feat(ui): http-01 challenge

ui/src/components/provider/ACMEDns01ProviderSelect.tsx

@@ -4,31 +4,44 @@ import { Avatar, Select, Typography, theme } from "antd";
 
 import { type ACMEDns01Provider, acmeDns01ProvidersMap } from "@/domain/provider";
 
-import { type SharedSelectProps } from "./_shared";
+import { type SharedSelectProps, useSelectDataSource } from "./_shared";
 
-export interface ACMEDns01ProviderSelectProps extends SharedSelectProps<ACMEDns01Provider> {}
+export interface ACMEDns01ProviderSelectProps extends SharedSelectProps<ACMEDns01Provider> {
+  showAvailability?: boolean;
+}
 
-const ACMEDns01ProviderSelect = ({ onFilter, ...props }: ACMEDns01ProviderSelectProps) => {
+const ACMEDns01ProviderSelect = ({ showAvailability, onFilter, ...props }: ACMEDns01ProviderSelectProps) => {
   const { t } = useTranslation();
 
   const { token: themeToken } = theme.useToken();
 
-  const options = useMemo<Array<{ key: string; value: string; label: string; data: ACMEDns01Provider }>>(() => {
-    return Array.from(acmeDns01ProvidersMap.values())
-      .filter((provider) => {
-        if (onFilter) {
-          return onFilter(provider.type, provider);
-        }
-
-        return true;
-      })
-      .map((provider) => ({
+  const dataSources = useSelectDataSource({
+    dataSource: Array.from(acmeDns01ProvidersMap.values()),
+    filters: [onFilter!],
+  });
+  const options = useMemo(() => {
+    const convert = (providers: ACMEDns01Provider[]): Array<{ key: string; value: string; label: string; data: ACMEDns01Provider }> => {
+      return providers.map((provider) => ({
         key: provider.type,
         value: provider.type,
         label: t(provider.name),
         data: provider,
       }));
-  }, [onFilter]);
+    };
+
+    return showAvailability
+      ? [
+          {
+            label: t("provider.text.available_group"),
+            options: convert(dataSources.available),
+          },
+          {
+            label: t("provider.text.unavailable_group"),
+            options: convert(dataSources.unavailable),
+          },
+        ].filter((group) => group.options.length > 0)
+      : convert(dataSources.filtered);
+  }, [showAvailability, dataSources]);
 
   const renderOption = (key: string) => {
     const provider = acmeDns01ProvidersMap.get(key);
@@ -45,9 +58,11 @@ const ACMEDns01ProviderSelect = ({ onFilter, ...props }: ACMEDns01ProviderSelect
       {...props}
       filterOption={(inputValue, option) => {
         if (!option) return false;
+        if (!option.label) return false;
+        if (!option.value) return false;
 
         const value = inputValue.toLowerCase();
-        return option.value.toLowerCase().includes(value) || option.label.toLowerCase().includes(value);
+        return String(option.value).toLowerCase().includes(value) || String(option.label).toLowerCase().includes(value);
       }}
       labelRender={({ value }) => {
         if (value != null) {
@@ -59,7 +74,7 @@ const ACMEDns01ProviderSelect = ({ onFilter, ...props }: ACMEDns01ProviderSelect
       options={options}
       optionFilterProp={void 0}
       optionLabelProp={void 0}
-      optionRender={(option) => renderOption(option.data.value)}
+      optionRender={(option) => renderOption(option.data.value as string)}
     />
   );
 };

ui/src/components/provider/ACMEHttp01ProviderSelect.tsx

@@ -0,0 +1,82 @@
+import { useMemo } from "react";
+import { useTranslation } from "react-i18next";
+import { Avatar, Select, Typography, theme } from "antd";
+
+import { type ACMEHttp01Provider, acmeHttp01ProvidersMap } from "@/domain/provider";
+
+import { type SharedSelectProps, useSelectDataSource } from "./_shared";
+
+export interface ACMEHttp01ProviderSelectProps extends SharedSelectProps<ACMEHttp01Provider> {
+  showAvailability?: boolean;
+}
+
+const ACMEHttp01ProviderSelect = ({ showAvailability, onFilter, ...props }: ACMEHttp01ProviderSelectProps) => {
+  const { t } = useTranslation();
+
+  const { token: themeToken } = theme.useToken();
+
+  const dataSources = useSelectDataSource({
+    dataSource: Array.from(acmeHttp01ProvidersMap.values()),
+    filters: [onFilter!],
+  });
+  const options = useMemo(() => {
+    const convert = (providers: ACMEHttp01Provider[]): Array<{ key: string; value: string; label: string; data: ACMEHttp01Provider }> => {
+      return providers.map((provider) => ({
+        key: provider.type,
+        value: provider.type,
+        label: t(provider.name),
+        data: provider,
+      }));
+    };
+
+    return showAvailability
+      ? [
+          {
+            label: t("provider.text.available_group"),
+            options: convert(dataSources.available),
+          },
+          {
+            label: t("provider.text.unavailable_group"),
+            options: convert(dataSources.unavailable),
+          },
+        ].filter((group) => group.options.length > 0)
+      : convert(dataSources.filtered);
+  }, [showAvailability, dataSources]);
+
+  const renderOption = (key: string) => {
+    const provider = acmeHttp01ProvidersMap.get(key);
+    return (
+      <div className="flex items-center gap-2 truncate overflow-hidden">
+        <Avatar shape="square" src={provider?.icon} size="small" />
+        <Typography.Text ellipsis>{t(provider?.name ?? "")}</Typography.Text>
+      </div>
+    );
+  };
+
+  return (
+    <Select
+      {...props}
+      filterOption={(inputValue, option) => {
+        if (!option) return false;
+        if (!option.label) return false;
+        if (!option.value) return false;
+
+        const value = inputValue.toLowerCase();
+        return String(option.value).toLowerCase().includes(value) || String(option.label).toLowerCase().includes(value);
+      }}
+      labelRender={({ value }) => {
+        if (value != null) {
+          return renderOption(value as string);
+        }
+
+        return <span style={{ color: themeToken.colorTextPlaceholder }}>{props.placeholder}</span>;
+      }}
+      options={options}
+      optionFilterProp={void 0}
+      optionLabelProp={void 0}
+      optionRender={(option) => renderOption(option.data.value as string)}
+    />
+  );
+};
+
+export default ACMEHttp01ProviderSelect;

ui/src/components/provider/DeploymentProviderSelect.tsx

@@ -1,3 +1,4 @@
+import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
 import { Avatar, Select, Typography, theme } from "antd";
 
@@ -18,14 +19,29 @@ const DeploymentProviderSelect = ({ showAvailability = false, onFilter, ...props
     dataSource: Array.from(deploymentProvidersMap.values()),
     filters: [onFilter!],
   });
-  const dataSource2Options = (providers: DeploymentProvider[]): Array<{ key: string; value: string; label: string; data: DeploymentProvider }> => {
-    return providers.map((provider) => ({
-      key: provider.type,
-      value: provider.type,
-      label: t(provider.name),
-      data: provider,
-    }));
-  };
+  const options = useMemo(() => {
+    const convert = (providers: DeploymentProvider[]): Array<{ key: string; value: string; label: string; data: DeploymentProvider }> => {
+      return providers.map((provider) => ({
+        key: provider.type,
+        value: provider.type,
+        label: t(provider.name),
+        data: provider,
+      }));
+    };
+
+    return showAvailability
+      ? [
+          {
+            label: t("provider.text.available_group"),
+            options: convert(dataSources.available),
+          },
+          {
+            label: t("provider.text.unavailable_group"),
+            options: convert(dataSources.unavailable),
+          },
+        ].filter((group) => group.options.length > 0)
+      : convert(dataSources.filtered);
+  }, [showAvailability, dataSources]);
 
   const renderOption = (key: string) => {
     const provider = deploymentProvidersMap.get(key);
@@ -55,20 +71,7 @@ const DeploymentProviderSelect = ({ showAvailability = false, onFilter, ...props
 
         return <span style={{ color: themeToken.colorTextPlaceholder }}>{props.placeholder}</span>;
       }}
-      options={
-        showAvailability
-          ? [
-              {
-                label: t("provider.text.available_group"),
-                options: dataSource2Options(dataSources.available),
-              },
-              {
-                label: t("provider.text.unavailable_group"),
-                options: dataSource2Options(dataSources.unavailable),
-              },
-            ]
-          : dataSource2Options(dataSources.filtered)
-      }
+      options={options}
       optionFilterProp={void 0}
       optionLabelProp={void 0}
       optionRender={(option) => renderOption(option.data.value as string)}

ui/src/components/provider/NotificationProviderSelect.tsx

@@ -1,3 +1,4 @@
+import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
 import { Avatar, Select, Typography, theme } from "antd";
 
