Macbook
67 lines
2.2 KiB
Bash
Executable File
67 lines
2.2 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Desktop updater latest.json — HTTPS·HTTP 무결성 (Caddy 역프록시 빈 응답 감지)
|
|
set -euo pipefail
|
|
|
|
BASE_URL="${DESKTOP_UPDATE_BASE_URL:-https://stock.exdev.co.kr/desktop/updates}"
|
|
BASE_URL="${BASE_URL%/}"
|
|
HTTPS_URL="${DESKTOP_PUBLISHED_LATEST_URL:-${BASE_URL}/latest.json}"
|
|
HTTP_URL="$(printf '%s' "$HTTPS_URL" | sed 's|^https://|http://|')"
|
|
|
|
log() { echo "[verify-updater-endpoint] $*"; }
|
|
warn() { log "WARN: $*"; }
|
|
fail() { log "FAIL: $*"; exit 1; }
|
|
|
|
fetch_body() {
|
|
local url="$1"
|
|
curl -sf --connect-timeout 8 --max-time 15 "$url" 2>/dev/null || true
|
|
}
|
|
|
|
parse_manifest() {
|
|
local body="$1"
|
|
printf '%s' "$body" | node -e "
|
|
let d=''; process.stdin.on('data',c=>d+=c);
|
|
process.stdin.on('end',()=>{
|
|
try {
|
|
const j=JSON.parse(d);
|
|
const n=Object.keys(j.platforms||{}).length;
|
|
console.log((j.version||'')+' '+n);
|
|
} catch { console.log('PARSE_ERR 0'); }
|
|
});
|
|
" 2>/dev/null || echo "PARSE_ERR 0"
|
|
}
|
|
|
|
log "HTTPS → $HTTPS_URL"
|
|
log "HTTP → $HTTP_URL"
|
|
|
|
HTTPS_BODY="$(fetch_body "$HTTPS_URL")"
|
|
HTTP_BODY="$(fetch_body "$HTTP_URL")"
|
|
HTTPS_SIZE="${#HTTPS_BODY}"
|
|
HTTP_SIZE="${#HTTP_BODY}"
|
|
|
|
log "HTTPS size=${HTTPS_SIZE}B HTTP size=${HTTP_SIZE}B"
|
|
|
|
if [[ "$HTTPS_SIZE" -lt 8 && "$HTTP_SIZE" -ge 8 ]]; then
|
|
read -r HTTP_VER HTTP_PLAT <<< "$(parse_manifest "$HTTP_BODY")"
|
|
fail "HTTPS latest.json 이 비어 있습니다 (${HTTPS_SIZE}B). HTTP는 v${HTTP_VER} (${HTTP_SIZE}B, platforms=${HTTP_PLAT}) — Caddy(443) → gc-frontend:80 역프록시를 점검하세요."
|
|
fi
|
|
|
|
if [[ "$HTTPS_SIZE" -lt 8 && "$HTTP_SIZE" -lt 8 ]]; then
|
|
fail "latest.json 이 HTTPS·HTTP 모두 비어 있습니다 — Desktop Jenkins publish 후 scripts/publish-desktop-update.sh 실행 필요"
|
|
fi
|
|
|
|
BODY="$HTTPS_BODY"
|
|
[[ "$HTTPS_SIZE" -lt 8 ]] && BODY="$HTTP_BODY"
|
|
|
|
read -r VER PLAT <<< "$(parse_manifest "$BODY")"
|
|
if [[ "$VER" == "PARSE_ERR" || -z "$VER" ]]; then
|
|
fail "latest.json JSON 파싱 실패 (HTTPS ${HTTPS_SIZE}B / HTTP ${HTTP_SIZE}B)"
|
|
fi
|
|
|
|
if [[ "${PLAT:-0}" -eq 0 ]]; then
|
|
warn "latest.json v${VER} — platforms 비어 있음 (서명된 updater bundle 없음). 자동 업데이트는 실패할 수 있습니다."
|
|
exit 2
|
|
fi
|
|
|
|
log "OK v${VER} platforms=${PLAT} (HTTPS ${HTTPS_SIZE}B)"
|
|
exit 0
|