正在显示
10 个修改的文件
包含
643 行增加
和
0 行删除
.gitignore
0 → 100644
DingTalkEncryptException.js
0 → 100644
1 | +'use strict'; | |
2 | + | |
3 | +class DingTalkEncryptException { | |
4 | + constructor(code) { | |
5 | + // super(); | |
6 | + this.msgMap = new Map([ | |
7 | + [ 0, '成功' ], | |
8 | + [ 900001, '加密明文文本非法' ], | |
9 | + [ 900002, '加密时间戳参数非法' ], | |
10 | + [ 900003, '加密随机字符串参数非法' ], | |
11 | + [ 900005, '签名不匹配' ], | |
12 | + [ 900006, '签名计算失败' ], | |
13 | + [ 900004, '不合法的 encodingAesKey' ], | |
14 | + [ 900007, '计算加密文字错误' ], | |
15 | + [ 900008, '计算解密文字错误' ], | |
16 | + [ 900009, '计算解密文字长度不匹配' ], | |
17 | + [ 900010, '计算解密文字corpid不匹配' ], | |
18 | + ]); | |
19 | + this.code = code; | |
20 | + this.message = this.msgMap.get(code); | |
21 | + } | |
22 | + | |
23 | + toString(){ | |
24 | + return `DingTalkEncryptException: [${this.code}], ${this.message}\n`; | |
25 | + } | |
26 | +} | |
27 | + | |
28 | +module.exports = DingTalkEncryptException; | ... | ... |
DingTalkEncryptor.js
0 → 100644
1 | +/* eslint-disable no-bitwise */ | |
2 | +'use strict'; | |
3 | + | |
4 | +const CryptoJS = require("crypto-js"); | |
5 | +const Crypto = require('crypto'); | |
6 | +const DingTalkEncryptException = require('./DingTalkEncryptException'); | |
7 | + | |
8 | +class DingTalkEncryptor { | |
9 | + constructor(token, encodingAesKey, corpIdOrSuiteKey) { | |
10 | + this.utf8 = 'utf-8'; | |
11 | + this.base64 = 'base64'; | |
12 | + this.AES_ENCODE_KEY_LENGTH = 43; | |
13 | + this.RANDOM_LENGTH = 16; | |
14 | + | |
15 | + this.token = token; | |
16 | + this.encodingAesKey = encodingAesKey; | |
17 | + this.aesKey = CryptoJS.enc.Base64.parse(encodingAesKey+'='); | |
18 | + this.corpId = corpIdOrSuiteKey; | |
19 | + this.keySpec = this.aesKey; | |
20 | + this.iv = CryptoJS.enc.Base64.parse((encodingAesKey+'=').substring(0,22)); | |
21 | + } | |
22 | + | |
23 | + // verify encodingAesKey | |
24 | + set encodingAesKey(val) { | |
25 | + if (!val || val.length !== this.AES_ENCODE_KEY_LENGTH) { | |
26 | + throw new DingTalkEncryptException(900004); | |
27 | + } | |
28 | + } | |
29 | + | |
30 | + encrypt(random, plainText) { | |
31 | + try { | |
32 | + const randomBuf = Buffer.from(random); | |
33 | + const plainTextBuf = Buffer.from(plainText); | |
34 | + const textLen = plainTextBuf.length; | |
35 | + const textLenBuf = Buffer.from([(textLen >> 24 & 255), (textLen >> 16 & 255), (textLen >> 8 & 255), (textLen & 255)]); | |
36 | + const cropIdBuf = Buffer.from(this.corpId); | |
37 | + const padCount = 32 - (randomBuf.length + textLenBuf.length + plainTextBuf.length + cropIdBuf.length) % 32; | |
38 | + const padBuf = Buffer.from(new Array(padCount).fill(padCount)); | |
39 | + const finalBuf = Buffer.concat([randomBuf, textLenBuf, plainTextBuf, cropIdBuf, padBuf]); | |
40 | + console.log("randomBuf@@@",randomBuf.toString('utf-8')) | |
41 | + console.log("plainTextBuf@@@",plainTextBuf.toString('utf-8')) | |
42 | + console.log("textLenBuf@@@",textLen,textLenBuf.toString('hex')) | |
43 | + console.log("cropIdBuf@@@",cropIdBuf.toString('utf-8')) | |
44 | + console.log("padCount@@@",padCount ) | |
45 | + console.log("padBuf@@@",padBuf) | |
46 | + console.log("finalBuf@@@",finalBuf.toString('hex')) | |
47 | + | |
48 | + const encrypted = CryptoJS.AES.encrypt(finalBuf.toString('hex'), this.keySpec, { | |
49 | + iv: this.iv, | |
50 | + mode: CryptoJS.mode.CBC, | |
51 | + padding:CryptoJS.pad.Pkcs7 | |
52 | + }); | |
53 | + return encrypted.toString(CryptoJS.enc.Base64); | |
54 | + } catch (e) { | |
55 | + console.log(e) | |
56 | + throw new DingTalkEncryptException(900007); | |
57 | + } | |
58 | + } | |
59 | + | |
60 | + decrypt(encrypted) { | |
61 | + let decrypt; | |
62 | + try { | |
63 | + // decrypt | |
64 | + const ciphertext = CryptoJS.enc.Base64.parse(encrypted); | |
