a329d4906b
- 方案文档: AVCC 体系建设、IPTV TCS 需求(0-req)/PRD(1-prd)/任务(2-task)/二三四期任务 - tcs-iptv: Go 后端(哈希SDK/MA码生成/可信数据空间mock/业务编排/HTTP API+HMAC鉴权) - web-console: React+AntD 监管大屏(角色工作台/全流程演示/监管片库) - 一剧一码+集级哈希, 集级下架/恢复, 全栈测试通过
397 lines
11 KiB
Go
397 lines
11 KiB
Go
package chain
|
|
|
|
import (
|
|
"fmt"
|
|
"sync"
|
|
"time"
|
|
|
|
"github.com/tcs-iptv/tcs/internal/model"
|
|
)
|
|
|
|
// MemoryChain 是 Client 的内存实现(MVP / 测试用)。
|
|
// 严格执行合约级业务规则:签发权限、1:1 不可解绑、映射前置签发、防重复哈希。
|
|
type MemoryChain struct {
|
|
mu sync.RWMutex
|
|
contents map[string]model.Content // maCode -> Content
|
|
bindings map[string][]model.HashBinding // maCode -> bindings
|
|
mappings map[string][]model.Mapping // maCode -> mappings
|
|
versions map[string][]model.VersionChange
|
|
hashIndex map[string]string // fileHash -> maCode(防换壳重发)
|
|
txSeq int
|
|
}
|
|
|
|
// NewMemoryChain 创建内存链客户端。
|
|
func NewMemoryChain() *MemoryChain {
|
|
return &MemoryChain{
|
|
contents: make(map[string]model.Content),
|
|
bindings: make(map[string][]model.HashBinding),
|
|
mappings: make(map[string][]model.Mapping),
|
|
versions: make(map[string][]model.VersionChange),
|
|
hashIndex: make(map[string]string),
|
|
}
|
|
}
|
|
|
|
func (m *MemoryChain) nextTx(method string) string {
|
|
m.txSeq++
|
|
return fmt.Sprintf("tx-%s-%06d", method, m.txSeq)
|
|
}
|
|
|
|
// IssueMA 仅监管主体可调用;MA 不可重复签发;哈希 1:1 强绑定不可解绑。
|
|
func (m *MemoryChain) IssueMA(role Role, req IssueRequest) (string, error) {
|
|
if role != RoleRegulator {
|
|
return "", ErrPermissionDenied
|
|
}
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
|
|
if _, ok := m.contents[req.MACode]; ok {
|
|
return "", ErrMAAlreadyIssued
|
|
}
|
|
if existing, ok := m.hashIndex[req.FileHash]; ok {
|
|
return "", fmt.Errorf("%w: bound to %s", ErrHashExists, existing)
|
|
}
|
|
|
|
c := req.Content
|
|
c.MACode = req.MACode
|
|
c.ContentTwinID = req.ContentTwinID
|
|
c.Status = model.StatusApproved
|
|
if c.CreatedAt.IsZero() {
|
|
c.CreatedAt = time.Now()
|
|
}
|
|
m.contents[req.MACode] = c
|
|
|
|
m.bindings[req.MACode] = []model.HashBinding{{
|
|
ContentTwinID: req.ContentTwinID,
|
|
HashType: model.HashFile,
|
|
HashValue: req.FileHash,
|
|
MerkleRoot: req.MerkleRoot,
|
|
Version: "v1.0",
|
|
CreatedBy: string(RoleRegulator),
|
|
}}
|
|
if req.PerceptualHash != "" {
|
|
m.bindings[req.MACode] = append(m.bindings[req.MACode], model.HashBinding{
|
|
ContentTwinID: req.ContentTwinID,
|
|
HashType: model.HashPerceptual,
|
|
HashValue: req.PerceptualHash,
|
|
Version: "v1.0",
|
|
CreatedBy: string(RoleRegulator),
|
|
})
|
|
}
|
|
m.hashIndex[req.FileHash] = req.MACode
|
|
|
|
// 集级哈希绑定(分集内容):每集独立哈希,挂在同一 MA 码下。
|
|
for _, ep := range req.Episodes {
|
|
m.bindings[req.MACode] = append(m.bindings[req.MACode], model.HashBinding{
|
|
ContentTwinID: req.ContentTwinID,
|
|
HashType: model.HashFile,
