n await sqlite.execute(\n \"DELETE FROM lark_admin_sessions WHERE session_id != ?\",\n [currentSessionId],\n );\n return c.json({ success: true });\n }\n return c.json({ success: false, error: \"Không tìm thấy phiên\" });\n});\n\n// ====================================================================\n// 5. LARKSUITE API SERVICES (Nguyên bản)\n// ====================================================================\nasync function getLarkTenantAccessToken(appId, appSecret, tokenCache) {\n if (tokenCache.has(appId)) return tokenCache.get(appId);\n const res = await fetch(\n \"https://open.larksuite.com/open-apis/auth/v3/tenant_access_token/internal\",\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json; charset=utf-8\" },\n body: JSON.stringify({ app_id: appId, app_secret: appSecret }),\n },\n );\n const data = await res.json();\n if (data.code !== 0) {\n throw new Error(`Lỗi cấp Token (${appId.substring(0, 6)}...): ${data.msg}`);\n }\n tokenCache.set(appId, data.tenant_access_token);\n return data.tenant_access_token;\n}\n\nasync function checkLarkAccount(row, tokenCache) {\n if (row.is_paused) {\n return {\n ...row,\n status: \"PAUSED\",\n account_status: \"Bỏ qua\",\n details: \"Đang ngừng theo dõi\",\n };\n }\n try {\n const accessToken = await getLarkTenantAccessToken(\n row.app_id,\n row.app_secret,\n tokenCache,\n );\n let targetUserId = row.lark_user_id.trim();\n const isEmail = targetUserId.includes(\"@\");\n\n if (isEmail) {\n const emailRes = await fetch(\n `https://open.larksuite.com/open-apis/contact/v3/users/batch_get_id?user_id_type=user_id`,\n {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${accessToken}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ emails: [targetUserId] }),\n },\n );\n const emailData = await emailRes.json();\n if (emailData.code !== 0) {\n return {\n ...row,\n status: \"ERROR\",\n account_status: \"API Error\",\n details: `Lỗi Get ID: ${emailData.msg}`,\n };\n }\n const foundUser = (emailData.data.user_list || []).find((u) =>\n u.email === targetUserId\n );\n if (!foundUser || !foundUser.user_id) {\n return {\n ...row,\n status: \"ERROR\",\n account_status: \"Not Found\",\n details: \"Không tìm thấy User_ID\",\n };\n }\n targetUserId = foundUser.user_id;\n }\n\n const res = await fetch(\n `https://open.larksuite.com/open-apis/contact/v3/users/${\n encodeURIComponent(targetUserId)\n }?user_id_type=user_id`,\n {\n method: \"GET\",\n headers: { \"Authorization\": `Bearer ${accessToken}` },\n },\n );\n const data = await res.json();\n if (data.code !== 0) {\n return {\n ...row,\n status: \"ERROR\",\n account_status: \"Not Found\",\n details: `Lỗi Lark: ${data.msg}`,\n };\n }\n\n const user = data.data.user;\n let accStatus = \"Active\";\n let badgeStatus = \"OK\";\n if (user.status) {\n if (user.status.is_resigned) {\n accStatus = \"Resigned\";\n badgeStatus = \"WARNING\";\n } else if (user.status.is_frozen) {\n accStatus = \"Frozen\";\n badgeStatus = \"ERROR\";\n } else if (!user.status.is_activated) {\n accStatus = \"Unactivated\";\n badgeStatus = \"WARNING\";\n }\n }\n\n return {\n id: row.id,\n status: badgeStatus,\n account_status: accStatus,\n details: user.name || \"N/A\",\n email: user.enterprise_email || user.email || row.lark_user_id,\n department: user.department_ids\n ? `Depts: ${user.department_ids.length}`\n : \"N/A\",\n };\n } catch (e) {\n return {\n ...row,\n status: \"ERROR\",\n account_status: \"Failed\",\n details: e.message,\n };\n }\n}\n\n// ====================================================================\n// 6. API