65 | + decrypt = CryptoJS.AES.decrypt( {ciphertext}, this.keySpec, { | |
66 | + iv: this.iv, | |
67 | + mode: CryptoJS.mode.CBC, | |
68 | + padding:CryptoJS.pad.Pkcs7 | |
69 | + }); | |
70 | + } catch (e) { | |
71 | + throw new DingTalkEncryptException(900008); | |
72 | + } | |
73 | + //encrypt = Base64_Encode(AES_Encrypt[random(16B) + msg_len(4B) + msg + $key]) 钉钉加密消息格式 | |
74 | + let cropId; | |
75 | + let plainText; | |
76 | + try { | |
77 | + | |
78 | + const finalDecrypt = decrypt.toString(CryptoJS.enc.Hex); | |
79 | + const textLen = parseInt(finalDecrypt.substring(32,8+32), 16) ; | |
80 | + plainText = CryptoJS.enc.Hex.parse(finalDecrypt.substring(40, 40 + textLen*2)).toString( CryptoJS.enc.Utf8); | |
81 | + cropId = CryptoJS.enc.Hex.parse(finalDecrypt.substring(40 + textLen*2)).toString(CryptoJS.enc.Utf8); | |
82 | + | |
83 | + } catch (e) { | |
84 | + throw new DingTalkEncryptException(900009); | |
85 | + } | |
86 | + | |
87 | + if (cropId != this.corpId) { | |
88 | + console.log(cropId, this.corpId) | |
89 | + throw new DingTalkEncryptException(900010); | |
90 | + } else { | |
91 | + return plainText; | |
92 | + } | |
93 | + } | |
94 | + | |
95 | + getSignature(token, timestamp, nonce, encrypt) { | |
96 | + timestamp = timestamp + ''; | |
97 | + const strArr = [token, timestamp, nonce, encrypt]; | |
98 | + strArr.sort(); | |
99 | + const sha1 = CryptoJS.SHA1(strArr.join('')); | |
100 | + return sha1.toString(CryptoJS.enc.Hex); | |
101 | + } | |
102 | + | |
103 | + getEncryptedMap(plaintext, timeStamp, nonce) { | |
104 | + timeStamp = timeStamp + ''; | |
105 | + if (plaintext == null) { | |
106 | + throw new DingTalkEncryptException(900001); | |
107 | + } else if (timeStamp == null) { | |
108 | + throw new DingTalkEncryptException(900002); | |
109 | + } else if (nonce == null) { | |
110 | + throw new DingTalkEncryptException(900003); | |
111 | + } else { | |
112 | + const encrypt = this.encrypt(this.getRandomStr(this.RANDOM_LENGTH), plaintext); | |
113 | + const signature = this.getSignature(this.token, timeStamp, nonce, encrypt); | |
114 | + return { | |
115 | + msg_signature: signature, | |
116 | + encrypt: encrypt, | |
117 | + timeStamp: timeStamp, | |
118 | + nonce: nonce | |
119 | + }; | |
120 | + } | |
121 | + } | |
122 | + | |
123 | + getDecryptMsg(msgSignature, timeStamp, nonce, encryptMsg) { | |
124 | + const signature = this.getSignature(this.token, timeStamp, nonce, encryptMsg); | |
125 | + if (signature !== msgSignature) { | |
126 | + throw new DingTalkEncryptException(900006); | |
127 | + } else { | |
128 | + return this.decrypt(encryptMsg); | |
129 | + } | |
130 | + } | |
131 | + | |
132 | + getRandomStr(size) { | |
133 | + const base = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'; | |
134 | + let randomStr = ''; | |
135 | + for (let i = size; i > 0; --i) { | |
136 | + randomStr += base[Math.floor(Math.random() * base.length)]; | |
137 | + } | |
138 | + return randomStr; | |
139 | + }; | |
140 | +} | |
141 | + | |
142 | +module.exports = DingTalkEncryptor; | ... | ... |
EncryptTest.js
0 → 100644
1 | +'use strict'; | |
2 | + | |
3 | +const DingTalkEncryptor = require('./DingTalkEncryptor'); | |
4 | +const utils = require('./Utils'); | |
5 | + | |
6 | + | |
7 | +// const DingTalkEncryptException = require('./DingTalkEncryptException'); | |
8 | + | |
9 | +/** 加解密需要,可以随机填写。如 "12345" */ | |
10 | +const TOKEN = 'OUOdEgcMFxNDqoiADrf'; | |
11 | +/** 加密密钥,用于回调数据的加密,固定为43个字符,从[a-z, A-Z, 0-9]共62个字符中随机生成*/ | |
12 | +// const ENCODING_AES_KEY = 'TXpRMU5qYzRPVEF4TWpNME5UWTNPRGt3TVRJek5EVTI'; | |
13 | +// const ENCODING_AES_KEY = utils.getRandomStr(43); | |
14 | +const ENCODING_AES_KEY = 'FRArTXHBSiMuyPjOjk4RqhOLuQ54d75A6PyYbFrShJy'; | |