@@ -18,14 +19,29 @@ const NotificationProviderSelect = ({ showAvailability = false, onFilter, ...pro
     dataSource: Array.from(notificationProvidersMap.values()),
     filters: [onFilter!],
   });
-  const dataSource2Options = (providers: NotificationProvider[]): Array<{ key: string; value: string; label: string; data: NotificationProvider }> => {
-    return providers.map((provider) => ({
-      key: provider.type,
-      value: provider.type,
-      label: t(provider.name),
-      data: provider,
-    }));
-  };
+  const options = useMemo(() => {
+    const convert = (providers: NotificationProvider[]): Array<{ key: string; value: string; label: string; data: NotificationProvider }> => {
+      return providers.map((provider) => ({
+        key: provider.type,
+        value: provider.type,
+        label: t(provider.name),
+        data: provider,
+      }));
+    };
+
+    return showAvailability
+      ? [
+          {
+            label: t("provider.text.available_group"),
+            options: convert(dataSources.available),
+          },
+          {
+            label: t("provider.text.unavailable_group"),
+            options: convert(dataSources.unavailable),
+          },
+        ].filter((group) => group.options.length > 0)
+      : convert(dataSources.filtered);
+  }, [showAvailability, dataSources]);
 
   const renderOption = (key: string) => {
     const provider = notificationProvidersMap.get(key);
@@ -55,20 +71,7 @@ const NotificationProviderSelect = ({ showAvailability = false, onFilter, ...pro
 
         return <span style={{ color: themeToken.colorTextPlaceholder }}>{props.placeholder}</span>;
       }}
-      options={
-        showAvailability
-          ? [
-              {
-                label: t("provider.text.available_group"),
-                options: dataSource2Options(dataSources.available),
-              },
-              {
-                label: t("provider.text.unavailable_group"),
-                options: dataSource2Options(dataSources.unavailable),
-              },
-            ]
-          : dataSource2Options(dataSources.filtered)
-      }
+      options={options}
       optionFilterProp={void 0}
       optionLabelProp={void 0}
       optionRender={(option) => renderOption(option.data.value as string)}

ui/src/components/workflow/designer/forms/BizApplyNodeConfigFieldsProviderLocal.tsx

@@ -0,0 +1,52 @@
+import { getI18n, useTranslation } from "react-i18next";
+import { Form, Input } from "antd";
+import { createSchemaFieldRule } from "antd-zod";
+import { z } from "zod";
+
+import { useFormNestedFieldsContext } from "./_context";
+
+const BizApplyNodeConfigFieldsProviderLocal = () => {
+  const { i18n, t } = useTranslation();
+
+  const { parentNamePath } = useFormNestedFieldsContext();
+  const formSchema = z.object({
+    [parentNamePath]: getSchema({ i18n }),
+  });
+  const formRule = createSchemaFieldRule(formSchema);
+  const initialValues = getInitialValues();
+
+  return (
+    <>
+      <Form.Item
+        name={[parentNamePath, "webRootPath"]}
+        initialValue={initialValues.webRootPath}
+        label={t("workflow_node.apply.form.local_webroot_path.label")}
+        rules={[formRule]}
+        tooltip={<span dangerouslySetInnerHTML={{ __html: t("workflow_node.apply.form.local_webroot_path.tooltip") }}></span>}
+      >
+        <Input placeholder={t("workflow_node.apply.form.local_webroot_path.placeholder")} />
+      </Form.Item>
+    </>
+  );
+};
+
+const getInitialValues = (): Nullish<z.infer<ReturnType<typeof getSchema>>> => {
+  return {
+    webRootPath: "/var/www/html/",
+  };
+};
+
+const getSchema = ({ i18n = getI18n() }: { i18n?: ReturnType<typeof getI18n> }) => {
+  const { t } = i18n;
+
+  return z.object({
+    webRootPath: z.string().nonempty(t("workflow_node.apply.form.local_webroot_path.placeholder")),
+  });
+};
+
+const _default = Object.assign(BizApplyNodeConfigFieldsProviderLocal, {
+  getInitialValues,
+  getSchema,
+});
+
+export default _default;

ui/src/components/workflow/designer/forms/BizApplyNodeConfigFieldsProviderSSH.tsx

@@ -0,0 +1,52 @@
+import { getI18n, useTranslation } from "react-i18next";
+import { Form, Input } from "antd";
+import { createSchemaFieldRule } from "antd-zod";
+import { z } from "zod";
+
+import { useFormNestedFieldsContext } from "./_context";
+
+const BizApplyNodeConfigFieldsProviderSSH = () => {
+  const { i18n, t } = useTranslation();
+
+  const { parentNamePath } = useFormNestedFieldsContext();
+  const formSchema = z.object({
+    [parentNamePath]: getSchema({ i18n }),
+  });
+  const formRule = createSchemaFieldRule(formSchema);
+  const initialValues = getInitialValues();
+
+  return (
+    <>
+      <Form.Item
+        name={[parentNamePath, "webRootPath"]}
+        initialValue={initialValues.webRootPath}
+        label={t("workflow_node.apply.form.ssh_webroot_path.label")}
+        rules={[formRule]}
+        tooltip={<span dangerouslySetInnerHTML={{ __html: t("workflow_node.apply.form.ssh_webroot_path.tooltip") }}></span>}
+      >
+        <Input placeholder={t("workflow_node.apply.form.ssh_webroot_path.placeholder")} />
+      </Form.Item>
+    </>
+  );
+};
+
+const getInitialValues = (): Nullish<z.infer<ReturnType<typeof getSchema>>> => {
+  return {
+    webRootPath: "/var/www/html/",
+  };
+};
+
+const getSchema = ({ i18n = getI18n() }: { i18n?: ReturnType<typeof getI18n> }) => {
+  const { t } = i18n;
+
+  return z.object({
+    webRootPath: z.string().nonempty(t("workflow_node.apply.form.ssh_webroot_path.placeholder")),
+  });
+};
+
+const _default = Object.assign(BizApplyNodeConfigFieldsProviderSSH, {
+  getInitialValues,
+  getSchema,
+});
+
+export default _default;

ui/src/components/workflow/designer/forms/BizApplyNodeConfigForm.tsx

@@ -27,9 +27,11 @@ import AccessEditDrawer from "@/components/access/AccessEditDrawer";
 import AccessSelect from "@/components/access/AccessSelect";
 import MultipleSplitValueInput from "@/components/MultipleSplitValueInput";
 import ACMEDns01ProviderSelect from "@/components/provider/ACMEDns01ProviderSelect";
+import ACMEHttp01ProviderSelect from "@/components/provider/ACMEHttp01ProviderSelect";
 import CAProviderSelect from "@/components/provider/CAProviderSelect";
 import Show from "@/components/Show";
-import { ACCESS_USAGES, ACME_DNS01_PROVIDERS, accessProvidersMap, acmeDns01ProvidersMap, caProvidersMap } from "@/domain/provider";
+import { type AccessModel } from "@/domain/access";
+import { ACME_DNS01_PROVIDERS, ACME_HTTP01_PROVIDERS, acmeDns01ProvidersMap, acmeHttp01ProvidersMap, caProvidersMap } from "@/domain/provider";
 import { type WorkflowNodeConfigForBizApply, defaultNodeConfigForBizApply } from "@/domain/workflow";
 import { useAntdForm, useZustandShallowSelector } from "@/hooks";
 import { useAccessesStore } from "@/stores/access";
@@ -41,6 +43,8 @@ import BizApplyNodeConfigFieldsProviderAliyunESA from "./BizApplyNodeConfigField
 import BizApplyNodeConfigFieldsProviderAWSRoute53 from "./BizApplyNodeConfigFieldsProviderAWSRoute53";
 import BizApplyNodeConfigFieldsProviderHuaweiCloudDNS from "./BizApplyNodeConfigFieldsProviderHuaweiCloudDNS";
 import BizApplyNodeConfigFieldsProviderJDCloudDNS from "./BizApplyNodeConfigFieldsProviderJDCloudDNS";
+import BizApplyNodeConfigFieldsProviderLocal from "./BizApplyNodeConfigFieldsProviderLocal";
+import BizApplyNodeConfigFieldsProviderSSH from "./BizApplyNodeConfigFieldsProviderSSH";
 import BizApplyNodeConfigFieldsProviderTencentCloudEO from "./BizApplyNodeConfigFieldsProviderTencentCloudEO";
 import { NodeType } from "../nodes/typings";
 
@@ -62,6 +66,16 @@ const BizApplyNodeConfigForm = ({ node, ...props }: BizApplyNodeConfigFormProps)
   const { i18n, t } = useTranslation();
 
   const { accesses } = useAccessesStore(useZustandShallowSelector("accesses"));
+  const accessOptionFilter = (_: string, option: AccessModel) => {
+    if (option.reserve) return false;
+    if (fieldChallengeType === CHALLENGE_TYPE_DNS01) return acmeDns01ProvidersMap.get(fieldProvider)?.provider === option.provider;
+    if (fieldChallengeType === CHALLENGE_TYPE_HTTP01) return acmeHttp01ProvidersMap.get(fieldProvider)?.provider === option.provider;
+    return false;
+  };
+  const accessOptionFilterForCA = (_: string, option: AccessModel) => {
+    if (option.reserve !== "ca") return false;
+    return caProvidersMap.get(fieldCAProvider)?.provider === option.provider;
+  };
 
   const initialValues = useMemo(() => {
     return getNodeForm(node)?.getValueIn("config") as WorkflowNodeConfigForBizApply | undefined;
@@ -79,46 +93,85 @@ const BizApplyNodeConfigForm = ({ node, ...props }: BizApplyNodeConfigFormProps)
   const fieldProvider = Form.useWatch<string>("provider", { form: formInst, preserve: true });
   const fieldProviderAccessId = Form.useWatch<string>("providerAccessId", { form: formInst, preserve: true });
   const fieldCAProvider = Form.useWatch<string>("caProvider", { form: formInst, preserve: true });
+  const fieldCAProviderAccessId = Form.useWatch<string>("caProviderAccessId", { form: formInst, preserve: true });
 