CONTROLLERS\n// ====================================================================\napp.get(\"/api/list\", async (c) => {\n const result = await sqlite.execute(\n \"SELECT id, name, lark_user_id, app_id, app_secret, email, status, account_status, last_check, details, department, is_paused FROM lark_monitor_multitenant ORDER BY sort_order ASC, created_at DESC\",\n );\n return c.json(result.rows);\n});\n\napp.post(\"/api/add\", async (c) => {\n const body = await c.req.json();\n const maxOrderRes = await sqlite.execute(\n \"SELECT MAX(sort_order) as max FROM lark_monitor_multitenant\",\n );\n const nextOrder = (maxOrderRes.rows[0].max !== null)\n ? maxOrderRes.rows[0].max + 1\n : 0;\n await sqlite.execute(\n `INSERT INTO lark_monitor_multitenant (name, lark_user_id, app_id, app_secret, status, account_status, is_paused, sort_order, created_at) VALUES (?, ?, ?, ?, ?, ?, 0, ?, datetime('now'))`,\n [\n body.name,\n body.lark_user_id.trim(),\n body.app_id.trim(),\n body.app_secret.trim(),\n \"PENDING\",\n \"Unknown\",\n nextOrder,\n ],\n );\n return c.json({ success: true });\n});\n\napp.post(\"/api/update\", async (c) => {\n const body = await c.req.json();\n await sqlite.execute(\n `UPDATE lark_monitor_multitenant SET name = ?, lark_user_id = ?, app_id = ?, app_secret = ? WHERE id = ?`,\n [\n body.name,\n body.lark_user_id.trim(),\n body.app_id.trim(),\n body.app_secret.trim(),\n body.id,\n ],\n );\n return c.json({ success: true });\n});\n\napp.post(\"/api/save-order\", async (c) => {\n const { order } = await c.req.json();\n const promises = order.map((id, index) =>\n sqlite.execute(\n \"UPDATE lark_monitor_multitenant SET sort_order = ? WHERE id = ?\",\n [index, id],\n )\n );\n await Promise.all(promises);\n return c.json({ success: true });\n});\n\napp.post(\"/api/toggle-pause\", async (c) => {\n const { id } = await c.req.json();\n const cur = await sqlite.execute(\n \"SELECT is_paused FROM lark_monitor_multitenant WHERE id = ?\",\n [id],\n );\n const newState = cur.rows[0].is_paused ? 0 : 1;\n const newStatus = newState ? \"PAUSED\" : \"PENDING\";\n await sqlite.execute(\n `UPDATE lark_monitor_multitenant SET is_paused = ?, status = ? WHERE id = ?`,\n [newState, newStatus, id],\n );\n return c.json({ success: true });\n});\n\napp.post(\"/api/delete\", async (c) => {\n const { id } = await c.req.json();\n await sqlite.execute(`DELETE FROM lark_monitor_multitenant WHERE id = ?`, [\n id,\n ]);\n return c.json({ success: true });\n});\n\napp.post(\"/api/check-all\", async (c) => {\n const result = await sqlite.execute(\"SELECT * FROM lark_monitor_multitenant\");\n const tokenCache = new Map();\n const checkPromises = result.rows.map((row) =>\n checkLarkAccount(row, tokenCache)\n );\n const results = await Promise.all(checkPromises);\n const currentErrors = [];\n\n const updatePromises = results.map((res) => {\n if (res.status === \"ERROR\" || res.status === \"WARNING\") {\n currentErrors.push(res.id);\n }\n return sqlite.execute(\n `UPDATE lark_monitor_multitenant SET status = ?, account_status = ?, details = ?, email = ?, department = ?, last_check = datetime('now') WHERE id = ?`,\n [\n res.status,\n res.account_status,\n res.details,\n res.email || null,\n res.department || null,\n res.id,\n ],\n );\n });\n await Promise.all(updatePromises);\n return c.json({ success: true, current_errors: currentErrors });\n});\n\n// ====================================================================\n// 7. FRONTEND VIEW (HTML/JS)\n// ====================================================================\napp.get(\"/\", (c) => {\n return c.html(`\n \n \n \n \n \n Larksuite Sentinel\n \n \n \n \n \n \n \n \n

