feat(encrypt): support encrypt when sync

gen/openapi/sync/v1/sync_service.swagger.json

@@ -16,15 +16,15 @@
     "application/json"
   ],
   "paths": {
-    "/gapi/sync/v1/sync": {
+    "/gapi/sync/v1/sync_config": {
       "get": {
         "summary": "拉取指定时间点之后的配置变动信息",
-        "operationId": "SyncService_Sync",
+        "operationId": "SyncService_SyncConfig",
         "responses": {
           "200": {
             "description": "A successful response.",
             "schema": {
-              "$ref": "#/definitions/v1SyncResponse"
+              "$ref": "#/definitions/v1SyncConfigResponse"
             }
           },
           "default": {
@@ -87,15 +87,48 @@
         ]
       }
     },
-    "/gapi/sync/v1/update": {
+    "/gapi/sync/v1/sync_user_key_wallet": {
+      "get": {
+        "summary": "获取用户密钥对",
+        "operationId": "SyncService_SyncUserKeyWallet",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1SyncUserKeyWalletResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "after",
+            "description": "获取该时间之后的设置变化，若不设置该字段，则拉取全量配置信息",
+            "in": "query",
+            "required": false,
+            "type": "string",
+            "format": "date-time"
+          }
+        ],
+        "tags": [
+          "SyncService"
+        ]
+      }
+    },
+    "/gapi/sync/v1/update_config": {
       "post": {
-        "summary": "提交最新配置 若配置的ID为空，则创建新配置。若配置的删除时间不为空，则代表该配置已被删除。",
-        "operationId": "SyncService_Update",
+        "summary": "提交最新配置 若配置的ID为空，则创建新配置。若配置的删除时间不为空，则代表该配置已被删除。这里只负责配置内容修改。",
+        "operationId": "SyncService_UpdateConfig",
         "responses": {
           "200": {
             "description": "A successful response.",
             "schema": {
-              "$ref": "#/definitions/v1UpdateResponse"
+              "$ref": "#/definitions/v1UpdateConfigResponse"
             }
           },
           "default": {
@@ -111,7 +144,7 @@
             "in": "body",
             "required": true,
             "schema": {
-              "$ref": "#/definitions/v1UpdateRequest"
+              "$ref": "#/definitions/v1UpdateConfigRequest"
             }
           }
         ],
@@ -122,7 +155,7 @@
     },
     "/gapi/sync/v1/update_group": {
       "post": {
-        "summary": "更新组信息",
+        "summary": "更新组信息,如果服务端密钥为空不允许修改，请先去创建密钥链。",
         "operationId": "SyncService_UpdateGroup",
         "responses": {
           "200": {
@@ -152,6 +185,72 @@
           "SyncService"
         ]
       }
+    },
+    "/gapi/sync/v1/update_group_key_chain": {
+      "post": {
+        "summary": "组的所有者修改组的密钥链",
+        "operationId": "SyncService_UpdateGroupKeyChain",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1UpdateGroupKeyChainResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1UpdateGroupKeyChainRequest"
+            }
+          }
+        ],
+        "tags": [
+          "SyncService"
+        ]
+      }
+    },
+    "/gapi/sync/v1/update_user_key_wallet": {
+      "post": {
+        "summary": "修改用户密钥对，修改的时候所有相关组的加密密钥均要替换",
+        "operationId": "SyncService_UpdateUserKeyWallet",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1UpdateUserKeyWalletResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1UpdateUserKeyWalletRequest"
+            }
+          }
+        ],
+        "tags": [
+          "SyncService"
+        ]
+      }
     }
   },
   "definitions": {
@@ -189,10 +288,11 @@
         "groupBasic": {
           "$ref": "#/definitions/v1GroupBasic"
         },
-        "memberId": {
+        "groupKeychain": {
           "type": "array",
           "items": {
-            "type": "string"
+            "type": "object",
+            "$ref": "#/definitions/v1GroupKeyChain"
           }
         }
       }
@@ -227,6 +327,21 @@
         "uid": {
           "type": "string",
           "title": "创建者"
+        },
+        "publicKey": {
+          "type": "string",
+          "title": "公钥,公钥存在服务器上，加密的私钥与相关用户关联存储"
+        }
+      }
+    },
+    "v1GroupKeyChain": {
+      "type": "object",
+      "properties": {
+        "memberId": {