   const NestedProviderConfigFields = useMemo(() => {
     /*
       注意：如果追加新的子组件，请保持以 ASCII 排序。
       NOTICE: If you add new child component, please keep ASCII order.
       */
-    switch (fieldProvider) {
-      case ACME_DNS01_PROVIDERS.ALIYUN_ESA: {
-        return BizApplyNodeConfigFieldsProviderAliyunESA;
-      }
-      case ACME_DNS01_PROVIDERS.AWS:
-      case ACME_DNS01_PROVIDERS.AWS_ROUTE53: {
-        return BizApplyNodeConfigFieldsProviderAWSRoute53;
-      }
-      case ACME_DNS01_PROVIDERS.HUAWEICLOUD:
-      case ACME_DNS01_PROVIDERS.HUAWEICLOUD_DNS: {
-        return BizApplyNodeConfigFieldsProviderHuaweiCloudDNS;
-      }
-      case ACME_DNS01_PROVIDERS.JDCLOUD:
-      case ACME_DNS01_PROVIDERS.JDCLOUD_DNS: {
-        return BizApplyNodeConfigFieldsProviderJDCloudDNS;
-      }
-      case ACME_DNS01_PROVIDERS.TENCENTCLOUD_EO: {
-        return BizApplyNodeConfigFieldsProviderTencentCloudEO;
-      }
-    }
-  }, [fieldProvider]);
+    switch (fieldChallengeType) {
+      case CHALLENGE_TYPE_DNS01:
+        {
+          switch (fieldProvider) {
+            case ACME_DNS01_PROVIDERS.ALIYUN_ESA: {
+              return BizApplyNodeConfigFieldsProviderAliyunESA;
+            }
+            case ACME_DNS01_PROVIDERS.AWS:
+            case ACME_DNS01_PROVIDERS.AWS_ROUTE53: {
+              return BizApplyNodeConfigFieldsProviderAWSRoute53;
+            }
+            case ACME_DNS01_PROVIDERS.HUAWEICLOUD:
+            case ACME_DNS01_PROVIDERS.HUAWEICLOUD_DNS: {
+              return BizApplyNodeConfigFieldsProviderHuaweiCloudDNS;
+            }
+            case ACME_DNS01_PROVIDERS.JDCLOUD:
+            case ACME_DNS01_PROVIDERS.JDCLOUD_DNS: {
+              return BizApplyNodeConfigFieldsProviderJDCloudDNS;
+            }
+            case ACME_DNS01_PROVIDERS.TENCENTCLOUD_EO: {
+              return BizApplyNodeConfigFieldsProviderTencentCloudEO;
+            }
+          }
+        }
+        break;
 
-  const [showProvider, setShowProvider] = useState(false);
-  useEffect(() => {
-    // 通常情况下每个授权信息只对应一个 DNS 提供商，此时无需显示 DNS 提供商字段；
-    // 如果对应多个（如 AWS 的 Route53、Lightsail，阿里云的 DNS、ESA，腾讯云的 DNS、EdgeOne 等），则显示。
-    if (fieldProviderAccessId) {
-      const access = accesses.find((e) => e.id === fieldProviderAccessId);
-      const providers = Array.from(acmeDns01ProvidersMap.values()).filter((e) => e.provider === access?.provider);
-      setShowProvider(providers.length > 1);
-    } else {
-      setShowProvider(false);
+      case CHALLENGE_TYPE_HTTP01:
+        switch (fieldProvider) {
+          case ACME_HTTP01_PROVIDERS.LOCAL: {
+            return BizApplyNodeConfigFieldsProviderLocal;
+          }
+          case ACME_HTTP01_PROVIDERS.SSH: {
+            return BizApplyNodeConfigFieldsProviderSSH;
+          }
+        }
+        break;
     }
-  }, [accesses, fieldProviderAccessId]);
+  }, [fieldChallengeType, fieldProvider]);
+
+  const [showProviderAccess, setShowProviderAccess] = useState(false);
+  useEffect(() => {
+    // 内置的质询提供商（如本地主机）无需显示授权信息字段
+    switch (fieldChallengeType) {
+      case CHALLENGE_TYPE_DNS01:
+        {
+          if (fieldProvider) {
+            const provider = acmeDns01ProvidersMap.get(fieldProvider);
+            setShowProviderAccess(!provider?.builtin);
+          } else {
+            setShowProviderAccess(false);
+          }
+        }
+        break;
+
+      case CHALLENGE_TYPE_HTTP01:
+        {
+          if (fieldProvider) {
+            const provider = acmeHttp01ProvidersMap.get(fieldProvider);
+            setShowProviderAccess(!provider?.builtin);
+          } else {
+            setShowProviderAccess(false);
+          }
+        }
+        break;
+
+      default:
+        {
+          setShowProviderAccess(false);
+        }
+        break;
+    }
+  }, [fieldChallengeType, fieldProvider]);
 
   const [showCAProviderAccess, setShowCAProviderAccess] = useState(false);
   useEffect(() => {
@@ -131,7 +184,55 @@ const BizApplyNodeConfigForm = ({ node, ...props }: BizApplyNodeConfigFormProps)
     }
   }, [fieldCAProvider]);
 
+  useEffect(() => {
+    // 如果未选择质询提供商，则清空授权信息
+    if (!fieldProvider && fieldProviderAccessId) {
+      formInst.setFieldValue("providerAccessId", void 0);
+      return;
+    }
+
+    // 如果已选择质询提供商只有一个授权信息，则自动选择该授权信息
+    if (fieldProvider && !fieldProviderAccessId) {
+      const availableAccesses = accesses
+        .filter((access) => accessOptionFilter(access.provider, access))
+        .filter((access) => {
+          if (fieldChallengeType === CHALLENGE_TYPE_DNS01) return acmeDns01ProvidersMap.get(fieldProvider)?.provider === access.provider;
+          if (fieldChallengeType === CHALLENGE_TYPE_HTTP01) return acmeHttp01ProvidersMap.get(fieldProvider)?.provider === access.provider;
+          return false;
+        });
+      if (availableAccesses.length === 1) {
+        formInst.setFieldValue("providerAccessId", availableAccesses[0].id);
+      }
+    }
+  }, [fieldChallengeType, fieldProvider, fieldProviderAccessId]);
+
+  useEffect(() => {
+    // 如果未选择 CA 提供商，则清空授权信息
+    if (!fieldCAProvider && fieldCAProviderAccessId) {
+      formInst.setFieldValue("caProviderAccessId", void 0);
+      return;
+    }
+
+    // 如果已选择 CA 提供商只有一个授权信息，则自动选择该授权信息
+    if (fieldCAProvider && !fieldCAProviderAccessId) {
+      const availableAccesses = accesses
+        .filter((access) => accessOptionFilterForCA(access.provider, access))
+        .filter((access) => caProvidersMap.get(fieldCAProvider)?.provider === access.provider);
+      if (availableAccesses.length === 1) {
+        formInst.setFieldValue("caProviderAccessId", availableAccesses[0].id);
+      }
+    }
+  }, [fieldCAProvider, fieldCAProviderAccessId]);
+
   const handleChallengeTypeChange = (value: string) => {
+    const resetFieldIfInvalid = (field: keyof z.infer<typeof formSchema>) => {
+      const fieldSchame = formSchema.pick({ [field]: true });
+      const fieldValue = formInst.getFieldValue(field);
+      if (!fieldSchame.safeParse({ [field]: fieldValue }).success) {
+        formInst.setFieldValue(field, void 0);
+      }
+    };
+
     switch (value) {
       case CHALLENGE_TYPE_DNS01:
         {
@@ -146,33 +247,23 @@ const BizApplyNodeConfigForm = ({ node, ...props }: BizApplyNodeConfigFormProps)
           formInst.setFieldValue("provider", void 0);
           formInst.setFieldValue("providerAccessId", void 0);
           formInst.setFieldValue("providerConfig", void 0);
-          formInst.setFieldValue("dnsPropagationWait", void 0);
-          formInst.setFieldValue("dnsPropagationTimeout", void 0);
-          formInst.setFieldValue("dnsTTL", void 0);
+
+          resetFieldIfInvalid("dnsPropagationWait");
+          resetFieldIfInvalid("dnsPropagationTimeout");
+          resetFieldIfInvalid("dnsTTL");
         }
         break;
     }
   };
 
-  const handleProviderSelect = (value: string) => {
-    if (fieldProvider === value) return;
-
-    // 切换 DNS 提供商时联动授权信息
+  const handleProviderSelect = (value?: string | undefined) => {
+    // 切换质询提供商时重置表单，避免其他提供商的配置字段影响当前提供商
     if (initialValues?.provider === value) {
-      formInst.setFieldValue("providerAccessId", initialValues?.providerAccessId);
+      formInst.setFieldValue("providerAccessId", void 0);
+      formInst.resetFields(["providerConfig"]);
     } else {
-      if (acmeDns01ProvidersMap.get(fieldProvider)?.provider !== acmeDns01ProvidersMap.get(value)?.provider) {
-        formInst.setFieldValue("providerAccessId", void 0);
-      }
-    }
-  };
-
-  const handleProviderAccessSelect = (value: string) => {
-    // 切换授权信息时联动 DNS 提供商
-    const access = accesses.find((access) => access.id === value);
-    const provider = Array.from(acmeDns01ProvidersMap.values()).find((provider) => provider.provider === access?.provider);
-    if (fieldProvider !== provider?.type) {
-      formInst.setFieldValue("provider", provider?.type);
+      formInst.setFieldValue("providerAccessId", void 0);
+      formInst.setFieldValue("providerConfig", void 0);
     }
   };
 