\n \n

\n Larksuite Sentinel\n

\n \n \n \n

\n\n \n \n\n \n \n \n `);\n});\n\nexport default app.fetch;","deleted","label",[118],"d3ca41b6-3960-11f1-b5f7-42b51c65c3df","cron.ts","48d70084-138c-11f1-9840-42dde27851f2",["D",1776322345788],6,"interval","import sqlite from \"https://esm.town/v/std/db/main.ts\";\n\n// ====================================================================\n// CẤU HÌNH\nconst VAL_MAIN_API_URL = `${Deno.env.get(\"VAL_MAIN_API_URL\")}/api/check-all`;\nconst NTFY_TOPIC = Deno.env.get(\"NTFY_TOPIC\");\n\nexport default async function (interval: Interval) {\n console.log(\"🕒 Starting Larksuite Cron Check...\");\n\n // LẤY MẬT KHẨU TỪ ENVIRONMENT ĐỂ MỞ CỬA API\n const ADMIN_PASS = Deno.env.get(\"ADMIN_PASS\");\n\n // 1. Gọi API Check-All từ Val Web Chính CÓ KÈM AUTHORIZATION HEADER\n const response = await fetch(VAL_MAIN_API_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${ADMIN_PASS}`, // <--- ĐIỂM BẢO MẬT\n },\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n console.error(\n \"❌ Lỗi 401: Cron Job không được cấp quyền (Sai ADMIN_PASS). Hãy kiểm tra lại biến môi trường.\",\n );\n } else {\n console.error(\"❌ Failed to trigger check:\", response.statusText);\n }\n return;\n }\n\n const data = await response.json();\n if (!data.success) {\n console.error(\"❌ API Error:\", data.error);\n return;\n }\n\n const currentErrors = data.current_errors || [];\n\n // 2. Lấy danh sách lỗi cũ từ Database\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS cron_lark_error_tracking (\n id INTEGER PRIMARY KEY,\n error_ids TEXT\n )\n `);\n\n const prevRes = await sqlite.execute(\n \"SELECT error_ids FROM cron_lark_error_tracking WHERE id = 1\",\n );\n\n let previousErrors = [];\n if (prevRes.rows.length > 0) {\n previousErrors = JSON.parse(prevRes.rows[0].error_ids || \"[]\");\n } else {\n // Nếu chạy lần đầu, chèn record mặc định\n await sqlite.execute(\n \"INSERT INTO cron_lark_error_tracking (id, error_ids) VALUES (1, '[]')\",\n );\n }\n\n // 3. So sánh để tìm các lỗi MỚI xuất hiện\n const newErrors = currentErrors.filter((id) => !previousErrors.includes(id));\n\n // 4. Gửi thông báo nếu có biến động\n if (newErrors.length > 0) {\n console.log(\n `⚠️ Found ${newErrors.length} accounts with issues. Sending notification...`,\n );\n\n await fetch(`https://ntfy.sh/${NTFY_TOPIC}`, {\n method: \"POST\",\n body:\n `Cảnh báo: Phát hiện ${newErrors.length} tài khoản Larksuite gặp vấn đề. Kiểm tra ngay!`,\n headers: {\n \"Title\": \"Larksuite Sentinel Alert\", // <-- Sửa lại thành tiếng Anh không dấu để không bị lỗi ByteString\n \"Priority\": \"high\",\n \"Tags\": \"warning\",\n },\n });\n } else {\n console.log(\"✅ No new account issues found.\");\n }\n\n // 5. Cập nhật lại danh sách lỗi hiện tại vào DB để dùng cho lần quét sau\n await sqlite.execute(\n \"UPDATE cron_lark_error_tracking SET error_ids = ? WHERE id = 1\",\n [JSON.stringify(currentErrors)],\n );\n}",[136],"pulls",1,"forks","envVars",{"_150":152,"_153":51},"connections",{"_150":51,"_151":51},"count","unfilledCount",4,"emptyCount",{"_20":135,"_13":136,"_119":137,"_121":-5,"_122":21,"_123":30,"_125":110,"_22":160,"_29":139,"_128":140,"_130":141,"_132":38,"_133":-5,"_157":161,"_91":162},{"_20":117,"_13":118,"_119":120,"_121":-5,"_122":21,"_123":124,"_125":110,"_22":156,"_29":127,"_128":129,"_130":131,"_132":38,"_133":-5,"_157":158,"_91":159},["D",1772185196203],"children",[],[118],["D",1776322345788],[],[136],["D",1772162524375],["D",1789451469231],{"_11":12,"_89":85},{"_11":12,"_82":83,"_84":85,"_44":45,"_86":87,"_88":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"ctx",{"_70":-5,"_112":201,"_202":203,"_204":205,"_206":38,"_207":38,"_208":38,"_209":110,"_210":-5,"_211":-7,"_212":-7,"_213":51,"_214":38,"_215":38,"_216":-5,"_217":38,"_218":38,"_219":38,"_220":-5},"ENV",{"_172":173,"_174":175,"_176":26,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Larksuite Sentinel

\n Larksuite Sentinel\n

Thêm tài khoản (Multi-Tenant)

Branches1

Branches
1