IoTClientTool自动升级机制：从设计到实现的完整指南

{
  "version": "2.1.0",               // 语义化版本号
  "downloadUrl": "https://cdn.iotclienttool.com/updates/2.1.0/IoTClientTool-Setup.exe", // CDN地址
  "releaseNotes": "- 新增Modbus TCP批量读写功能\n- 修复MQTT断线重连bug\n- 优化UI响应速度", // 发布说明
  "sha256Hash": "a1b2c3d4e5f6...",  // 包的SHA256哈希（验证完整性）
  "signature": "xyz...",             // 数字签名（验证合法性）
  "releaseDate": "2024-05-20"       // 发布日期
}

// 版本元数据模型
public class VersionInfo
{
    public string Version { get; set; }
    public string DownloadUrl { get; set; }
    public string ReleaseNotes { get; set; }
    public string Sha256Hash { get; set; }
    public string Signature { get; set; } // 数字签名（后续章节讲解）
}
 
// 升级API控制器
[ApiController]
[Route("api/updates")]
public class UpdateController : ControllerBase
{
    // 模拟从配置文件读取版本信息（实际可从数据库获取）
    private readonly VersionInfo _latestVersion = new()
    {
        Version = "2.1.0",
        DownloadUrl = "https://cdn.iotclienttool.com/updates/2.1.0/IoTClientTool-Setup.exe",
        ReleaseNotes = "- 新增Modbus TCP批量读写功能\n- 修复MQTT断线重连bug",
        Sha256Hash = "a1b2c3d4e5f6...",
        Signature = "xyz..."
    };
 
    [HttpGet("latest")]
    public IActionResult GetLatestVersion() => Ok(_latestVersion);
 
    [HttpGet("download/{version}")]
    public IActionResult DownloadPackage(string version)
    {
        // 根据版本号返回对应的安装包（实际从CDN获取）
        var packagePath = Path.Combine("D:\\updates", version, "IoTClientTool-Setup.exe");
        return PhysicalFile(packagePath, "application/octet-stream");
    }
}

using System;
using System.IO;
using System.Net.Http;
using System.Reflection;
using System.Windows.Forms;
using System.Security.Cryptography;
 
public class Updater
{
    private const string UpdateApiUrl = "https://api.iotclienttool.com/api/updates/latest";
    private readonly string _currentVersion = Assembly.GetExecutingAssembly().GetName().Version.ToString();
 
    // 检查更新（可在工具启动时或用户点击"检查更新"时调用）
    public async Task CheckForUpdatesAsync()
    {
        try
        {
            using var client = new HttpClient();
            var latestVersion = await client.GetFromJsonAsync<VersionInfo>(UpdateApiUrl);
 
            // 语义化版本比较
            if (new Version(latestVersion.Version) > new Version(_currentVersion))
            {
                // 弹出更新提示框
                var result = MessageBox.Show(
                    $"发现新版本 {latestVersion.Version}！\n{latestVersion.ReleaseNotes}\n是否立即升级？",
                    "更新提示", MessageBoxButtons.YesNo, MessageBoxIcon.Information);
 
                if (result == DialogResult.Yes)
                {
                    await DownloadAndInstallAsync(latestVersion);
                }
            }
            else
            {
                MessageBox.Show("当前已是最新版本！", "提示", MessageBoxButtons.OK);
            }
        }
        catch (Exception ex)
        {
            MessageBox.Show($"检查更新失败：{ex.Message}", "错误", MessageBoxButtons.OK, MessageBoxIcon.Error);
        }
    }
 
    // 下载并安装更新包
    private async Task DownloadAndInstallAsync(VersionInfo info)
    {
        var tempPath = Path.Combine(Path.GetTempPath(), $"IoTClientTool-{info.Version}.exe");
 
        try
        {
            // 1. 断点续传下载
            await DownloadWithResumeAsync(info.DownloadUrl, tempPath);
 
            // 2. 验证包完整性（SHA256哈希）
            if (!VerifyHash(tempPath, info.Sha256Hash))
            {
                MessageBox.Show("更新包损坏，请重试！", "错误", MessageBoxButtons.OK, MessageBoxIcon.Error);
                File.Delete(tempPath);
                return;
            }
 
            // 3. 验证数字签名（后续章节讲解）
            if (!VerifySignature(tempPath, info.Signature))
            {
                MessageBox.Show("更新包未通过签名验证，可能被篡改！", "错误", MessageBoxButtons.OK, MessageBoxIcon.Error);
                File.Delete(tempPath);
                return;
            }
 
            // 4. 执行静默安装（以Inno Setup为例，参数/SILENT表示静默）
            var process = new ProcessStartInfo
            {
                FileName = tempPath,
                Arguments = "/SILENT",
                Verb = "runas" // 管理员权限（若安装需要修改Program Files目录）
            };
            Process.Start(process);
 
            // 5. 关闭旧版本
            Application.Exit();
        }
        catch (Exception ex)
        {
            MessageBox.Show($"安装失败：{ex.Message}", "错误", MessageBoxButtons.OK, MessageBoxIcon.Error);
            File.Delete(tempPath);
        }
    }
 
    // 断点续传下载（使用HTTP Range头）
    private async Task DownloadWithResumeAsync(string url, string tempPath)
    {
        using var client = new HttpClient();
        var request = new HttpRequestMessage(HttpMethod.Get, url);
 
        // 若文件已存在，请求从已下载的位置继续
        if (File.Exists(tempPath))
        {
            var fileLength = new FileInfo(tempPath).Length;
            request.Headers.Range = new RangeHeaderValue(fileLength, null);
        }
 
        using var response = await client.SendAsync(request, HttpCompletionOption.ResponseHeadersRead);
        response.EnsureSuccessStatusCode();
 
        // 写入文件（追加模式）
        using var stream = await response.Content.ReadAsStreamAsync();
        using var fileStream = new FileStream(tempPath, FileMode.Append);
        await stream.CopyToAsync(fileStream);
    }
 
    // 验证SHA256哈希
    private bool VerifyHash(string filePath, string expectedHash)
    {
        using var sha256 = SHA256.Create();
        using var stream = File.OpenRead(filePath);
        var hashBytes = sha256.ComputeHash(stream);
        var actualHash = BitConverter.ToString(hashBytes).Replace("-", "").ToLower();
        return actualHash == expectedHash.ToLower();
    }
 
    // 验证数字签名（需提前嵌入公钥到客户端）
    private bool VerifySignature(string filePath, string signature)
    {
        // 示例：使用RSA验证签名（实际需替换为你的公钥）
        var publicKey = "<你的RSA公钥>";
        using var rsa = RSA.Create();
        rsa.FromXmlString(publicKey);
 
        var signatureBytes = Convert.FromBase64String(signature);
        var fileBytes = File.ReadAllBytes(filePath);
 
        return rsa.VerifyData(
            fileBytes,
            signatureBytes,
            HashAlgorithmName.SHA256,
            RSASignaturePadding.Pkcs1);
    }
}