|
|
HashValue: ep.FileSHA256,
|
|
MerkleRoot: ep.MerkleRoot,
|
|
Episode: ep.Episode,
|
|
Resolution: ep.Resolution,
|
|
Duration: ep.Duration,
|
|
Version: "v1.0",
|
|
CreatedBy: string(RoleRegulator),
|
|
})
|
|
if ep.FileSHA256 != "" {
|
|
if _, ok := m.hashIndex[ep.FileSHA256]; !ok {
|
|
m.hashIndex[ep.FileSHA256] = req.MACode
|
|
}
|
|
}
|
|
}
|
|
return m.nextTx("issueMA"), nil
|
|
}
|
|
|
|
// RegisterHashBinding 追加哈希绑定(如转码版)。MA 必须已签发。
|
|
func (m *MemoryChain) RegisterHashBinding(role Role, b model.HashBinding) (string, error) {
|
|
if role != RoleReviewer && role != RoleRegulator {
|
|
return "", ErrPermissionDenied
|
|
}
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
|
|
maCode := m.maCodeByCTID(b.ContentTwinID)
|
|
if maCode == "" {
|
|
return "", ErrMANotIssued
|
|
}
|
|
m.bindings[maCode] = append(m.bindings[maCode], b)
|
|
if b.HashType == model.HashFile || b.HashType == model.HashTranscoded {
|
|
if _, ok := m.hashIndex[b.HashValue]; !ok {
|
|
m.hashIndex[b.HashValue] = maCode
|
|
}
|
|
}
|
|
return m.nextTx("registerHashBinding"), nil
|
|
}
|
|
|
|
// RegisterMapping 注册三方编码映射;MA 必须已签发(需求16-AC3)。
|
|
func (m *MemoryChain) RegisterMapping(role Role, mp model.Mapping) (string, error) {
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
|
|
maCode := m.maCodeByCTID(mp.ContentTwinID)
|
|
if maCode == "" {
|
|
return "", ErrMANotIssued
|
|
}
|
|
m.mappings[maCode] = append(m.mappings[maCode], mp)
|
|
return m.nextTx("registerMapping"), nil
|
|
}
|
|
|
|
// VerifyHash 按 MA 码校验提交哈希。
|
|
func (m *MemoryChain) VerifyHash(maCode, fileHash string) (VerifyResult, error) {
|
|
m.mu.RLock()
|
|
defer m.mu.RUnlock()
|
|
|
|
bs, ok := m.bindings[maCode]
|
|
if !ok {
|
|
return VerifyResult{Valid: false, MACode: maCode, SubmittedHash: fileHash}, ErrMANotIssued
|
|
}
|
|
for _, b := range bs {
|
|
if b.HashType == model.HashFile || b.HashType == model.HashTranscoded {
|
|
if b.HashValue == fileHash {
|
|
return VerifyResult{
|
|
Valid: true, MACode: maCode,
|
|
BoundHash: b.HashValue, SubmittedHash: fileHash,
|
|
Match: true, Version: b.Version,
|
|
}, nil
|
|
}
|
|
}
|
|
}
|
|
// 取首个文件哈希作为 bound 参考
|
|
bound := ""
|
|
for _, b := range bs {
|
|
if b.HashType == model.HashFile {
|
|
bound = b.HashValue
|
|
break
|
|
}
|
|
}
|
|
return VerifyResult{Valid: true, MACode: maCode, BoundHash: bound, SubmittedHash: fileHash, Match: false}, nil
|
|
}
|
|
|
|
// HashExists 判断内容哈希是否已存在。
|
|
func (m *MemoryChain) HashExists(fileHash string) (string, bool) {
|
|
m.mu.RLock()
|
|
defer m.mu.RUnlock()
|
|
ma, ok := m.hashIndex[fileHash]
|
|
return ma, ok
|
|
}
|
|
|
|
// VerifyEpisodeHash 按 MA 码+集号校验该集哈希。
|
|
func (m *MemoryChain) VerifyEpisodeHash(maCode string, episode int, fileHash string) (VerifyResult, error) {
|
|
m.mu.RLock()
|
|
defer m.mu.RUnlock()
|
|
bs, ok := m.bindings[maCode]
|
|
if !ok {
