\n \n

Microsoft Sentinel

Vui lòng đăng nhập hệ thống

\n ${\n error\n ? `

Sai tài khoản hoặc mật khẩu

`\n : \"\"\n }\n \n

\n \n \n \n `);\n});\n\napp.post(\"/login\", async (c) => {\n const body = await c.req.parseBody();\n if (body.username === ADMIN_USER && body.password === ADMIN_PASS) {\n await ensureDB();\n const newSessionId = crypto.randomUUID();\n await sqlite.execute(\"INSERT INTO admin_sessions (session_id) VALUES (?)\", [\n newSessionId,\n ]);\n\n // Bảo mật: sameSite Lax cần thiết cho luồng chuyển hướng OAuth\n setCookie(c, COOKIE_NAME, newSessionId, {\n path: \"/\",\n secure: true,\n httpOnly: true,\n maxAge: 60 * 60 * 24 * 7,\n sameSite: \"Lax\",\n });\n return c.redirect(\"/\");\n }\n return c.redirect(\"/login?error=1\");\n});\n\napp.get(\"/logout\", async (c) => {\n const currentSessionId = getCookie(c, COOKIE_NAME);\n if (currentSessionId) {\n await ensureDB();\n await sqlite.execute(\"DELETE FROM admin_sessions WHERE session_id = ?\", [\n currentSessionId,\n ]);\n }\n deleteCookie(c, COOKIE_NAME, { path: \"/\" });\n return c.redirect(\"/login\");\n});\n\napp.post(\"/api/auth/logout-others\", async (c) => {\n const currentSessionId = c.get(\"sessionId\");\n if (currentSessionId) {\n await sqlite.execute(\"DELETE FROM admin_sessions WHERE session_id != ?\", [\n currentSessionId,\n ]);\n return c.json({ success: true });\n }\n return c.json({ success: false, error: \"Không tìm thấy phiên hoạt động\" });\n});\n\n// ====================================================================\n// 6. ENDPOINT QUẢN LÝ DỮ LIỆU BÊN TRONG HỆ THỐNG\n// ====================================================================\n\n// Kích hoạt luồng Microsoft OAuth\napp.get(\"/api/auth/login\", async (c) => {\n if (!CLIENT_ID || !CLIENT_SECRET) {\n return c.text(\"Lỗi hệ thống: Chưa cấu hình biến môi trường Azure App.\");\n }\n\n const authUrl =\n `https://login.microsoftonline.com/common/oauth2/v2.0/authorize` +\n `?client_id=${CLIENT_ID}` +\n `&response_type=code` +\n `&redirect_uri=${encodeURIComponent(getRedirectUri(c))}` +\n `&response_mode=query` +\n `&scope=${encodeURIComponent(\"User.Read offline_access\")}` +\n `&prompt=select_account`;\n\n return c.redirect(authUrl);\n});\n\n// Nhận mã Code từ Microsoft và đổi lấy Token\napp.get(\"/api/auth/callback\", async (c) => {\n const code = c.req.query(\"code\");\n const error = c.req.query(\"error\");\n\n if (error) return c.text(`Lỗi cấp quyền từ Microsoft: ${error}`);\n if (!code) return c.text(\"Không nhận được Authorization Code.\");\n\n try {\n // 1. Đổi Code lấy Access & Refresh Token\n const tokenParams = new URLSearchParams({\n client_id: CLIENT_ID,\n client_secret: CLIENT_SECRET,\n grant_type: \"authorization_code\",\n code: code,\n redirect_uri: getRedirectUri(c),\n });\n\n const resToken = await fetch(MS_TOKEN_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: tokenParams.toString(),\n });\n\n const tokenData = await resToken.json();\n if (!tokenData.refresh_token) {\n throw new Error(\n \"Cấu hình Azure thiếu quyền offline_access hoặc bị sai lệch.\",\n );\n }\n\n // 2. Lấy thông tin User Profile\n const resMe = await fetch(MS_GRAPH_ME, {\n headers: { \"Authorization\": `Bearer ${tokenData.access_token}` },\n });\n const meData = await resMe.json();\n if (!resMe.ok) {\n throw new Error(\n meData.error?.message || \"Lỗi truy cập dữ liệu User Profile\",\n );\n }\n\n const email = meData.userPrincipalName || meData.mail || \"unknown@ms.com\";\n const displayName = meData.displayName || email;\n\n // 3. Cập nhật hoặc Thêm mới vào DB\n const existing = await sqlite.execute(\n \"SELECT id FROM ms_personal_monitor WHERE ms_user_id = ?\",\n [meData.id],\n );\n\n if (existing.rows.length > 0) {\n await sqlite.execute(\n \"UPDATE ms_personal_monitor SET refresh_token = ?, name = ?, email = ?, status = 'OK', account_status = 'Active', details = 'Vừa kết nối lại', last_check = datetime('now') WHERE ms_user_id = ?