From 4042011345c0d1a693c343a70c3145d31a6e8d97 Mon Sep 17 00:00:00 2001
From: ila <2+ila@noreply.git.ilapage.cn>
Date: Thu, 13 Aug 2026 12:23:48 +0800
Subject: [PATCH] feat: complete split camera credentials (#50)

---
 .../app/sense/device/credential_port.go       | 39 +++++++++++++++++++
 1 file changed, 39 insertions(+)

diff --git a/Sense/server/app/sense/device/credential_port.go b/Sense/server/app/sense/device/credential_port.go
index aee2741..4068672 100644
--- a/Sense/server/app/sense/device/credential_port.go
+++ b/Sense/server/app/sense/device/credential_port.go
@@ -16,6 +16,9 @@ var activeService atomic.Pointer[Service]
 // ReadCredential is an internal adapter port. Credentials must never be
 // returned from HTTP handlers, logged, or placed in a URL.
 func ReadCredential(ctx context.Context, id string) (Credential, error) {
+	return ReadONVIFCredential(ctx, id)
+}
+func ReadONVIFCredential(ctx context.Context, id string) (Credential, error) {
 	service := activeService.Load()
 	if service == nil {
 		return Credential{}, fmt.Errorf("device service is not ready")
@@ -30,3 +33,39 @@ func ReadCredential(ctx context.Context, id string) (Credential, error) {
 	username, password, err := service.vault.Decrypt(item.CredentialCiphertext)
 	return Credential{Username: username, Password: password}, err
 }
+
+func ReadRTSPCredential(ctx context.Context, id string) (Credential, error) {
+	service := activeService.Load()
+	if service == nil {
+		return Credential{}, fmt.Errorf("device service is not ready")
+	}
+	item, err := service.store.Get(ctx, id)
+	if err != nil {
+		return Credential{}, err
+	}
+	if len(item.RTSPCredentialCiphertext) == 0 {
+		return Credential{}, fmt.Errorf("RTSP credential is not configured")
+	}
+	username, password, err := service.vault.Decrypt(item.RTSPCredentialCiphertext)
+	return Credential{Username: username, Password: password}, err
+}
+
+func MarkActive(ctx context.Context, id string) error {
+	service := activeService.Load()
+	if service == nil {
+		return fmt.Errorf("device service is not ready")
+	}
+	item, err := service.store.Get(ctx, id)
+	if err != nil {
+		return err
+	}
+	if item.Status == StatusDisabled || item.Status == StatusActive {
+		return nil
+	}
+	expected := item.Version
+	item.Status = StatusActive
+	item.Version++
+	item.UpdatedAt = service.now().UTC()
+	return service.store.Update(ctx, item, expected)
+}
+