|
|
return VerifyResult{Valid: false, MACode: maCode, SubmittedHash: fileHash}, ErrMANotIssued
|
|
}
|
|
var bound string
|
|
for _, b := range bs {
|
|
if b.Episode == episode && (b.HashType == model.HashFile || b.HashType == model.HashTranscoded) {
|
|
if bound == "" {
|
|
bound = b.HashValue
|
|
}
|
|
if b.HashValue == fileHash {
|
|
return VerifyResult{
|
|
Valid: true, MACode: maCode,
|
|
BoundHash: b.HashValue, SubmittedHash: fileHash,
|
|
Match: true, Version: b.Version,
|
|
}, nil
|
|
}
|
|
}
|
|
}
|
|
if bound == "" {
|
|
return VerifyResult{Valid: false, MACode: maCode, SubmittedHash: fileHash}, ErrNotFound
|
|
}
|
|
return VerifyResult{Valid: true, MACode: maCode, BoundHash: bound, SubmittedHash: fileHash, Match: false}, nil
|
|
}
|
|
|
|
// ListEpisodes 返回某 MA 码下的全部集级哈希绑定(episode > 0)。
|
|
func (m *MemoryChain) ListEpisodes(maCode string) ([]model.HashBinding, error) {
|
|
m.mu.RLock()
|
|
defer m.mu.RUnlock()
|
|
bs, ok := m.bindings[maCode]
|
|
if !ok {
|
|
return nil, ErrMANotIssued
|
|
}
|
|
var out []model.HashBinding
|
|
for _, b := range bs {
|
|
if b.Episode > 0 {
|
|
out = append(out, b)
|
|
}
|
|
}
|
|
return out, nil
|
|
}
|
|
|
|
// QueryContent 查询内容主记录。
|
|
func (m *MemoryChain) QueryContent(maCode string) (model.Content, error) {
|
|
m.mu.RLock()
|
|
defer m.mu.RUnlock()
|
|
c, ok := m.contents[maCode]
|
|
if !ok {
|
|
return model.Content{}, ErrNotFound
|
|
}
|
|
return c, nil
|
|
}
|
|
|
|
// ListContents 按状态列出内容(空状态返回全部),附带整剧文件哈希便于演示。
|
|
func (m *MemoryChain) ListContents(status string) ([]model.Content, error) {
|
|
m.mu.RLock()
|
|
defer m.mu.RUnlock()
|
|
var out []model.Content
|
|
for ma, c := range m.contents {
|
|
if status == "" || c.Status == status {
|
|
// 附带整剧文件哈希(episode==0 的 file 绑定)
|
|
for _, b := range m.bindings[ma] {
|
|
if b.HashType == model.HashFile && b.Episode == 0 {
|
|
c.FileHash = b.HashValue
|
|
break
|
|
}
|
|
}
|
|
out = append(out, c)
|
|
}
|
|
}
|
|
return out, nil
|
|
}
|
|
|
|
// QueryMappings 查询 MA 码绑定的全部映射与 CDN 端点。
|
|
func (m *MemoryChain) QueryMappings(maCode string) (MappingsResult, error) {
|
|
m.mu.RLock()
|
|
defer m.mu.RUnlock()
|
|
if _, ok := m.contents[maCode]; !ok {
|
|
return MappingsResult{}, ErrNotFound
|
|
}
|
|
res := MappingsResult{MACode: maCode, Mappings: m.mappings[maCode]}
|
|
for _, mp := range m.mappings[maCode] {
|
|
if mp.CDNEndpoint != "" {
|
|
res.CDNEndpoints = append(res.CDNEndpoints, mp.CDNEndpoint)
|
|
}
|
|
}
|
|
return res, nil
|
|
}
|
|
|
|
// RecordVersionChange 记录版本变更。
|
|
func (m *MemoryChain) RecordVersionChange(vc model.VersionChange) (string, error) {
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
maCode := m.maCodeByCTID(vc.ContentTwinID)
|
|
if maCode == "" {
|
|
return "", ErrMANotIssued
|
|
}
|
|
m.versions[maCode] = append(m.versions[maCode], vc)
|
|