\",\n [tokenData.refresh_token, displayName, email, meData.id],\n );\n } else {\n const maxOrderQuery = await sqlite.execute(\n \"SELECT MAX(sort_order) as max FROM ms_personal_monitor\",\n );\n const nextOrder = maxOrderQuery.rows[0].max !== null\n ? maxOrderQuery.rows[0].max + 1\n : 0;\n await sqlite.execute(\n `INSERT INTO ms_personal_monitor (name, ms_user_id, email, refresh_token, status, account_status, details, sort_order) VALUES (?, ?, ?, ?, 'OK', 'Active', 'Mới thêm', ?)`,\n [displayName, meData.id, email, tokenData.refresh_token, nextOrder],\n );\n }\n return c.html(``);\n } catch (err) {\n return c.text(`Lỗi xử lý kết nối: ${err.message}`);\n }\n});\n\n// Các API xử lý cơ sở dữ liệu\napp.get(\"/api/list\", async (c) => {\n const query =\n \"SELECT id, name, ms_user_id, email, status, account_status, last_check, details, is_paused FROM ms_personal_monitor ORDER BY sort_order ASC, created_at DESC\";\n const result = await sqlite.execute(query);\n return c.json(result.rows);\n});\n\napp.post(\"/api/save-order\", async (c) => {\n const { order } = await c.req.json();\n const promises = order.map((id, index) =>\n sqlite.execute(\n \"UPDATE ms_personal_monitor SET sort_order = ? WHERE id = ?\",\n [index, id],\n )\n );\n await Promise.all(promises);\n return c.json({ success: true });\n});\n\napp.post(\"/api/toggle-pause\", async (c) => {\n const { id } = await c.req.json();\n const cur = await sqlite.execute(\n \"SELECT is_paused FROM ms_personal_monitor WHERE id = ?\",\n [id],\n );\n const newState = cur.rows[0].is_paused ? 0 : 1;\n await sqlite.execute(\n \"UPDATE ms_personal_monitor SET is_paused = ?, status = ?, details = ? WHERE id = ?\",\n [\n newState,\n newState ? \"PAUSED\" : \"PENDING\",\n newState ? \"Đang tạm dừng\" : \"Chờ kiểm tra lại\",\n id,\n ],\n );\n return c.json({ success: true });\n});\n\napp.post(\"/api/delete\", async (c) => {\n const body = await c.req.json();\n await sqlite.execute(\"DELETE FROM ms_personal_monitor WHERE id = ?\", [\n body.id,\n ]);\n return c.json({ success: true });\n});\n\n// Logic quét kiểm tra tự động (Batch Processor)\napp.post(\"/api/check-all\", async (c) => {\n const result = await sqlite.execute(\"SELECT * FROM ms_personal_monitor\");\n const redirectUri = getRedirectUri(c);\n\n // Chạy kiểm tra đồng thời cho tất cả tài khoản\n const checkPromises = result.rows.map((row) =>\n checkMicrosoftAccount(row, redirectUri)\n );\n const results = await Promise.all(checkPromises);\n const currentErrors = [];\n\n // Cập nhật lại kết quả vào DB đồng thời\n const updatePromises = results.map((res) => {\n if (res.status === \"ERROR\" || res.status === \"WARNING\") {\n currentErrors.push(res.id);\n }\n\n let query =\n \"UPDATE ms_personal_monitor SET status = ?, account_status = ?, details = ?, email = ?, name = ?, last_check = datetime('now') WHERE id = ?\";\n let params = [\n res.status,\n res.account_status,\n res.details,\n res.email,\n res.name,\n res.id,\n ];\n\n // Cập nhật Token nếu có token mới từ MS\n if (res.new_refresh_token) {\n query =\n \"UPDATE ms_personal_monitor SET status = ?, account_status = ?, details = ?, email = ?, name = ?, refresh_token = ?, last_check = datetime('now') WHERE id = ?\";\n params = [\n res.status,\n res.account_status,\n res.details,\n res.email,\n res.name,\n res.new_refresh_token,\n res.id,\n ];\n }\n return sqlite.execute(query, params);\n });\n\n await Promise.all(updatePromises);\n return c.json({ success: true, current_errors: currentErrors });\n});\n\n// ====================================================================\n// 7. GIAO DIỆN CHÍNH (FRONTEND)\n// ====================================================================\napp.get(\"/\", (c) => {\n const isConfigured = !!(CLIENT_ID && CLIENT_SECRET);\n return c.html(`\n \n \n \n \n \n MS Personal Sentinel\n \n \n \n \n \n \n \n \n