15 | +// console.log('ENCODING_AES_KEY:\n' + ENCODING_AES_KEY); | |
16 | +// let buffer = Buffer.from(ENCODING_AES_KEY + '=', 'base64'); | |
17 | +// const base64Str = buffer.toString('base64'); | |
18 | +// console.log(":::::ZZ",buffer.length,base64Str.length,base64Str,(Buffer.from(ENCODING_AES_KEY + '=', 'base64'))); | |
19 | +/** 企业corpid, 可以在钉钉企业管理后台查看(https://oa.dingtalk.com/) */ | |
20 | +// const CORP_ID = 'ding12345678901234567890123456789012'; | |
21 | +const CORP_ID ='dingkuvhxslusd5hkjem'; | |
22 | +/** 实例化加密类 */ | |
23 | +// console.log('\nEncryptor Test:'); | |
24 | +const encryptor = new DingTalkEncryptor(TOKEN, ENCODING_AES_KEY, CORP_ID); | |
25 | + | |
26 | +// const plainText = 'success'; | |
27 | +const ENCRYPT_RANDOM_16 = 'aaaabbbbccccdddd'; | |
28 | +// const timeStamp = (new Date().getTime()).toString(); | |
29 | +// const nonce = utils.getRandomStr(8); | |
30 | +const timeStamp = '1648014018742'; | |
31 | +const nonce = 'AU1FFNAK'; | |
32 | + | |
33 | +/** 测试加解密响应报文或者字符串 */ | |
34 | +// const testJson = { | |
35 | +// EventType: 'bpms_instance_change', | |
36 | +// processInstanceId: 'ad253df6-e175caf-68085c60ba8a', | |
37 | +// corpId: 'ding2c4d8175651', | |
38 | +// createTime: 1495592259000, | |
39 | +// title: '自测-1016', | |
40 | +// type: 'start', | |
41 | +// staffId: 'er5875', | |
42 | +// url: 'https://aflow.dingtalk.com/dingtalk/mobile/homepage.htm', | |
43 | +// processCode: 'xxx', | |
44 | +// }; | |
45 | +// const testJson = '中文乱码测试/abc/123dddd'; | |
46 | + | |
47 | +// // console.log(JSON.parse(JSON.stringify(testJson))); | |
48 | +const unencryptedJson = 'success'; | |
49 | +// const unencryptedJson = JSON.stringify(testJson); | |
50 | +// console.log(` node unencryptedJson:\n ${unencryptedJson}`); | |
51 | +// const encryptedJson = encryptor.encrypt(ENCRYPT_RANDOM_16, unencryptedJson); | |
52 | +// console.log(` \nnode encryptedJson:\n ${encryptedJson}`); | |
53 | +// const decryptedJson = encryptor.decrypt(encryptedJson); | |
54 | +// console.log(` \nnode decryptedJson:\n ${decryptedJson}, (${decryptedJson.length})`); | |
55 | +// console.log(' \nnode sign:\n ' + encryptor.getSignature(TOKEN, timeStamp, nonce, encryptedJson)); | |
56 | +const signature = '99011aff26fe6eea2aea3b9f1c17620483e8495d'; | |
57 | +const encryptMsg = 'kKCIt2zJ1xPfCex1h3d4ZULhLvXi3RBbht1GxAsYK/Y9iZcw06P20xGTq8Lb9bskrd7fypdzcqo0GHvk+9zLonIXPFNKRTRkswZaH+t1A5683FoDYlXOsBRgpCsjSljo'; | |
58 | + | |
59 | +const plainText = encryptor.getDecryptMsg(signature, timeStamp, nonce, encryptMsg) | |
60 | + | |
61 | + | |
62 | +console.log("plainText::",plainText) | |
63 | + | |
64 | +const result = encryptor.getEncryptedMap(unencryptedJson, timeStamp, utils.getRandomStr(8)); | |
65 | + | |
66 | + | |
67 | +console.log("result::",result) | |
\ No newline at end of file | ... | ... |
LICENSE
0 → 100644
1 | + Apache License | |
2 | + Version 2.0, January 2004 | |
3 | + http://www.apache.org/licenses/ | |
4 | + | |
5 | + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION | |
6 | + | |
7 | + 1. Definitions. | |
8 | + | |
9 | + "License" shall mean the terms and conditions for use, reproduction, | |
10 | + and distribution as defined by Sections 1 through 9 of this document. | |
11 | + | |
12 | + "Licensor" shall mean the copyright owner or entity authorized by | |
13 | + the copyright owner that is granting the License. | |
14 | + | |
15 | + "Legal Entity" shall mean the union of the acting entity and all | |
16 | + other entities that control, are controlled by, or are under common | |
17 | + control with that entity. For the purposes of this definition, | |
18 | + "control" means (i) the power, direct or indirect, to cause the | |
19 | + direction or management of such entity, whether by contract or | |