@@ -196,7 +287,21 @@ const BizApplyNodeConfigForm = ({ node, ...props }: BizApplyNodeConfigFormProps)
     <NodeFormContextProvider value={{ node }}>
       <Form {...formProps} clearOnDestroy={true} form={formInst} layout="vertical" preserve={false} scrollToFirstError>
         <div id="parameters" data-anchor="parameters">
-          <Form.Item name="domains" label={t("workflow_node.apply.form.domains.label")} extra={t("workflow_node.apply.form.domains.help")} rules={[formRule]}>
+          <Form.Item
+            name="domains"
+            label={t("workflow_node.apply.form.domains.label")}
+            extra={
+              <span
+                dangerouslySetInnerHTML={{
+                  __html:
+                    fieldChallengeType === CHALLENGE_TYPE_HTTP01
+                      ? t("workflow_node.apply.form.domains.help_no_wildcard")
+                      : t("workflow_node.apply.form.domains.help"),
+                }}
+              ></span>
+            }
+            rules={[formRule]}
+          >
             <MultipleSplitValueInput
               modalTitle={t("workflow_node.apply.form.domains.multiple_input_modal.title")}
               placeholder={t("workflow_node.apply.form.domains.placeholder")}
@@ -214,34 +319,69 @@ const BizApplyNodeConfigForm = ({ node, ...props }: BizApplyNodeConfigFormProps)
           >
             <InternalEmailInput placeholder={t("workflow_node.apply.form.contact_email.placeholder")} />
           </Form.Item>
+        </div>
 
-          <Form.Item name="challengeType" label={t("workflow_node.apply.form.challenge_type.label")} rules={[formRule]}>
+        <div id="challenge" data-anchor="challenge">
+          <Divider size="small">
+            <Typography.Text className="text-xs font-normal" type="secondary">
+              {t("workflow_node.apply.form_anchor.challenge.title")}
+            </Typography.Text>
+          </Divider>
+
+          <Form.Item
+            name="challengeType"
+            label={t("workflow_node.apply.form.challenge_type.label")}
+            rules={[formRule]}
+            tooltip={<span dangerouslySetInnerHTML={{ __html: t("workflow_node.apply.form.challenge_type.tooltip") }}></span>}
+          >
             <Radio.Group block onChange={(e) => handleChallengeTypeChange(e.target.value)}>
               <Radio.Button value={CHALLENGE_TYPE_DNS01}>DNS-01</Radio.Button>
               <Radio.Button value={CHALLENGE_TYPE_HTTP01}>HTTP-01</Radio.Button>
             </Radio.Group>
           </Form.Item>
 
-          <Form.Item name="provider" label={t("workflow_node.apply.form.provider.label")} hidden={!showProvider} rules={[formRule]}>
-            <ACMEDns01ProviderSelect
-              disabled={!showProvider}
-              placeholder={t("workflow_node.apply.form.provider.placeholder")}
-              showSearch
-              onFilter={(_, option) => {
-                if (fieldProviderAccessId) {
-                  return accesses.find((e) => e.id === fieldProviderAccessId)?.provider === option.provider;
-                }
-
-                return true;
-              }}
-              onSelect={handleProviderSelect}
-            />
+          <Form.Item
+            name="provider"
+            label={
+              fieldChallengeType === CHALLENGE_TYPE_DNS01
+                ? t("workflow_node.apply.form.provider_dns01.label")
+                : fieldChallengeType === CHALLENGE_TYPE_HTTP01
+                  ? t("workflow_node.apply.form.provider_http01.label")
+                  : t("workflow_node.apply.form.provider.label")
+            }
+            rules={[formRule]}
+          >
+            {fieldChallengeType === CHALLENGE_TYPE_DNS01 ? (
+              <ACMEDns01ProviderSelect
+                placeholder={t("workflow_node.apply.form.provider_dns01.placeholder")}
+                showAvailability
+                showSearch
+                onSelect={handleProviderSelect}
+                onClear={handleProviderSelect}
+              />
+            ) : fieldChallengeType === CHALLENGE_TYPE_HTTP01 ? (
+              <ACMEHttp01ProviderSelect
+                placeholder={t("workflow_node.apply.form.provider_http01.placeholder")}
+                showAvailability
+                showSearch
+                onSelect={handleProviderSelect}
+                onClear={handleProviderSelect}
+              />
+            ) : (
+              <Select disabled placeholder={t("workflow_node.apply.form.provider.placeholder")} />
+            )}
           </Form.Item>
 
           <Form.Item
             className="relative"
-            label={t("workflow_node.apply.form.provider_access.label")}
-            tooltip={<span dangerouslySetInnerHTML={{ __html: t("workflow_node.apply.form.provider_access.tooltip") }}></span>}
+            hidden={!showProviderAccess}
+            label={
+              fieldChallengeType === CHALLENGE_TYPE_DNS01
+                ? t("workflow_node.apply.form.provider_access_dns01.label")
+                : fieldChallengeType === CHALLENGE_TYPE_HTTP01
+                  ? t("workflow_node.apply.form.provider_access_http01.label")
+                  : t("workflow_node.apply.form.provider_access.label")
+            }
           >
             <div className="absolute -top-[6px] right-0 -translate-y-full">
               <AccessEditDrawer
@@ -252,27 +392,27 @@ const BizApplyNodeConfigForm = ({ node, ...props }: BizApplyNodeConfigFormProps)
                     <IconPlus size="1.25em" />
                   </Button>
                 }
-                usage="dns"
+                usage={fieldChallengeType === CHALLENGE_TYPE_DNS01 ? "dns" : fieldChallengeType === CHALLENGE_TYPE_HTTP01 ? "hosting" : "dns-hosting"}
                 afterSubmit={(record) => {
-                  const provider = accessProvidersMap.get(record.provider);
-                  if (provider?.usages?.includes(ACCESS_USAGES.DNS)) {
-                    formInst.setFieldValue("providerAccessId", record.id);
-                    handleProviderAccessSelect(record.id);
-                  }
+                  if (!accessOptionFilter(record.provider, record)) return;
+                  if (fieldChallengeType === CHALLENGE_TYPE_DNS01 && acmeDns01ProvidersMap.get(fieldProvider!)?.provider !== record.provider) return;
+                  if (fieldChallengeType === CHALLENGE_TYPE_HTTP01 && acmeHttp01ProvidersMap.get(fieldProvider!)?.provider !== record.provider) return;
+                  formInst.setFieldValue("providerAccessId", record.id);
                 }}
               />
             </div>
             <Form.Item name="providerAccessId" rules={[formRule]} noStyle>
               <AccessSelect
-                placeholder={t("workflow_node.apply.form.provider_access.placeholder")}
+                disabled={!fieldProvider}
+                placeholder={
+                  fieldChallengeType === CHALLENGE_TYPE_DNS01
+                    ? t("workflow_node.apply.form.provider_access_dns01.placeholder")
+                    : fieldChallengeType === CHALLENGE_TYPE_HTTP01
+                      ? t("workflow_node.apply.form.provider_access_http01.placeholder")
+                      : t("workflow_node.apply.form.provider_access.placeholder")
+                }
                 showSearch
-                onChange={handleProviderAccessSelect}
-                onFilter={(_, option) => {
-                  if (option.reserve) return false;
-
-                  const provider = accessProvidersMap.get(option.provider);
-                  return !!provider?.usages?.includes(ACCESS_USAGES.DNS);
-                }}
+                onFilter={accessOptionFilter}
               />
             </Form.Item>
           </Form.Item>
@@ -334,24 +474,18 @@ const BizApplyNodeConfigForm = ({ node, ...props }: BizApplyNodeConfigFormProps)
                 }
                 usage="ca"
                 afterSubmit={(record) => {
-                  const provider = accessProvidersMap.get(record.provider);
-                  if (provider?.usages?.includes(ACCESS_USAGES.CA)) {
-                    formInst.setFieldValue("caProviderAccessId", record.id);
-                  }
+                  if (accessOptionFilterForCA(record.provider, record)) return;
+                  if (caProvidersMap.get(fieldProvider!)?.provider !== record.provider) return;
+                  formInst.setFieldValue("caProviderAccessId", record.id);
                 }}
               />
             </div>
             <Form.Item name="caProviderAccessId" noStyle rules={[formRule]}>
               <AccessSelect
+                disabled={!fieldCAProvider}
                 placeholder={t("workflow_node.apply.form.ca_provider_access.placeholder")}
                 showSearch
-                onFilter={(_, option) => {
-                  if (option.reserve !== "ca") return false;
-                  if (fieldCAProvider) return caProvidersMap.get(fieldCAProvider)?.provider === option.provider;
-
-                  const provider = accessProvidersMap.get(option.provider);
-                  return !!provider?.usages?.includes(ACCESS_USAGES.CA);
-                }}
+                onFilter={accessOptionFilterForCA}
               />
             </Form.Item>
           </Form.Item>
@@ -658,7 +792,7 @@ const InternalValidityLifetimeInput = memo(
 const getAnchorItems = ({ i18n = getI18n() }: { i18n?: ReturnType<typeof getI18n> }): Required<AnchorProps>["items"] => {
   const { t } = i18n;
 