\n MS Sentinel\n

\n \n \n \n

\n ${\n isConfigured\n ? `\n \n \n `\n : ``\n }\n

\n\n \n \n \n `);\n});\n\nexport default app.fetch;","deleted","label","children",[],"path",[42],"5acf8ae0-3961-11f1-9892-42b51c65c3df","cron.ts","9ef31a6a-13b5-11f1-b8e0-42dde27851f2",10,["D",1776322572319],6,"interval","import sqlite from \"https://esm.town/v/std/db/main.ts\";\n\n// ====================================================================\n// CẤU HÌNH\nconst VAL_MAIN_API_URL = `${Deno.env.get(\"VAL_MAIN_API_URL\")}/api/check-all`;\nconst NTFY_TOPIC = Deno.env.get(\"NTFY_TOPIC\");\n\nexport default async function (interval: Interval) {\n console.log(\"🕒 Bắt đầu chạy Cron kiểm tra tài khoản Microsoft cá nhân...\");\n\n // LẤY MẬT KHẨU TỪ ENVIRONMENT ĐỂ LÀM CHÌA KHÓA MỞ CỬA API\n const ADMIN_PASS = Deno.env.get(\"ADMIN_PASS\");\n\n // 1. Gọi API Check-All từ Web Val CÓ KÈM AUTHORIZATION HEADER\n const response = await fetch(VAL_MAIN_API_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${ADMIN_PASS}`, // <--- ĐIỂM QUAN TRỌNG NHẤT Ở ĐÂY\n },\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n console.error(\n \"❌ Lỗi 401: Cron Job không được cấp quyền (Sai ADMIN_PASS). Hãy kiểm tra lại biến môi trường.\",\n );\n } else {\n console.error(\"❌ Gọi API Check-All thất bại:\", response.statusText);\n }\n return;\n }\n\n const data = await response.json();\n if (!data.success) {\n console.error(\"❌ Lỗi API trả về:\", data.error);\n return;\n }\n\n const currentErrors = data.current_errors || [];\n\n // 2. Lấy danh sách lỗi cũ từ Database để so sánh\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS cron_ms_personal_error (\n id INTEGER PRIMARY KEY,\n error_ids TEXT\n )\n `);\n\n const prevRes = await sqlite.execute(\n \"SELECT error_ids FROM cron_ms_personal_error WHERE id = 1\",\n );\n\n let previousErrors = [];\n if (prevRes.rows.length > 0) {\n previousErrors = JSON.parse(prevRes.rows[0].error_ids || \"[]\");\n } else {\n await sqlite.execute(\n \"INSERT INTO cron_ms_personal_error (id, error_ids) VALUES (1, '[]')\",\n );\n }\n\n // 3. Tìm lỗi MỚI\n const newErrors = currentErrors.filter((id) => !previousErrors.includes(id));\n\n // 4. Gửi thông báo\n if (newErrors.length > 0) {\n console.log(\n `⚠️ Phát hiện ${newErrors.length} tài khoản có vấn đề! Đang gửi thông báo...`,\n );\n await fetch(`https://ntfy.sh/${NTFY_TOPIC}`, {\n method: \"POST\",\n body:\n `Cảnh báo: Có ${newErrors.length} tài khoản Microsoft bị mất kết nối. Kiểm tra ngay!`,\n headers: {\n \"Title\": \"MS Sentinel Alert\", // <--- Đã sửa thành không dấu/ASCII để không bị lỗi ByteString\n \"Priority\": \"high\",\n \"Tags\": \"warning\",\n },\n });\n } else {\n console.log(\"✅ Tất cả tài khoản bình thường.