feat:新增JS-SDK使用权限签名

credential/work_js_ticket.go

@@ -0,0 +1,85 @@
+package credential
+
+import (
+	"encoding/json"
+	"fmt"
+	"sync"
+	"time"
+
+	"github.com/silenceper/wechat/v2/cache"
+	"github.com/silenceper/wechat/v2/util"
+)
+
+//获取ticket的url  https://developer.work.weixin.qq.com/document/path/90506
+const getQyWxTicketURL = "https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=%s"
+const getQyAppTicketURL = "https://qyapi.weixin.qq.com/cgi-bin/ticket/get?access_token=%s&type=agent_config"
+
+//WorkJsTicket 默认获取js ticket方法
+type WorkJsTicket struct {
+	appID          string
+	agentID        string
+	cacheKeyPrefix string
+	cache          cache.Cache
+	//jsAPITicket 读写锁 同一个AppID一个
+	jsAPITicketLock *sync.Mutex
+}
+
+//NewWorkJsTicket new
+func NewWorkJsTicket(appID string, agentID string, cacheKeyPrefix string, cache cache.Cache) JsTicketHandle {
+	return &WorkJsTicket{
+		appID:           appID,
+		agentID:         agentID,
+		cache:           cache,
+		cacheKeyPrefix:  cacheKeyPrefix,
+		jsAPITicketLock: new(sync.Mutex),
+	}
+}
+
+//GetTicket 获取企业微信jsapi_ticket
+func (js *WorkJsTicket) GetTicket(accessToken string) (ticketStr string, err error) {
+	//先从cache中取
+	jsAPITicketCacheKey := fmt.Sprintf("%s_jsapi_ticket_%s", js.cacheKeyPrefix, js.appID)
+	if val := js.cache.Get(jsAPITicketCacheKey); val != nil {
+		return val.(string), nil
+	}
+
+	js.jsAPITicketLock.Lock()
+	defer js.jsAPITicketLock.Unlock()
+
+	// 双检，防止重复从微信服务器获取
+	if val := js.cache.Get(jsAPITicketCacheKey); val != nil {
+		return val.(string), nil
+	}
+
+	var ticket ResTicket
+	ticket, err = GetQyWxTicketFromServer(accessToken, js.agentID != "")
+	if err != nil {
+		return
+	}
+	expires := ticket.ExpiresIn - 1500
+	err = js.cache.Set(jsAPITicketCacheKey, ticket.Ticket, time.Duration(expires)*time.Second)
+	ticketStr = ticket.Ticket
+	return
+}
+
+//GetQyWxTicketFromServer 从企业微信服务器中获取ticket
+func GetQyWxTicketFromServer(accessToken string, isApp bool) (ticket ResTicket, err error) {
+	var response []byte
+	url := fmt.Sprintf(getQyWxTicketURL, accessToken)
+	if isApp {
+		url = fmt.Sprintf(getQyAppTicketURL, accessToken)
+	}
+	response, err = util.HTTPGet(url)
+	if err != nil {
+		return
+	}
+	err = json.Unmarshal(response, &ticket)
+	if err != nil {
+		return
+	}
+	if ticket.ErrCode != 0 {
+		err = fmt.Errorf("getTicket Error : errcode=%d , errmsg=%s", ticket.ErrCode, ticket.ErrMsg)
+		return
+	}
+	return
+}

miniprogram/encryptor/encryptor.go

@@ -7,8 +7,8 @@
 	"encoding/json"
 	"errors"
 	"fmt"
-
 	"github.com/silenceper/wechat/v2/miniprogram/context"
+	"strings"
 )
 
 // Encryptor struct
@@ -108,13 +108,23 @@
 }
 
 // Decrypt 解密数据
-func (encryptor *Encryptor) Decrypt(sessionKey, encryptedData, iv string) (*PlainData, error) {
+func (encryptor *Encryptor) Decrypt(sessionKey, encryptedData, appid string) (*PlainData, error) {
+	ivB := make([]byte, 16)
+	iv := base64.StdEncoding.EncodeToString(ivB)
 	cipherText, err := GetCipherText(sessionKey, encryptedData, iv)
 	if err != nil {
 		return nil, err
 	}
+	length := string(cipherText[:20])
+
+	cipherTextData := strings.TrimPrefix(string(cipherText), string(cipherText[:20]))
+	cipherTextData = strings.TrimSuffix(cipherTextData, appid)
+
+	if len(length) != len(cipherTextData) {
+		return nil, fmt.Errorf("length not match, %d != %d", length, len(cipherTextData))
+	}
 	var plainData PlainData
-	err = json.Unmarshal(cipherText, &plainData)
+	err = json.Unmarshal([]byte(cipherTextData), &plainData)
 	if err != nil {
 		return nil, err
 	}