-  return ["parameters", "certificate", "advanced", "strategy"].map((key) => ({
+  return ["parameters", "challenge", "certificate", "advanced", "strategy"].map((key) => ({
     key: key,
     title: t(`workflow_node.apply.form_anchor.${key}.tab`),
     href: "#" + key,
@@ -668,8 +802,7 @@ const getAnchorItems = ({ i18n = getI18n() }: { i18n?: ReturnType<typeof getI18n
 const getInitialValues = (): Nullish<z.infer<ReturnType<typeof getSchema>>> => {
   return {
     domains: "",
-    provider: "",
-    providerAccessId: "",
+    contactEmail: "",
     ...defaultNodeConfigForBizApply(),
   };
 };
@@ -679,16 +812,16 @@ const getSchema = ({ i18n = getI18n() }: { i18n?: ReturnType<typeof getI18n> })
 
   return z
     .object({
-      domains: z.string().refine((v) => {
+      domains: z.string(t("workflow_node.apply.form.domains.placeholder")).refine((v) => {
         if (!v) return false;
         return String(v)
           .split(MULTIPLE_INPUT_SEPARATOR)
           .every((e) => validDomainName(e, { allowWildcard: true }));
       }, t("common.errmsg.domain_invalid")),
       contactEmail: z.email(t("common.errmsg.email_invalid")),
-      challengeType: z.string().nonempty(t("workflow_node.apply.form.challenge_type.placeholder")),
+      challengeType: z.string(t("workflow_node.apply.form.challenge_type.placeholder")).nonempty(t("workflow_node.apply.form.challenge_type.placeholder")),
       provider: z.string(t("workflow_node.apply.form.provider.placeholder")).nonempty(t("workflow_node.apply.form.provider.placeholder")),
-      providerAccessId: z.string(t("workflow_node.apply.form.provider_access.placeholder")).nonempty(t("workflow_node.apply.form.provider_access.placeholder")),
+      providerAccessId: z.string(t("workflow_node.apply.form.provider_access.placeholder")).nullish(),
       providerConfig: z.any().nullish(),
       caProvider: z.string().nullish(),
       caProviderAccessId: z.string().nullish(),
@@ -743,6 +876,36 @@ const getSchema = ({ i18n = getI18n() }: { i18n?: ReturnType<typeof getI18n> })
       ),
     })
     .superRefine((values, ctx) => {
+      if (values.provider) {
+        switch (values.challengeType) {
+          case CHALLENGE_TYPE_DNS01:
+            {
+              const provider = acmeDns01ProvidersMap.get(values.provider);
+              if (!provider?.builtin && !values.providerAccessId) {
+                ctx.addIssue({
+                  code: "custom",
+                  message: t("workflow_node.deploy.form.provider_access.placeholder"),
+                  path: ["providerAccessId"],
+                });
+              }
+            }
+            break;
+
+          case CHALLENGE_TYPE_HTTP01:
+            {
+              const provider = acmeHttp01ProvidersMap.get(values.provider);
+              if (!provider?.builtin && !values.providerAccessId) {
+                ctx.addIssue({
+                  code: "custom",
+                  message: t("workflow_node.deploy.form.provider_access.placeholder"),
+                  path: ["providerAccessId"],
+                });
+              }
+            }
+            break;
+        }
+      }
+
       if (values.caProvider) {
         const provider = caProvidersMap.get(values.caProvider);
         if (!provider?.builtin && !values.caProviderAccessId) {

ui/src/components/workflow/designer/forms/BizDeployNodeConfigForm.tsx

@@ -12,7 +12,7 @@ import DeploymentProviderPicker from "@/components/provider/DeploymentProviderPi
 import DeploymentProviderSelect from "@/components/provider/DeploymentProviderSelect";
 import Show from "@/components/Show";
 import { type AccessModel } from "@/domain/access";
-import { ACCESS_USAGES, DEPLOYMENT_PROVIDERS, accessProvidersMap, deploymentProvidersMap } from "@/domain/provider";
+import { DEPLOYMENT_PROVIDERS, deploymentProvidersMap } from "@/domain/provider";
 import { type WorkflowNodeConfigForBizDeploy, defaultNodeConfigForBizDeploy } from "@/domain/workflow";
 import { useAntdForm, useZustandShallowSelector } from "@/hooks";
 import { useAccessesStore } from "@/stores/access";
@@ -480,7 +480,7 @@ const BizDeployNodeConfigForm = ({ node, ...props }: BizDeployNodeConfigFormProp
     if (fieldProvider && !fieldProviderAccessId) {
       const availableAccesses = accesses
         .filter((access) => accessOptionFilter(access.provider, access))
-        .filter((access) => access.provider === deploymentProvidersMap.get(fieldProvider)?.provider);
+        .filter((access) => deploymentProvidersMap.get(fieldProvider)?.provider === access.provider);
       if (availableAccesses.length === 1) {
         formInst.setFieldValue("providerAccessId", availableAccesses[0].id);
       }
@@ -489,13 +489,17 @@ const BizDeployNodeConfigForm = ({ node, ...props }: BizDeployNodeConfigFormProp
 
   const handleProviderPick = (value: string) => {
     formInst.setFieldValue("provider", value);
+    formInst.setFieldValue("providerAccessId", void 0);
+    formInst.setFieldValue("providerConfig", void 0);
   };
 
   const handleProviderSelect = (value?: string | undefined) => {
     // 切换部署目标时重置表单，避免其他部署目标的配置字段影响当前部署目标
     if (initialValues?.provider === value) {
+      formInst.setFieldValue("providerAccessId", void 0);
       formInst.resetFields(["providerConfig"]);
     } else {
+      formInst.setFieldValue("providerAccessId", void 0);
       formInst.setFieldValue("providerConfig", void 0);
     }
   };
@@ -557,12 +561,7 @@ const BizDeployNodeConfigForm = ({ node, ...props }: BizDeployNodeConfigFormProp
               />
             </Form.Item>
 
-            <Form.Item
-              className="relative"
-              hidden={!showProviderAccess}
-              label={t("workflow_node.deploy.form.provider_access.label")}
-              tooltip={<span dangerouslySetInnerHTML={{ __html: t("workflow_node.deploy.form.provider_access.tooltip") }}></span>}
-            >
+            <Form.Item className="relative" hidden={!showProviderAccess} label={t("workflow_node.deploy.form.provider_access.label")}>
               <div className="absolute -top-[6px] right-0 -translate-y-full">
                 <AccessEditDrawer
                   data={{ provider: deploymentProvidersMap.get(fieldProvider!)?.provider }}
@@ -575,15 +574,19 @@ const BizDeployNodeConfigForm = ({ node, ...props }: BizDeployNodeConfigFormProp
                   }
                   usage="hosting"
                   afterSubmit={(record) => {
-                    const provider = accessProvidersMap.get(record.provider);
-                    if (provider?.usages?.includes(ACCESS_USAGES.HOSTING)) {
-                      formInst.setFieldValue("providerAccessId", record.id);
-                    }
+                    if (!accessOptionFilter(record.provider, record)) return;
+                    if (deploymentProvidersMap.get(fieldProvider!)?.provider !== record.provider) return;
+                    formInst.setFieldValue("providerAccessId", record.id);
                   }}
                 />
               </div>
               <Form.Item name="providerAccessId" rules={[formRule]} noStyle>
-                <AccessSelect placeholder={t("workflow_node.deploy.form.provider_access.placeholder")} showSearch onFilter={accessOptionFilter} />
+                <AccessSelect
+                  disabled={!fieldProvider}
+                  placeholder={t("workflow_node.deploy.form.provider_access.placeholder")}
+                  showSearch
+                  onFilter={accessOptionFilter}
+                />
               </Form.Item>
             </Form.Item>
 

ui/src/components/workflow/designer/forms/BizMonitorNodeConfigForm.tsx

@@ -90,7 +90,7 @@ const getSchema = ({ i18n = getI18n() }: { i18n?: ReturnType<typeof getI18n> })
   const { t } = i18n;
 
   return z.object({
-    host: z.string().refine((v) => {
+    host: z.string(t("workflow_node.monitor.form.host.placeholder")).refine((v) => {
       return validDomainName(v) || validIPv4Address(v) || validIPv6Address(v);
     }, t("common.errmsg.host_invalid")),
     port: z.preprocess(