return m.nextTx("recordVersionChange"), nil
|
|
}
|
|
|
|
// Revoke 下架,仅监管主体。
|
|
func (m *MemoryChain) Revoke(role Role, maCode, reason string) (MappingsResult, error) {
|
|
if role != RoleRegulator {
|
|
return MappingsResult{}, ErrPermissionDenied
|
|
}
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
c, ok := m.contents[maCode]
|
|
if !ok {
|
|
return MappingsResult{}, ErrNotFound
|
|
}
|
|
c.Status = model.StatusRevoked
|
|
m.contents[maCode] = c
|
|
|
|
res := MappingsResult{MACode: maCode, Mappings: m.mappings[maCode]}
|
|
for _, mp := range m.mappings[maCode] {
|
|
if mp.CDNEndpoint != "" {
|
|
res.CDNEndpoints = append(res.CDNEndpoints, mp.CDNEndpoint)
|
|
}
|
|
}
|
|
return res, nil
|
|
}
|
|
|
|
// RevokeEpisode 集级下架:只下架指定集,整剧其他集不受影响(仅监管主体)。
|
|
func (m *MemoryChain) RevokeEpisode(role Role, maCode string, episode int, reason string) error {
|
|
if role != RoleRegulator {
|
|
return ErrPermissionDenied
|
|
}
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
bs, ok := m.bindings[maCode]
|
|
if !ok {
|
|
return ErrMANotIssued
|
|
}
|
|
found := false
|
|
for i := range bs {
|
|
if bs[i].Episode == episode {
|
|
bs[i].Revoked = true
|
|
bs[i].RevokedReason = reason
|
|
found = true
|
|
}
|
|
}
|
|
if !found {
|
|
return ErrNotFound
|
|
}
|
|
m.bindings[maCode] = bs
|
|
return nil
|
|
}
|
|
|
|
// Restore 恢复上架整剧:下架状态恢复为流通中(仅监管主体)。
|
|
func (m *MemoryChain) Restore(role Role, maCode string) error {
|
|
if role != RoleRegulator {
|
|
return ErrPermissionDenied
|
|
}
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
c, ok := m.contents[maCode]
|
|
if !ok {
|
|
return ErrNotFound
|
|
}
|
|
c.Status = model.StatusPublished
|
|
m.contents[maCode] = c
|
|
return nil
|
|
}
|
|
|
|
// RestoreEpisode 恢复上架指定集(仅监管主体)。
|
|
func (m *MemoryChain) RestoreEpisode(role Role, maCode string, episode int) error {
|
|
if role != RoleRegulator {
|
|
return ErrPermissionDenied
|
|
}
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
bs, ok := m.bindings[maCode]
|
|
if !ok {
|
|
return ErrMANotIssued
|
|
}
|
|
found := false
|
|
for i := range bs {
|
|
if bs[i].Episode == episode {
|
|
bs[i].Revoked = false
|
|
bs[i].RevokedReason = ""
|
|
found = true
|
|
}
|
|
}
|
|
if !found {
|
|
return ErrNotFound
|
|
}
|
|
m.bindings[maCode] = bs
|
|
return nil
|
|
}
|
|
|
|
// SetContentStatus 更新内容状态。
|
|
func (m *MemoryChain) SetContentStatus(maCode, status string) error {
|
|
m.mu.Lock()
|
|
defer m.mu.Unlock()
|
|
c, ok := m.contents[maCode]
|
|
if !ok {
|
|
return ErrNotFound
|
|
}
|
|
c.Status = status
|
|
m.contents[maCode] = c
|
|
return nil
|
|
}
|
|
|
|
// maCodeByCTID 内部辅助:通过 CTID 反查 MA 码(调用方已持锁)。
|
|
func (m *MemoryChain) maCodeByCTID(ctid string) string {
|
|
for ma, c := range m.contents {
|
|
if c.ContentTwinID == ctid {
|
|
return ma
|
|
}
|
|
}
|
|
return ""
|
|
}
|
|
|
|
var _ Client = (*MemoryChain)(nil)
|