20 | + otherwise, or (ii) ownership of fifty percent (50%) or more of the | |
21 | + outstanding shares, or (iii) beneficial ownership of such entity. | |
22 | + | |
23 | + "You" (or "Your") shall mean an individual or Legal Entity | |
24 | + exercising permissions granted by this License. | |
25 | + | |
26 | + "Source" form shall mean the preferred form for making modifications, | |
27 | + including but not limited to software source code, documentation | |
28 | + source, and configuration files. | |
29 | + | |
30 | + "Object" form shall mean any form resulting from mechanical | |
31 | + transformation or translation of a Source form, including but | |
32 | + not limited to compiled object code, generated documentation, | |
33 | + and conversions to other media types. | |
34 | + | |
35 | + "Work" shall mean the work of authorship, whether in Source or | |
36 | + Object form, made available under the License, as indicated by a | |
37 | + copyright notice that is included in or attached to the work | |
38 | + (an example is provided in the Appendix below). | |
39 | + | |
40 | + "Derivative Works" shall mean any work, whether in Source or Object | |
41 | + form, that is based on (or derived from) the Work and for which the | |
42 | + editorial revisions, annotations, elaborations, or other modifications | |
43 | + represent, as a whole, an original work of authorship. For the purposes | |
44 | + of this License, Derivative Works shall not include works that remain | |
45 | + separable from, or merely link (or bind by name) to the interfaces of, | |
46 | + the Work and Derivative Works thereof. | |
47 | + | |
48 | + "Contribution" shall mean any work of authorship, including | |
49 | + the original version of the Work and any modifications or additions | |
50 | + to that Work or Derivative Works thereof, that is intentionally | |
51 | + submitted to Licensor for inclusion in the Work by the copyright owner | |
52 | + or by an individual or Legal Entity authorized to submit on behalf of | |
53 | + the copyright owner. For the purposes of this definition, "submitted" | |
54 | + means any form of electronic, verbal, or written communication sent | |
55 | + to the Licensor or its representatives, including but not limited to | |
56 | + communication on electronic mailing lists, source code control systems, | |
57 | + and issue tracking systems that are managed by, or on behalf of, the | |
58 | + Licensor for the purpose of discussing and improving the Work, but | |
59 | + excluding communication that is conspicuously marked or otherwise | |
60 | + designated in writing by the copyright owner as "Not a Contribution." | |
61 | + | |
62 | + "Contributor" shall mean Licensor and any individual or Legal Entity | |
63 | + on behalf of whom a Contribution has been received by Licensor and | |
64 | + subsequently incorporated within the Work. | |
65 | + | |
66 | + 2. Grant of Copyright License. Subject to the terms and conditions of | |
67 | + this License, each Contributor hereby grants to You a perpetual, | |
68 | + worldwide, non-exclusive, no-charge, royalty-free, irrevocable | |
69 | + copyright license to reproduce, prepare Derivative Works of, | |
70 | + publicly display, publicly perform, sublicense, and distribute the | |
71 | + Work and such Derivative Works in Source or Object form. | |
72 | + | |
73 | + 3. Grant of Patent License. Subject to the terms and conditions of | |
74 | + this License, each Contributor hereby grants to You a perpetual, | |
75 | + worldwide, non-exclusive, no-charge, royalty-free, irrevocable | |
76 | + (except as stated in this section) patent license to make, have made, | |
77 | + use, offer to sell, sell, import, and otherwise transfer the Work, | |