util/signature.go

@@ -1,6 +1,7 @@
 package util
 
 import (
+	"bytes"
 	"crypto/sha1"
 	"fmt"
 	"io"
@@ -16,3 +17,16 @@
 	}
 	return fmt.Sprintf("%x", h.Sum(nil))
 }
+
+func CalSignature(params ...string) string {
+	sort.Strings(params)
+	var buffer bytes.Buffer
+	for _, value := range params {
+		buffer.WriteString(value)
+	}
+
+	sha := sha1.New()
+	sha.Write(buffer.Bytes())
+	signature := fmt.Sprintf("%x", sha.Sum(nil))
+	return string(signature)
+}

work/externalcontact/add_msg_template.go

@@ -0,0 +1,90 @@
+package externalcontact
+
+import (
+	"encoding/json"
+	"fmt"
+	"github.com/silenceper/wechat/v2/util"
+)
+
+const (
+	addMsgTemplateUrl = "https://qyapi.weixin.qq.com/cgi-bin/externalcontact/add_msg_template"
+)
+
+type ChatType string
+
+const (
+	ChatTypeSingle ChatType = "single"
+	ChatTypeGroup  ChatType = "group"
+)
+
+// ReqMessage 企业群发参数
+type ReqMessage struct {
+	ChatType       ChatType `json:"chat_type"`       //群发任务的类型，默认为single，表示发送给客户，group表示发送给客户群
+	ExternalUserid []string `json:"external_userid"` // 客户的外部联系人id列表，仅在chat_type为single时有效，不可与sender同时为空，最多可传入1万个客户
+	Sender         string   `json:"sender"`          //发送企业群发消息的成员userid，当类型为发送给客户群时必填
+	Text           struct {
+		Content string `json:"content"`
+	} `json:"text"`
+	Attachments []struct {
+		Msgtype     string         `json:"msgtype"`
+		Image       MsgImage       `json:"image"`
+		Link        MsgLink        `json:"link"`
+		Miniprogram MsgMiniprogram `json:"miniprogram"`
+		Video       MsgVideo       `json:"video"`
+		File        MsgFile        `json:"file"`
+	} `json:"attachments"`
+}
+type MsgImage struct {
+	MediaId string `json:"media_id"`
+	PicUrl  string `json:"pic_url"`
+}
+type MsgLink struct {
+	Title  string `json:"title"`
+	Picurl string `json:"picurl"`
+	Desc   string `json:"desc"`
+	Url    string `json:"url"`
+}
+type MsgMiniprogram struct {
+	Title      string `json:"title"`
+	PicMediaId string `json:"pic_media_id"`
+	Appid      string `json:"appid"`
+	Page       string `json:"page"`
+}
+type MsgVideo struct {
+	MediaId string `json:"media_id"`
+}
+type MsgFile struct {
+	MediaId string `json:"media_id"`
+}
+
+type resTemplateSend struct {
+	util.CommonError
+	FailList string `json:"fail_list"`
+	MsgID    int64  `json:"msgid"`
+}
+
+// Send 发送应用消息
+func (r *Client) Send(msg *ReqMessage) (msgID int64, err error) {
+	var accessToken string
+	accessToken, err = r.GetAccessToken()
+	if err != nil {
+		return
+	}
+	uri := fmt.Sprintf("%s?access_token=%s", addMsgTemplateUrl, accessToken)
+	var response []byte
+	response, err = util.PostJSON(uri, msg)
+	if err != nil {
+		return
+	}
+	var result resTemplateSend
+	err = json.Unmarshal(response, &result)
+	if err != nil {
+		return
+	}
+	if result.ErrCode != 0 {
+		err = fmt.Errorf("template msg send error : errcode=%v , errmsg=%v", result.ErrCode, result.ErrMsg)
+		return
+	}
+	msgID = result.MsgID
+	return
+}