ui/src/components/workflow/designer/forms/BizNotifyNodeConfigForm.tsx

@@ -12,7 +12,7 @@ import NotificationProviderPicker from "@/components/provider/NotificationProvid
 import NotificationProviderSelect from "@/components/provider/NotificationProviderSelect";
 import Show from "@/components/Show";
 import { type AccessModel } from "@/domain/access";
-import { ACCESS_USAGES, NOTIFICATION_PROVIDERS, accessProvidersMap, notificationProvidersMap } from "@/domain/provider";
+import { NOTIFICATION_PROVIDERS, notificationProvidersMap } from "@/domain/provider";
 import { type WorkflowNodeConfigForBizNotify, defaultNodeConfigForBizNotify } from "@/domain/workflow";
 import { useAntdForm, useZustandShallowSelector } from "@/hooks";
 import { useAccessesStore } from "@/stores/access";
@@ -97,7 +97,7 @@ const BizNotifyNodeConfigForm = ({ node, ...props }: BizNotifyNodeConfigFormProp
     if (fieldProvider && !fieldProviderAccessId) {
       const availableAccesses = accesses
         .filter((access) => accessOptionFilter(access.provider, access))
-        .filter((access) => access.provider === notificationProvidersMap.get(fieldProvider)?.provider);
+        .filter((access) => notificationProvidersMap.get(fieldProvider)?.provider === access.provider);
       if (availableAccesses.length === 1) {
         formInst.setFieldValue("providerAccessId", availableAccesses[0].id);
       }
@@ -106,13 +106,17 @@ const BizNotifyNodeConfigForm = ({ node, ...props }: BizNotifyNodeConfigFormProp
 
   const handleProviderPick = (value: string) => {
     formInst.setFieldValue("provider", value);
+    formInst.setFieldValue("providerAccessId", void 0);
+    formInst.setFieldValue("providerConfig", void 0);
   };
 
   const handleProviderSelect = (value?: string | undefined) => {
     // 切换通知渠道时重置表单，避免其他通知渠道的配置字段影响当前通知渠道
     if (initialValues?.provider === value) {
+      formInst.setFieldValue("providerAccessId", void 0);
       formInst.resetFields(["providerConfig"]);
     } else {
+      formInst.setFieldValue("providerAccessId", void 0);
       formInst.setFieldValue("providerConfig", void 0);
     }
   };
@@ -163,6 +167,7 @@ const BizNotifyNodeConfigForm = ({ node, ...props }: BizNotifyNodeConfigFormProp
             <Form.Item label={t("workflow_node.notify.form.provider_access.label")}>
               <div className="absolute -top-[6px] right-0 -translate-y-full">
                 <AccessEditDrawer
+                  data={{ provider: notificationProvidersMap.get(fieldProvider!)?.provider }}
                   mode="create"
                   trigger={
                     <Button size="small" type="link">
@@ -172,15 +177,19 @@ const BizNotifyNodeConfigForm = ({ node, ...props }: BizNotifyNodeConfigFormProp
                   }
                   usage="notification"
                   afterSubmit={(record) => {
-                    const provider = accessProvidersMap.get(record.provider);
-                    if (provider?.usages?.includes(ACCESS_USAGES.NOTIFICATION)) {
-                      formInst.setFieldValue("providerAccessId", record.id);
-                    }
+                    if (!accessOptionFilter(record.provider, record)) return;
+                    if (notificationProvidersMap.get(fieldProvider!)?.provider !== record.provider) return;
+                    formInst.setFieldValue("providerAccessId", record.id);
                   }}
                 />
               </div>
               <Form.Item name="providerAccessId" noStyle rules={[formRule]}>
-                <AccessSelect placeholder={t("workflow_node.notify.form.provider_access.placeholder")} showSearch onFilter={accessOptionFilter} />
+                <AccessSelect
+                  disabled={!fieldProvider}
+                  placeholder={t("workflow_node.notify.form.provider_access.placeholder")}
+                  showSearch
+                  onFilter={accessOptionFilter}
+                />
               </Form.Item>
             </Form.Item>
 

ui/src/components/workflow/designer/forms/StartNodeConfigForm.tsx

@@ -134,7 +134,7 @@ const getSchema = ({ i18n = getI18n() }: { i18n?: ReturnType<typeof getI18n> })
 
   return z
     .object({
-      trigger: z.string().nonempty(t("workflow_node.start.form.trigger.placeholder")),
+      trigger: z.string(t("workflow_node.start.form.trigger.placeholder")).nonempty(t("workflow_node.start.form.trigger.placeholder")),
       triggerCron: z.string().nullish(),
     })
     .superRefine((values, ctx) => {

ui/src/components/workflow/designer/forms/_shared.tsx

@@ -31,7 +31,7 @@ export const NodeConfigDrawer = ({ children, afterClose, anchor, footer = true,
 
   const refresh = useRefresh();
 
-  const { modal, notification } = App.useApp();
+  const { message, modal, notification } = App.useApp();
 
   const [open, setOpen] = useControllableValue<boolean>(props, {
     valuePropName: "open",
@@ -84,6 +84,8 @@ export const NodeConfigDrawer = ({ children, afterClose, anchor, footer = true,
     try {
       await formInst.validateFields();
     } catch (err) {
+      message.warning(t("workflow.detail.design.drawer.errmsg.invalid_form"));
+
       setFormPending(false);
       throw err;
     }

ui/src/components/workflow/designer/nodes/BizApplyNodeRegistry.tsx

@@ -3,7 +3,7 @@ import { FeedbackLevel, Field } from "@flowgram.ai/fixed-layout-editor";
 import { IconContract } from "@tabler/icons-react";
 import { Avatar } from "antd";
 
-import { acmeDns01ProvidersMap } from "@/domain/provider";
+import { acmeDns01ProvidersMap, acmeHttp01ProvidersMap } from "@/domain/provider";
 import { newNode } from "@/domain/workflow";
 
 import { BaseNode } from "./_shared";
@@ -43,6 +43,12 @@ export const BizApplyNodeRegistry: NodeRegistry = {
     render: () => {
       const { t } = getI18n();
 
+      type MapValueType<M> = M extends Map<string, infer V> ? V : never;
+      const acmeProvidersMap = new Map<string, MapValueType<typeof acmeDns01ProvidersMap | typeof acmeHttp01ProvidersMap>>([
+        ...acmeDns01ProvidersMap,
+        ...acmeHttp01ProvidersMap,
+      ]);
+
       return (
         <BaseNode
           description={
@@ -53,7 +59,7 @@ export const BizApplyNodeRegistry: NodeRegistry = {
                 }}
               </Field>
               <Field<string> name="config.provider">
-                {({ field: { value } }) => (value ? <Avatar shape="square" src={acmeDns01ProvidersMap.get(value)?.icon} size={20} /> : <></>)}
+                {({ field: { value } }) => (value ? <Avatar shape="square" src={acmeProvidersMap.get(value)?.icon} size={20} /> : <></>)}
               </Field>
             </div>
           }

ui/src/domain/provider.ts

@@ -1,3 +1,14 @@
+interface BaseProvider<P> {
+  type: P;
+  name: string;
+  icon: string;
+  builtin: boolean;
+}
+
+interface BaseProviderWithAccess<P> extends BaseProvider<P> {
+  provider: AccessProviderType;
+}
+
 // #region AccessProvider
 /*
   注意：如果追加新的常量值，请保持以 ASCII 排序。
@@ -95,13 +106,9 @@ export const ACCESS_USAGES = Object.freeze({
 
 export type AccessUsageType = (typeof ACCESS_USAGES)[keyof typeof ACCESS_USAGES];
 
-export type AccessProvider = {
-  type: AccessProviderType;
-  name: string;
-  icon: string;
+export interface AccessProvider extends BaseProvider<AccessProviderType> {
   usages: AccessUsageType[];
-  builtin: boolean;
-};
+}
 
 export const accessProvidersMap: Map<AccessProvider["type"] | string, AccessProvider> = new Map(
   /*
@@ -224,13 +231,7 @@ export const CA_PROVIDERS = Object.freeze({
 
 export type CAProviderType = (typeof CA_PROVIDERS)[keyof typeof CA_PROVIDERS];
 
-export type CAProvider = {
-  type: CAProviderType;
-  name: string;
-  icon: string;
-  provider: AccessProviderType;
-  builtin: boolean;
-};
+export interface CAProvider extends BaseProviderWithAccess<CAProviderType> {}
 
 export const caProvidersMap: Map<CAProvider["type"] | string, CAProvider> = new Map(
   /*
@@ -320,12 +321,7 @@ export const ACME_DNS01_PROVIDERS = Object.freeze({
 
 export type ACMEDns01ProviderType = (typeof ACME_DNS01_PROVIDERS)[keyof typeof ACME_DNS01_PROVIDERS];
 