78 | + where such license applies only to those patent claims licensable | |
79 | + by such Contributor that are necessarily infringed by their | |
80 | + Contribution(s) alone or by combination of their Contribution(s) | |
81 | + with the Work to which such Contribution(s) was submitted. If You | |
82 | + institute patent litigation against any entity (including a | |
83 | + cross-claim or counterclaim in a lawsuit) alleging that the Work | |
84 | + or a Contribution incorporated within the Work constitutes direct | |
85 | + or contributory patent infringement, then any patent licenses | |
86 | + granted to You under this License for that Work shall terminate | |
87 | + as of the date such litigation is filed. | |
88 | + | |
89 | + 4. Redistribution. You may reproduce and distribute copies of the | |
90 | + Work or Derivative Works thereof in any medium, with or without | |
91 | + modifications, and in Source or Object form, provided that You | |
92 | + meet the following conditions: | |
93 | + | |
94 | + (a) You must give any other recipients of the Work or | |
95 | + Derivative Works a copy of this License; and | |
96 | + | |
97 | + (b) You must cause any modified files to carry prominent notices | |
98 | + stating that You changed the files; and | |
99 | + | |
100 | + (c) You must retain, in the Source form of any Derivative Works | |
101 | + that You distribute, all copyright, patent, trademark, and | |
102 | + attribution notices from the Source form of the Work, | |
103 | + excluding those notices that do not pertain to any part of | |
104 | + the Derivative Works; and | |
105 | + | |
106 | + (d) If the Work includes a "NOTICE" text file as part of its | |
107 | + distribution, then any Derivative Works that You distribute must | |
108 | + include a readable copy of the attribution notices contained | |
109 | + within such NOTICE file, excluding those notices that do not | |
110 | + pertain to any part of the Derivative Works, in at least one | |
111 | + of the following places: within a NOTICE text file distributed | |
112 | + as part of the Derivative Works; within the Source form or | |
113 | + documentation, if provided along with the Derivative Works; or, | |
114 | + within a display generated by the Derivative Works, if and | |
115 | + wherever such third-party notices normally appear. The contents | |
116 | + of the NOTICE file are for informational purposes only and | |
117 | + do not modify the License. You may add Your own attribution | |
118 | + notices within Derivative Works that You distribute, alongside | |
119 | + or as an addendum to the NOTICE text from the Work, provided | |
120 | + that such additional attribution notices cannot be construed | |
121 | + as modifying the License. | |
122 | + | |
123 | + You may add Your own copyright statement to Your modifications and | |
124 | + may provide additional or different license terms and conditions | |
125 | + for use, reproduction, or distribution of Your modifications, or | |
126 | + for any such Derivative Works as a whole, provided Your use, | |
127 | + reproduction, and distribution of the Work otherwise complies with | |
128 | + the conditions stated in this License. | |
129 | + | |
130 | + 5. Submission of Contributions. Unless You explicitly state otherwise, | |
131 | + any Contribution intentionally submitted for inclusion in the Work | |
132 | + by You to the Licensor shall be under the terms and conditions of | |
133 | + this License, without any additional terms or conditions. | |
134 | + Notwithstanding the above, nothing herein shall supersede or modify | |
135 | + the terms of any separate license agreement you may have executed | |
136 | + with Licensor regarding such Contributions. | |
137 | + | |
