基于Asset下的高安全级别数据存储

async function addAsset(account: string, password: string, label: string) { 
  let attr: asset.AssetMap = new Map(); 
  attr.set(asset.Tag.ALIAS, stringToArray(account))//添加账号 
  attr.set(asset.Tag.SECRET, stringToArray(password))//添加银行卡号 
  attr.set(asset.Tag.DATA_LABEL_NORMAL_1, stringToArray(label))//添加标签 
  attr.set(asset.Tag.AUTH_TYPE, asset.AuthType.ANY)//访问关键资产所需的用户认证类型。 
  attr.set(asset.Tag.IS_PERSISTENT, true)//数据持久化 
  try { 
     asset.addSync(attr); 
    log("保存成功") 
  } catch (error)  { 
    if (error.code === 24000003) { 
      log('保存失败，账号已存在'); 
    } else { 
      log('保存失败') 
    } 
  } 
}

//1.获取挑战值 
async function preQueryAssetPromise(CheckAccount: string): Promise<Uint8Array> { 
  let assetMap: asset.AssetMap = new Map(); 
  assetMap.set(asset.Tag.AUTH_VALIDITY_PERIOD, 10 * 60)//用户认证的有效期。 
  assetMap.set(asset.Tag.AUTH_TYPE, asset.AuthType.ANY)//访问关键资产所需的用户认证类型。 
  if (CheckAccount.length > 0) { 
    assetMap.set(asset.Tag.ALIAS, stringToArray(CheckAccount)) 
  } 
  try { 
    return  asset.preQuerySync(assetMap) 
  } catch (error) { 
    return new Uint8Array(0) 
  } 
}

//2.拉起用户认证框，获取authToken 
async function getAuthToken(challenge: Uint8Array, callback: (isSuccess: boolean, challenge: Uint8Array) => void) { 
  const authParam: userAuth.AuthParam = { 
    challenge: challenge, 
    authType: [userAuth.UserAuthType.PIN],//设置访问类型（指纹，锁屏密码，人脸） 
    authTrustLevel: userAuth.AuthTrustLevel.ATL1, 
  }; 
  const widgetParam: userAuth.WidgetParam = { 
    title: '请输入锁屏密码', 
  }; 
  try { 
    //获取认证对象，拉起用户认证框 
    let userAuthInstance = userAuth.getUserAuthInstance(authParam, widgetParam); 
     // 订阅认证结果 
    userAuthInstance.on('result', { 
      onResult(result) { 
        console.log('userAuthInstance callback result = ' + JSON.stringify(result)); 
        if (result.result == 12500000) { 
          console.log('userAuthInstance callback result success'); 
          callback(true, result.token) 
        } else if (result.result == 12500010) { 
          prompt.showToast({ message: "请设置锁屏密码" }) 
          callback(false, new Uint8Array(0)) 
        } 
      } 
    }); 
    userAuthInstance.start(); 
  } catch (error) { 
    console.log('auth catch error: ' + JSON.stringify(error)); 
    prompt.showToast({ message: "认证失败" }) 
    callback(false, new Uint8Array(0)) 
  } 
}

//3.通过账号，挑战值，令牌去查询存储的数据 
async function queryAuthAssetPromise(CheckAccount: string, challenge: Uint8Array, authToken: Uint8Array):Promise<Map<string, string>> { 
  let accountList:Map<string,string>[]=new Array<Map<string, string>>(); 
  let attr: asset.AssetMap = new Map(); 
  let account: Map<string, string> = new Map<string, string>(); 
  if (CheckAccount.length > 0) { 
    attr.set(asset.Tag.ALIAS, stringToArray(CheckAccount)); 
    attr.set(asset.Tag.RETURN_TYPE, asset.ReturnType.ALL);// 此处表示需要返回关键资产的所有信息，即属性+明文 
    attr.set(asset.Tag.AUTH_CHALLENGE, challenge);//设置挑战值 
    attr.set(asset.Tag.AUTH_TOKEN, authToken)//设置authToken 
  } 
 
  try { 
    let data: Array<asset.AssetMap> =  asset.querySync(attr);//调用接口查询数据 
    accountList= convertAssetList(data,accountList) 
    return accountList[0] 
  } catch (error) { 
    if (error.code === 24000002) { 
      log('未查询到结果'); 
    } else { 
      log('查询失败'); 
    } 
    return account 
  } 
}

//4.清除挑战值 
export async function postQueryAssetPromise(challenge: Uint8Array) { 
  let attr: asset.AssetMap = new Map(); 
  attr.set(asset.Tag.AUTH_CHALLENGE, challenge); 
  try { 
     asset.postQuerySync(attr); 
  } catch (error) { 
  } 
}