+          "type": "string"
+        },
+        "privateKey": {
+          "type": "string"
         }
       }
     },
@@ -404,23 +519,7 @@
       },
       "title": "SSH 密钥"
     },
-    "v1SyncGroupResponse": {
-      "type": "object",
-      "properties": {
-        "serverTime": {
-          "type": "string",
-          "format": "date-time"
-        },
-        "groups": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "$ref": "#/definitions/v1Group"
-          }
-        }
-      }
-    },
-    "v1SyncResponse": {
+    "v1SyncConfigResponse": {
       "type": "object",
       "properties": {
         "serverTime": {
@@ -458,18 +557,46 @@
         }
       }
     },
-    "v1UpdateGroupRequest": {
+    "v1SyncGroupResponse": {
       "type": "object",
       "properties": {
-        "group": {
-          "$ref": "#/definitions/v1Group"
+        "serverTime": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "groups": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1Group"
+          }
         }
       }
     },
-    "v1UpdateGroupResponse": {
-      "type": "object"
+    "v1SyncUserKeyWalletResponse": {
+      "type": "object",
+      "properties": {
+        "serverTime": {
+          "type": "string",
+          "format": "date-time",
+          "title": "当前服务器时间，用于给客户端下一次拉取变动时做一个参照，避免因客户端时间偏差导致同步混乱"
+        },
+        "publicKey": {
+          "type": "string"
+        },
+        "encryptedPrivateKey": {
+          "type": "string"
+        },
+        "userKeyWalletSet": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1UserKeyWallet"
+          }
+        }
+      }
     },
-    "v1UpdateRequest": {
+    "v1UpdateConfigRequest": {
       "type": "object",
       "properties": {
         "groupId": {
@@ -487,9 +614,10 @@
         "identity": {
           "$ref": "#/definitions/v1Identity"
         }
-      }
+      },
+      "title": "UpdateConfig"
     },
-    "v1UpdateResponse": {
+    "v1UpdateConfigResponse": {
       "type": "object",
       "properties": {
         "host": {
@@ -505,6 +633,106 @@
           "$ref": "#/definitions/v1Identity"
         }
       }
+    },
+    "v1UpdateGroupKeyChainRequest": {
+      "type": "object",
+      "properties": {
+        "groupId": {
+          "type": "string"
+        },
+        "publicKey": {
+          "type": "string"
+        },
+        "encryptedGroupPrivateKey": {
+          "type": "string"
+        },
+        "userKeyWallet": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1UserKeyWallet"
+          }
+        }
+      },
+      "title": "UpdateGroupKeyChain"
+    },
+    "v1UpdateGroupKeyChainResponse": {
+      "type": "object"
+    },
+    "v1UpdateGroupRequest": {
+      "type": "object",
+      "properties": {
+        "group": {
+          "$ref": "#/definitions/v1Group"
+        }
+      },
+      "title": "UpdateGroup"
+    },
+    "v1UpdateGroupResponse": {
+      "type": "object"
+    },
+    "v1UpdateUserKeyWalletRequest": {
+      "type": "object",
+      "properties": {
+        "publicKey": {
+          "type": "string"
+        },
+        "encryptedPrivateKey": {
+          "type": "string"
+        },
+        "userKeyWalletSet": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1UserKeyWallet"
+          }
+        }
+      },
+      "title": "UpdateUserKeyWallet"
+    },
+    "v1UpdateUserKeyWalletResponse": {
+      "type": "object",
+      "properties": {
+        "publicKey": {
+          "type": "string"
+        },
+        "encryptedPrivateKey": {
+          "type": "string"
+        },
+        "userKeyWalletSet": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1UserKeyWallet"
+          }
+        }
+      }
+    },
+    "v1UserKeyWallet": {
+      "type": "object",
+      "properties": {
+        "uid": {
+          "type": "string"
+        },
+        "gid": {
+          "type": "string"
+        },
+        "encryptedGroupPrivateKey": {
+          "type": "string"
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "deletedAt": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
     }
   }
 }