coa-wx-isv
Version:
一个轻量的微信SDK服务商版 for Node.js
91 lines (90 loc) • 3.31 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.WxIsvSecurityService = void 0;
const coa_echo_1 = require("coa-echo");
const coa_error_1 = require("coa-error");
const coa_xml_1 = require("coa-xml");
const crypto = require("crypto");
const WxIsvServiceBase_1 = require("../libs/WxIsvServiceBase");
class WxIsvSecurityService extends WxIsvServiceBase_1.WxIsvServiceBase {
// 解密
async decrypt(encryptedData) {
const key = this.config.appToken;
const iv = key.substr(0, 16);
let result = {};
try {
const decipher = crypto.createDecipheriv('aes-256-cbc', key, iv);
// 设置自动 padding 为 true，删除填充补位
decipher.setAutoPadding(true);
let decoded = decipher.update(encryptedData, 'base64', 'utf8');
try {
decoded += decipher.final('utf8');
}
catch (e) {
// do nothing
}
decoded = decoded.replace(/[\s\S]*(<xml>[\s\S]*<\/xml>)[\s\S]*/, '$1');
result = await coa_xml_1.xml.decode(decoded);
}
catch (e) {
coa_error_1.die.error('微信解密失败');
}
return result;
}
// 解密
decryptData(encryptedData, iv, sessionKey) {
// base64 decode
const bSessionKey = Buffer.from(sessionKey, 'base64');
const bEncryptedData = Buffer.from(encryptedData, 'base64');
const bIv = Buffer.from(iv, 'base64');
try {
const decipher = crypto.createDecipheriv('aes-128-cbc', bSessionKey, bIv);
// 设置自动 padding 为 true，删除填充补位
decipher.setAutoPadding(true);
let decoded = decipher.update(bEncryptedData, undefined, 'utf8');
decoded += decipher.final('utf8');
decoded = JSON.parse(decoded);
return decoded;
}
catch (err) {
coa_echo_1.echo.error(err);
coa_error_1.die.hint('解密错误');
}
}
/**
* 文本内容安全识别
* 详见 https://developers.weixin.qq.com/miniprogram/dev/OpenApiDoc/sec-center/sec-check/msgSecCheck.html
*/
async msgSecCheck(accessToken, content, version = 2, scene, //1 资料；2 评论；3 论坛；4 社交日志
openid, title, nickname, signature) {
return await this.request('POST', '/wxa/msg_sec_check', {
content,
version,
scene,
openid,
title,
nickname,
signature
}, {
access_token: accessToken
});
}
/**
* 多媒体内容安全识别
* 详见 https://developers.weixin.qq.com/miniprogram/dev/OpenApiDoc/sec-center/sec-check/mediaCheckAsync.html
*/
async mediaCheckAsync(accessToken, media_url, media_type, // 1: 图片, 2: 音频
version = 2, scene, //1 资料；2 评论；3 论坛；4 社交日志
openid) {
return await this.request('POST', '/wxa/media_check_async', {
media_url,
media_type,
version,
scene,
openid,
}, {
access_token: accessToken
});
}
}
exports.WxIsvSecurityService = WxIsvSecurityService;