138 | + 6. Trademarks. This License does not grant permission to use the trade | |
139 | + names, trademarks, service marks, or product names of the Licensor, | |
140 | + except as required for reasonable and customary use in describing the | |
141 | + origin of the Work and reproducing the content of the NOTICE file. | |
142 | + | |
143 | + 7. Disclaimer of Warranty. Unless required by applicable law or | |
144 | + agreed to in writing, Licensor provides the Work (and each | |
145 | + Contributor provides its Contributions) on an "AS IS" BASIS, | |
146 | + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or | |
147 | + implied, including, without limitation, any warranties or conditions | |
148 | + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A | |
149 | + PARTICULAR PURPOSE. You are solely responsible for determining the | |
150 | + appropriateness of using or redistributing the Work and assume any | |
151 | + risks associated with Your exercise of permissions under this License. | |
152 | + | |
153 | + 8. Limitation of Liability. In no event and under no legal theory, | |
154 | + whether in tort (including negligence), contract, or otherwise, | |
155 | + unless required by applicable law (such as deliberate and grossly | |
156 | + negligent acts) or agreed to in writing, shall any Contributor be | |
157 | + liable to You for damages, including any direct, indirect, special, | |
158 | + incidental, or consequential damages of any character arising as a | |
159 | + result of this License or out of the use or inability to use the | |
160 | + Work (including but not limited to damages for loss of goodwill, | |
161 | + work stoppage, computer failure or malfunction, or any and all | |
162 | + other commercial damages or losses), even if such Contributor | |
163 | + has been advised of the possibility of such damages. | |
164 | + | |
165 | + 9. Accepting Warranty or Additional Liability. While redistributing | |
166 | + the Work or Derivative Works thereof, You may choose to offer, | |
167 | + and charge a fee for, acceptance of support, warranty, indemnity, | |
168 | + or other liability obligations and/or rights consistent with this | |
169 | + License. However, in accepting such obligations, You may act only | |
170 | + on Your own behalf and on Your sole responsibility, not on behalf | |
171 | + of any other Contributor, and only if You agree to indemnify, | |
172 | + defend, and hold each Contributor harmless for any liability | |
173 | + incurred by, or claims asserted against, such Contributor by reason | |
174 | + of your accepting any such warranty or additional liability. | |
175 | + | |
176 | + END OF TERMS AND CONDITIONS | |
177 | + | |
178 | + APPENDIX: How to apply the Apache License to your work. | |
179 | + | |
180 | + To apply the Apache License to your work, attach the following | |
181 | + boilerplate notice, with the fields enclosed by brackets "[]" | |
182 | + replaced with your own identifying information. (Don't include | |
183 | + the brackets!) The text should be enclosed in the appropriate | |
184 | + comment syntax for the file format. We also recommend that a | |
185 | + file or class name and description of purpose be included on the | |
186 | + same "printed page" as the copyright notice for easier | |
187 | + identification within third-party archives. | |
188 | + | |
189 | + Copyright [yyyy] [name of copyright owner] | |
190 | + | |
191 | + Licensed under the Apache License, Version 2.0 (the "License"); | |
192 | + you may not use this file except in compliance with the License. | |
193 | + You may obtain a copy of the License at | |
194 | + | |
195 | + http://www.apache.org/licenses/LICENSE-2.0 | |
196 | + | |
197 | + Unless required by applicable law or agreed to in writing, software | |