\");\n }\n\n // 5. Lưu lại trạng thái\n await sqlite.execute(\n \"UPDATE cron_ms_personal_error SET error_ids = ? WHERE id = 1\",\n [JSON.stringify(currentErrors)],\n );\n}",[],[65],{"_40":64,"_13":65,"_43":66,"_45":-5,"_46":47,"_48":67,"_50":34,"_51":78,"_16":69,"_54":70,"_56":71,"_58":36,"_59":-5,"_62":79},{"_40":41,"_13":42,"_43":44,"_45":-5,"_46":47,"_48":49,"_50":34,"_51":76,"_16":53,"_54":55,"_56":57,"_58":36,"_59":-5,"_62":77},["D",1772180642890],[42],["D",1776322572319],[65],"pulls",0,"branches",1,"forks","envVars",{"_89":69,"_91":81},"connections",{"_89":81,"_90":81},"count","unfilledCount","emptyCount","8996f77c-13b5-11f1-8dcf-42dde27851f2",["D",1772180584352],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","019c7021-27a1-77a3-91ff-0bee8f142cc4","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019c7021-27a1-77a3-91ff-0ea08d94c033","tursoName","8996f77c13b511f18dcf42dde27851f2","tursoHostname","8996f77c13b511f18dcf42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789451469231],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_149":145},"org",{"_11":12,"_142":143,"_144":145,"_101":102,"_146":147,"_148":36},"branch",{"_16":67,"_13":133,"_40":47,"_134":92,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":-5,"_140":14,"_141":12},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Varina Lab","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18zOXB6RWdqcFJZRGlHSkcxS2NYTXRjUUc3eTYifQ","tier","free","canRestrictVals","profileImageUrl","","adoptOrgId",{"_40":92,"_13":14,"_51":181,"_94":-5,"_95":36,"_96":97,"_98":97,"_99":-5,"_100":-5,"_101":102,"_103":-5,"_104":36,"_105":-5,"_106":-5,"_107":81,"_108":109,"_110":111,"_112":113,"_114":182,"_116":-5,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_126":183,"_128":184,"_130":185,"_132":36},"tree",[175,176],[175,176],{"_80":81,"_82":83,"_84":81,"_85":173,"_87":174},[169,170],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_40":64,"_13":65,"_43":66,"_45":-5,"_46":47,"_48":67,"_50":34,"_51":78,"_16":69,"_54":70,"_56":71,"_58":36,"_59":-5,"_62":172},{"_40":41,"_13":42,"_43":44,"_45":-5,"_46":47,"_48":49,"_50":34,"_51":76,"_16":53,"_54":55,"_56":57,"_58":36,"_59":-5,"_62":171},[42],[65],{"_89":69,"_91":81},{"_89":81,"_90":81},{"_40":64,"_13":65,"_43":66,"_45":-5,"_46":47,"_48":67,"_50":34,"_51":68,"_16":69,"_54":70,"_56":71,"_58":36,"_59":-5,"_60":179,"_62":180},{"_40":41,"_13":42,"_43":44,"_45":-5,"_46":47,"_48":49,"_50":34,"_51":52,"_16":53,"_54":55,"_56":57,"_58":36,"_59":-5,"_60":177,"_62":178},[],[42],[],[65],["D",1772180584352],["D",1789451469231],{"_11":12,"_149":145},{"_11":12,"_142":143,"_144":145,"_101":102,"_146":147,"_148":36},{"_16":67,"_13":133,"_40":47,"_134":92,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":-5,"_140":14,"_141":12},"ctx",{"_126":-5,"_166":219,"_220":221,"_222":223,"_224":36,"_225":36,"_226":36,"_227":34,"_228":-5,"_229":-7,"_230":-7,"_231":81,"_232":36,"_233":36,"_234":-5,"_235":36,"_236":36,"_237":36,"_238":-5},"ENV",{"_190":191,"_192":193,"_194":133,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

varina_lab

MS_Sentinel