-export type ACMEDns01Provider = {
-  type: ACMEDns01ProviderType;
-  name: string;
-  icon: string;
-  provider: AccessProviderType;
-};
+export interface ACMEDns01Provider extends BaseProviderWithAccess<ACMEDns01ProviderType> {}
 
 export const acmeDns01ProvidersMap: Map<ACMEDns01Provider["type"] | string, ACMEDns01Provider> = new Map(
   /*
@@ -382,6 +378,44 @@ export const acmeDns01ProvidersMap: Map<ACMEDns01Provider["type"] | string, ACME
       name: name,
       icon: accessProvidersMap.get(type.split("-")[0])!.icon,
       provider: type.split("-")[0] as AccessProviderType,
+      builtin: false,
+    },
+  ])
+);
+// #endregion
+
+// #region ACMEHTTP01Provider
+/*
+  注意：如果追加新的常量值，请保持以 ASCII 排序。
+  NOTICE: If you add new constant, please keep ASCII order.
+ */
+export const ACME_HTTP01_PROVIDERS = Object.freeze({
+  LOCAL: `${ACCESS_PROVIDERS.LOCAL}`,
+  SSH: `${ACCESS_PROVIDERS.SSH}`,
+} as const);
+
+export type ACMEHttp01ProviderType = (typeof ACME_HTTP01_PROVIDERS)[keyof typeof ACME_HTTP01_PROVIDERS];
+
+export interface ACMEHttp01Provider extends BaseProviderWithAccess<ACMEHttp01ProviderType> {}
+
+export const acmeHttp01ProvidersMap: Map<ACMEHttp01Provider["type"] | string, ACMEHttp01Provider> = new Map(
+  /*
+    注意：此处的顺序决定显示在前端的顺序。
+    NOTICE: The following order determines the order displayed at the frontend.
+   */
+  (
+    [
+      [ACME_HTTP01_PROVIDERS.LOCAL, "provider.local", "builtin"],
+      [ACME_HTTP01_PROVIDERS.SSH, "provider.ssh"],
+    ] satisfies Array<[ACMEHttp01ProviderType, string, "builtin"] | [ACMEHttp01ProviderType, string]>
+  ).map(([type, name, builtin]) => [
+    type,
+    {
+      type: type,
+      name: name,
+      icon: accessProvidersMap.get(type.split("-")[0])!.icon,
+      provider: type.split("-")[0] as AccessProviderType,
+      builtin: builtin === "builtin",
     },
   ])
 );
@@ -514,14 +548,9 @@ export const DEPLOYMENT_CATEGORIES = Object.freeze({
 
 export type DeploymentCategoryType = (typeof DEPLOYMENT_CATEGORIES)[keyof typeof DEPLOYMENT_CATEGORIES];
 
-export type DeploymentProvider = {
-  type: DeploymentProviderType;
-  name: string;
-  icon: string;
-  provider: AccessProviderType;
+export interface DeploymentProvider extends BaseProviderWithAccess<DeploymentProviderType> {
   category: DeploymentCategoryType;
-  builtin: boolean;
-};
+}
 
 export const deploymentProvidersMap: Map<DeploymentProvider["type"] | string, DeploymentProvider> = new Map(
   /*
@@ -663,12 +692,7 @@ export const NOTIFICATION_PROVIDERS = Object.freeze({
 
 export type NotificationProviderType = (typeof NOTIFICATION_PROVIDERS)[keyof typeof NOTIFICATION_PROVIDERS];
 
-export type NotificationProvider = {
-  type: NotificationProviderType;
-  name: string;
-  icon: string;
-  provider: AccessProviderType;
-};
+export interface NotificationProvider extends BaseProviderWithAccess<NotificationProviderType> {}
 
 export const notificationProvidersMap: Map<NotificationProvider["type"] | string, NotificationProvider> = new Map(
   /*
@@ -694,6 +718,7 @@ export const notificationProvidersMap: Map<NotificationProvider["type"] | string
       name: accessProvidersMap.get(type.split("-")[0])!.name,
       icon: accessProvidersMap.get(type.split("-")[0])!.icon,
       provider: type.split("-")[0] as AccessProviderType,
+      builtin: false,
     },
   ])
 );

ui/src/domain/workflow.ts

@@ -114,7 +114,8 @@ export type WorkflowNodeConfigForBizApply = {
 
 export const defaultNodeConfigForBizApply = (): Partial<WorkflowNodeConfigForBizApply> => {
   return {
-    keyAlgorithm: "RSA2048",
+    challengeType: "dns-01" as const,
+    keyAlgorithm: "RSA2048" as const,
     skipBeforeExpiryDays: 30,
   };
 };

ui/src/i18n/locales/en/nls.workflow.json

@@ -76,6 +76,7 @@
   "workflow.detail.design.drawer.node_id.label": "Node ID: ",
   "workflow.detail.design.drawer.disabled.on.tooltip": "Disable",
   "workflow.detail.design.drawer.disabled.off.tooltip": "Enable",
+  "workflow.detail.design.drawer.errmsg.invalid_form": "Please check the form content",
   "workflow.detail.design.action.publish.button": "Publish",
   "workflow.detail.design.action.publish.modal.title": "Publish changes",
   "workflow.detail.design.action.publish.modal.content": "Are you sure to publish your changes?",

ui/src/i18n/locales/en/nls.workflow.nodes.json

@@ -22,6 +22,8 @@
   "workflow_node.apply.help": "Apply for SSL certificate issuance from the certificate authority.",
   "workflow_node.apply.default_name": "Application",
   "workflow_node.apply.form_anchor.parameters.tab": "Parameters",
+  "workflow_node.apply.form_anchor.challenge.tab": "Challenge",
+  "workflow_node.apply.form_anchor.challenge.title": "Challenge settings",
   "workflow_node.apply.form_anchor.certificate.tab": "Certificate",
   "workflow_node.apply.form_anchor.certificate.title": "Certificate settings",
   "workflow_node.apply.form_anchor.advanced.tab": "Advanced",
@@ -30,7 +32,8 @@
   "workflow_node.apply.form_anchor.strategy.title": "Strategy settings",
   "workflow_node.apply.form.domains.label": "Domains",
   "workflow_node.apply.form.domains.placeholder": "Please enter domains (separated by semicolons)",
-  "workflow_node.apply.form.domains.help": "Notes: Multi-domains should be separated by semicolons. Wildcard domain should be written as *.example.com.",
+  "workflow_node.apply.form.domains.help": "Notes: Multi-domains should be separated by semicolons. Wildcard domain should be written as <em>*.example.com</em>.",
+  "workflow_node.apply.form.domains.help_no_wildcard": "Notes: Multi-domains should be separated by semicolons.",
   "workflow_node.apply.form.domains.multiple_input_modal.title": "Change domains",
   "workflow_node.apply.form.domains.multiple_input_modal.placeholder": "Please enter domain",
   "workflow_node.apply.form.contact_email.label": "Contact email",
@@ -38,12 +41,20 @@
   "workflow_node.apply.form.contact_email.tooltip": "Contact information required for SSL certificate application. Please pay attention to the <a href=\"https://letsencrypt.org/docs/rate-limits/\" target=\"_blank\">rate limits</a>.",
   "workflow_node.apply.form.challenge_type.label": "Challenge type",
   "workflow_node.apply.form.challenge_type.placeholder": "Please select challenge type",
-  "workflow_node.apply.form.provider.label": "DNS provider",
-  "workflow_node.apply.form.provider.placeholder": "Please select DNS provider of the domains",
-  "workflow_node.apply.form.provider_access.label": "DNS provider credential",
-  "workflow_node.apply.form.provider_access.placeholder": "Please select an credential of DNS provider",
-  "workflow_node.apply.form.provider_access.tooltip": "Used to manage DNS records automated during ACME DNS-01 challenge.",
+  "workflow_node.apply.form.challenge_type.tooltip": "For more information, see <a href=\"https://letsencrypt.org/docs/challenge-types/\" target=\"_blank\">https://letsencrypt.org/docs/challenge-types/</a>",
+  "workflow_node.apply.form.provider.label": "Provider",
+  "workflow_node.apply.form.provider.placeholder": "Please select provider",
+  "workflow_node.apply.form.provider_dns01.label": "DNS provider",
+  "workflow_node.apply.form.provider_dns01.placeholder": "Please select the DNS provider of the domains",
+  "workflow_node.apply.form.provider_http01.label": "Hosting provider",
+  "workflow_node.apply.form.provider_http01.placeholder": "Please select the hosting provider of the domains",
+  "workflow_node.apply.form.provider_access.label": "Provider credential",
+  "workflow_node.apply.form.provider_access.placeholder": "Please select an credential of provider",
   "workflow_node.apply.form.provider_access.button": "Create",
+  "workflow_node.apply.form.provider_access_dns01.label": "DNS provider credential",
+  "workflow_node.apply.form.provider_access_dns01.placeholder": "Please select an credential of DNS provider",
+  "workflow_node.apply.form.provider_access_http01.label": "Hosting provider credential",
+  "workflow_node.apply.form.provider_access_http01.placeholder": "Please select an credential of hosting provider",
   "workflow_node.apply.form.aliyun_esa_region.label": "Alibaba Cloud ESA region",
   "workflow_node.apply.form.aliyun_esa_region.placeholder": "Please enter Alibaba Cloud ESA region (e.g. cn-hangzhou)",
   "workflow_node.apply.form.aliyun_esa_region.tooltip": "For more information, see <a href=\"https://www.alibabacloud.com/help/en/edge-security-acceleration/esa/api-esa-2024-09-10-endpoint\" target=\"_blank\">https://www.alibabacloud.com/help/en/edge-security-acceleration/esa/api-esa-2024-09-10-endpoint</a>",
@@ -59,6 +70,12 @@
   "workflow_node.apply.form.jdcloud_dns_region_id.label": "JD Cloud DNS region ID",
   "workflow_node.apply.form.jdcloud_dns_region_id.placeholder": "Please enter JD Cloud DNS region ID (e.g. cn-north-1)",
   "workflow_node.apply.form.jdcloud_dns_region_id.tooltip": "For more information, see <a href=\"https://docs.jdcloud.com/en/common-declaration/api/introduction\" target=\"_blank\">https://docs.jdcloud.com/en/common-declaration/api/introduction</a>",
+  "workflow_node.apply.form.local_webroot_path.label": "Web root path",
+  "workflow_node.apply.form.local_webroot_path.placeholder": "Please enter web root path",
+  "workflow_node.apply.form.local_webroot_path.tooltip": "It's the main directory where the website's files are stored on the server.",
+  "workflow_node.apply.form.ssh_webroot_path.label": "Web root path",
+  "workflow_node.apply.form.ssh_webroot_path.placeholder": "Please enter web root path",
+  "workflow_node.apply.form.ssh_webroot_path.tooltip": "It's the main directory where the website's files are stored on the server.",
   "workflow_node.apply.form.tencentcloud_eo_zone_id.label": "Tencent Cloud EdgeOne zone ID",
   "workflow_node.apply.form.tencentcloud_eo_zone_id.placeholder": "Please enter Tencent Cloud EdgeOne zone ID",
   "workflow_node.apply.form.tencentcloud_eo_zone_id.tooltip": "For more information, see <a href=\"https://console.tencentcloud.com/edgeone\" target=\"_blank\">https://console.tencentcloud.com/edgeone</a>",
@@ -151,8 +168,7 @@
   "workflow_node.deploy.form.provider.placeholder": "Please select deployment target",
   "workflow_node.deploy.form.provider.search.placeholder": "Search deployment target ...",
   "workflow_node.deploy.form.provider_access.label": "Hosting provider credential",
-  "workflow_node.deploy.form.provider_access.placeholder": "Please select an credential of Hosting provider",
-  "workflow_node.deploy.form.provider_access.tooltip": "Used to invoke API during deployment.",
+  "workflow_node.deploy.form.provider_access.placeholder": "Please select an credential of hosting provider",
   "workflow_node.deploy.form.provider_access.button": "Create",
   "workflow_node.deploy.form.1panel_console_auto_restart.label": "Auto restart 1Panel after deployment",
   "workflow_node.deploy.form.1panel_site_node_name.label": "1Panel node name (Optional)",