198 | + distributed under the License is distributed on an "AS IS" BASIS, | |
199 | + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
200 | + See the License for the specific language governing permissions and | |
201 | + limitations under the License. | ... | ... |
README.md
0 → 100644
1 | +# dingtalk-encrypt | |
2 | +DingTalk Encrypt Node Version. | |
3 | +Refer to [Java version](https://github.com/opendingtalk/eapp-corp-project.git): | |
4 | + | |
5 | +**Issues:** It's your turn! | |
6 | + | |
7 | +# Usage | |
8 | +## this repository | |
9 | +- git clone | |
10 | +- npm install | |
11 | +- run 'EncryptTest.js' for main APIs. | |
12 | + | |
13 | +## npm module | |
14 | +- npm install --save dingtalk-encrypt | |
15 | +- use APIs as follows API Doc. | |
16 | + | |
17 | +# API Doc | |
18 | +- Need constants: | |
19 | +> TOKEN - Random string for signature, unrestricted, such as "123456". | |
20 | + ENCODING_AES_KEY - Secret key for callback data, random 43 characters of [a-z, A-Z, 0-9]. | |
21 | + CORP_ID - DingTalk corpId from the [Official OA](https://oa.dingtalk.com). | |
22 | + | |
23 | +- Main APIs([Usage Example](https://open-doc.dingtalk.com/microapp/serverapi2/lo5n6i)): | |
24 | + - getEncryptedMap | |
25 | + - getDecryptMsg | |
26 | + - getSignature | |
27 | + - encrypt | |
28 | + - decrypt | |
29 | + | |
30 | +- Example | |
31 | + - 处理钉钉回调 | |
32 | + ``` | |
33 | + // 参考:钉钉开发文档-业务事件回调 | |
34 | + const DingTalkEncryptor = require('dingtalk-encrypt'); | |
35 | + const utils = require('dingtalk-encrypt/Utils'); | |
36 | + /** 加解密需要,可以随机填写。如 "12345" */ | |
37 | + const TOKEN = '666666'; | |
38 | + /** 加密密钥,用于回调数据的加密,固定为43个字符,从[a-z, A-Z, 0-9]共62个字符中随机生成*/ | |
39 | + const ENCODING_AES_KEY = 'TXpRMU5qYzRPVEF4TWpNME5UWTNPRGt3TVRJek5EVTI'; | |
40 | + // const ENCODING_AES_KEY = utils.getRandomStr(43); | |
41 | + /** 企业corpid, 可以在钉钉企业管理后台查看(https://oa.dingtalk.com/) */ | |
42 | + const CORP_ID = 'ding12345678901234567890123456789012'; | |
43 | + /** 实例化加密类 */ | |
44 | + console.log('\nEncryptor Test:'); | |
45 | + const encryptor = new DingTalkEncryptor(TOKEN, ENCODING_AES_KEY, CORP_ID); | |
46 | + | |
47 | + // 解密钉钉回调数据 | |
48 | + const plainText = encryptor.getDecryptMsg(signature, timestamp, nonce, encryptMsg); | |
49 | + console.log('DEBUG plainText: ' + plainText); | |
50 | + const obj = JSON.parse(plainText); | |
51 | + // 回调事件类型,根据事件类型和业务数据处理相应业务 | |
52 | + const eventType = obj.EventType; | |
53 | + // 响应数据:加密'success',签名等等 | |
54 | + encryptor.getEncryptedMap('success', timestamp, utils.getRandomStr(8)); | |
55 | + ``` | |
56 | + - 单独使用加/解密 | |
57 | + ``` | |
58 | + /** 测试加解密响应报文或者字符串 */ | |
59 | + const testJson = { | |
60 | + EventType: 'bpms_instance_change', | |
61 | + processInstanceId: 'ad253df6-e175caf-68085c60ba8a', | |
62 | + corpId: 'ding2c4d8175651', | |
63 | + createTime: 1495592259000, | |
64 | + title: '自测-1016', | |
65 | + type: 'start', | |
66 | + staffId: 'er5875', | |
67 | + url: 'https://aflow.dingtalk.com/dingtalk/mobile/homepage.htm', | |
68 | + processCode: 'xxx', | |
69 | + }; | |
70 | + // console.log(JSON.parse(JSON.stringify(testJson))); | |
71 | + // const unencryptedJson = 'success'; | |
72 | + const unencryptedJson = JSON.stringify(testJson); | |
73 | + console.log(` node unencryptedJson:\n ${unencryptedJson}`); | |
74 | + const encryptedJson = encryptor.encrypt(ENCRYPT_RANDOM_16, unencryptedJson); | |
75 | + console.log(` \nnode encryptedJson:\n ${encryptedJson}`); | |
76 | + const decryptedJson = encryptor.decrypt(encryptedJson); | |
77 | + console.log(` \nnode decryptedJson:\n ${decryptedJson}, (${decryptedJson.length})`); | |
78 | + console.log(' \nnode sign:\n ' + encryptor.getSignature(TOKEN, timeStamp, nonce, encryptedJson)); | |
79 | + | |
80 | + ``` | |
81 | + | |
82 | +# Thanks To | |
83 | +- [Authors of crypto-js](https://github.com/brix/crypto-js) | |
84 | +- [Authors of eapp-corp-project](https://github.com/opendingtalk/eapp-corp-project) | ... | ... |
Utils.js
0 → 100644
1 | +'use strict'; | |
2 | + | |
3 | +const int2Bytes = function(count) { | |
4 | + const byteArr = [ (count >> 24 & 255), (count >> 16 & 255), (count >> 8 & 255), (count & 255) ]; | |
5 | + // console.log(`debug int2Bytes: ${count} -> ${byteArr}`); | |
6 | + return byteArr; | |
7 | +}; | |
8 | +const bytes2int = function(byteArr) { | |
9 | + let count = 0; | |
10 | + for (let i = 0; i < 4; ++i) { | |
11 | + count <<= 8; | |
12 | + count |= byteArr[i] & 255; | |
13 | + } | |
14 | + // console.log(`debug bytes2int: ${byteArr} -> ${count}`); | |
15 | + return count; | |
16 | +}; | |
17 | + | |
18 | +// https://stackoverflow.com/questions/3195865/converting-byte-array-to-string-in-javascript | |
19 | +const string2Bin = function(str) { | |
20 | + const binaryArr = []; | |
21 | + for (let i = 0; i < str.length; i++) { | |
22 | + binaryArr.push(str.charCodeAt(i)); | |
23 | + } | |
24 | + // console.log(`debug string2Bin: ${str} -> ${binaryArr}`); | |
25 | + return binaryArr; | |
26 | +}; | |
27 | +const bin2String = function(array) { | |
28 | + const str = String.fromCharCode.apply(String, array); | |
29 | + // console.log(`debug bin2String: ${array} -> ${str}`); | |
30 | + return str; | |
31 | +}; | |
32 | + | |
33 | +const getRandomStr = function(size) { | |
34 | + const base = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'; | |
35 | + let randomStr = ''; | |
36 | + for (let i = size; i > 0; --i) { | |
37 | + randomStr += base[Math.floor(Math.random() * base.length)]; | |
38 | + } | |
39 | + return randomStr; | |
40 | +}; | |
41 | + | |
42 | +module.exports = { | |
43 | + int2Bytes, | |
44 | + bytes2int, | |
45 | + string2Bin, | |
46 | + bin2String, | |
47 | + getRandomStr, | |
48 | +}; | |
\ No newline at end of file | ... | ... |
index.js
0 → 100644
package.json
0 → 100644
1 | +{ | |
2 | + "name": "dingtalk-encrypt", | |
3 | + "version": "2.0.0", | |
4 | + "description": "dingTalk Encrypt Nodejs Version.", | |
5 | + "main": "index.js", | |
6 | + "scripts": { | |
7 | + "test": "echo \"Error: no test specified\" && exit 1" | |
8 | + }, | |
9 | + "keywords": [ | |
10 | + "nodejs", | |
11 | + "dingtalk", | |
12 | + "crypto", | |
13 | + "encrypt", | |
14 | + "decrypt" | |
15 | + ], | |
16 | + "author": "senique,zhubg520", | |
17 | + "license": "Apache-2.0", | |
18 | + "homepage": "http://gitlab.workai.com.cn/fanwh/dingtalk-encrypt", | |
19 | + "dependencies": { | |
20 | + "crypto-js": "^4.1.1" | |
21 | + } | |
22 | +} | ... | ... |
tryResult.js
0 → 100644
1 | +/* | |
2 | +* 可以 | |
3 | +*/ | |
4 | +http://www.mytju.com/classcode/tools/encode_utf8.asp | |
5 | +https://www.qqxiuzi.cn/bianma/Unicode-UTF.php | |
6 | +https://www.qqxiuzi.cn/bianma/base64.htm | |
7 | + | |
8 | +'TXpRMU5qYzRPVEF4TWpNME5UWTNPRGt3TVRJek5EVTI' | |
9 | + | |
10 | +Buffer.from(ENCODING_AES_KEY + '=', 'base64') | |
11 | + | |
12 | +4d 7a 51 31 4e 6a 63 34 4f 54 41 78 4d 6a 4d 30 4e 54 59 33 4f 44 6b 77 4d 54 49 7a 4e 44 55 32 Unicode编码16进制 | |
13 | + | |
14 | +4d7a51314e6a63344f5441784d6a4d304e5459334f446b774d54497a4e445532 | |
15 | + | |
16 | +MzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2 UTF8编码 | |
17 | + | |
18 | + | |
19 | +/* | |
20 | +* 随机 | |
21 | +*/ | |
22 | + | |
23 | +'Q2fHd7jP6f9P20HWFsGmTm8V56srrPVTpvw3q1ESSfv' | |
24 | + | |
25 | +43 67 c7 77 b8 cf e9 ff 4f db 41 d6 16 c1 a6 4e 6f 15 e7 ab 2b ac f5 53 a6 fc 37 ab 51 12 49 fb | |
26 | + | |
27 | +4367c777b8cfe9ff4fdb41d616c1a64e6f15e7ab2bacf553a6fc37ab511249fb | |
\ No newline at end of file | ... | ... |
请
注册
或
登录
后发表评论