ui/src/i18n/locales/zh/nls.workflow.json

@@ -76,6 +76,7 @@
   "workflow.detail.design.drawer.node_id.label": "节点 ID：",
   "workflow.detail.design.drawer.disabled.on.tooltip": "禁用",
   "workflow.detail.design.drawer.disabled.off.tooltip": "启用",
+  "workflow.detail.design.drawer.errmsg.invalid_form": "请检查表单内容",
   "workflow.detail.design.action.publish.button": "发布更改",
   "workflow.detail.design.action.publish.modal.title": "发布更改",
   "workflow.detail.design.action.publish.modal.content": "确定要发布更改吗？",

ui/src/i18n/locales/zh/nls.workflow.nodes.json

@@ -22,6 +22,8 @@
   "workflow_node.apply.help": "从证书颁发机构申请签发 SSL 证书。",
   "workflow_node.apply.default_name": "申请",
   "workflow_node.apply.form_anchor.parameters.tab": "参数设置",
+  "workflow_node.apply.form_anchor.challenge.tab": "验证质询",
+  "workflow_node.apply.form_anchor.challenge.title": "验证质询",
   "workflow_node.apply.form_anchor.certificate.tab": "证书设置",
   "workflow_node.apply.form_anchor.certificate.title": "证书设置",
   "workflow_node.apply.form_anchor.advanced.tab": "高级设置",
@@ -30,7 +32,8 @@
   "workflow_node.apply.form_anchor.strategy.title": "执行策略",
   "workflow_node.apply.form.domains.label": "域名",
   "workflow_node.apply.form.domains.placeholder": "请输入域名（多个值请用半角分号隔开）",
-  "workflow_node.apply.form.domains.help": "提示：多域名请用半角分号隔开；泛域名表示形式为 *.example.com。",
+  "workflow_node.apply.form.domains.help": "提示：多域名请用半角分号隔开；泛域名表示形式为 <em>*.example.com</em>。",
+  "workflow_node.apply.form.domains.help_no_wildcard": "提示：多域名请用半角分号隔开。",
   "workflow_node.apply.form.domains.multiple_input_modal.title": "修改域名",
   "workflow_node.apply.form.domains.multiple_input_modal.placeholder": "请输入域名",
   "workflow_node.apply.form.contact_email.label": "联系邮箱",
@@ -38,12 +41,20 @@
   "workflow_node.apply.form.contact_email.tooltip": "申请签发 SSL 证书时所需的联系方式。请注意 Let's Encrypt 账户注册的速率限制。<a href=\"https://letsencrypt.org/zh-cn/docs/rate-limits/\" target=\"_blank\">点此了解更多</a>。",
   "workflow_node.apply.form.challenge_type.label": "质询方式",
   "workflow_node.apply.form.challenge_type.placeholder": "请选择质询方式",
-  "workflow_node.apply.form.provider.label": "DNS 提供商",
-  "workflow_node.apply.form.provider.placeholder": "请选择 DNS 提供商",
-  "workflow_node.apply.form.provider_access.label": "DNS 提供商授权",
-  "workflow_node.apply.form.provider_access.placeholder": "请选择 DNS 提供商授权",
-  "workflow_node.apply.form.provider_access.tooltip": "用于 ACME DNS-01 质询时自动化操作域名解析记录，注意与部署阶段所需的主机提供商相区分。",
+  "workflow_node.apply.form.challenge_type.tooltip": "这是什么？请参阅 <a href=\"https://letsencrypt.org/zh-cn/docs/challenge-types/\" target=\"_blank\">https://letsencrypt.org/zh-cn/docs/challenge-types/</a>",
+  "workflow_node.apply.form.provider.label": "提供商",
+  "workflow_node.apply.form.provider.placeholder": "请选择提供商",
+  "workflow_node.apply.form.provider_dns01.label": "DNS 提供商",
+  "workflow_node.apply.form.provider_dns01.placeholder": "请选择 DNS 提供商",
+  "workflow_node.apply.form.provider_http01.label": "主机提供商",
+  "workflow_node.apply.form.provider_http01.placeholder": "请选择主机提供商",
+  "workflow_node.apply.form.provider_access.label": "提供商授权",
+  "workflow_node.apply.form.provider_access.placeholder": "请选择提供商授权",
   "workflow_node.apply.form.provider_access.button": "新建",
+  "workflow_node.apply.form.provider_access_dns01.label": "DNS 提供商授权",
+  "workflow_node.apply.form.provider_access_dns01.placeholder": "请选择 DNS 提供商授权",
+  "workflow_node.apply.form.provider_access_http01.label": "主机提供商授权",
+  "workflow_node.apply.form.provider_access_http01.placeholder": "请选择主机提供商授权",
   "workflow_node.apply.form.aliyun_esa_region.label": "阿里云 ESA 服务地域",
   "workflow_node.apply.form.aliyun_esa_region.placeholder": "请输入阿里云 ESA 服务地域（例如：cn-hangzhou）",
   "workflow_node.apply.form.aliyun_esa_region.tooltip": "这是什么？请参阅 <a href=\"https://help.aliyun.com/zh/edge-security-acceleration/esa/api-esa-2024-09-10-endpoint\" target=\"_blank\">https://help.aliyun.com/zh/edge-security-acceleration/esa/api-esa-2024-09-10-endpoint</a>",
@@ -59,6 +70,12 @@
   "workflow_node.apply.form.jdcloud_dns_region_id.label": "京东云 DNS 服务地域 ID",
   "workflow_node.apply.form.jdcloud_dns_region_id.placeholder": "请输入京东云 DNS 服务地域 ID（例如：cn-north-1）",
   "workflow_node.apply.form.jdcloud_dns_region_id.tooltip": "这是什么？请参阅 <a href=\"https://docs.jdcloud.com/cn/common-declaration/api/introduction\" target=\"_blank\">https://docs.jdcloud.com/cn/common-declaration/api/introduction</a>",
+  "workflow_node.apply.form.local_webroot_path.label": "网站根目录",
+  "workflow_node.apply.form.local_webroot_path.placeholder": "请输入网站根目录",
+  "workflow_node.apply.form.local_webroot_path.tooltip": "即服务器上存储网站文件的主文件夹。",
+  "workflow_node.apply.form.ssh_webroot_path.label": "网站根目录",
+  "workflow_node.apply.form.ssh_webroot_path.placeholder": "请输入网站根目录",
+  "workflow_node.apply.form.ssh_webroot_path.tooltip": "即服务器上存储网站文件的主文件夹。",
   "workflow_node.apply.form.tencentcloud_eo_zone_id.label": "腾讯云 EdgeOne 站点 ID",
   "workflow_node.apply.form.tencentcloud_eo_zone_id.placeholder": "请输入腾讯云 EdgeOne 站点 ID",
   "workflow_node.apply.form.tencentcloud_eo_zone_id.tooltip": "这是什么？请参阅 <a href=\"https://console.cloud.tencent.com/edgeone\" target=\"_blank\">https://console.cloud.tencent.com/edgeone</a>",
@@ -151,7 +168,6 @@
   "workflow_node.deploy.form.provider.search.placeholder": "搜索部署目标……",
   "workflow_node.deploy.form.provider_access.label": "主机提供商授权",
   "workflow_node.deploy.form.provider_access.placeholder": "请选择主机提供商授权",
-  "workflow_node.deploy.form.provider_access.tooltip": "用于部署证书时调用相关 API，注意与申请阶段所需的 DNS 提供商相区分。",
   "workflow_node.deploy.form.provider_access.button": "新建",
   "workflow_node.deploy.form.1panel_console_auto_restart.label": "部署后自动重启 1Panel 服务",
   "workflow_node.deploy.form.1panel_site_node_name.label": "1Panel 子节点名称（可选）",