Kris
7b5d1e5c69
新增 Webex、微信 iLink、微信小程序三个渠道扩展。 Webex 渠道扩展功能模块： - config: 渠道配置管理 - gateway: SSE/WebSocket 网关接入 - webhook: Webhook 事件处理 - outbound: 外发消息管理 - streaming: 流式消息处理 - pairing: 用户配对与绑定 - security: 安全校验 - dedupe: 消息去重 - monitor: 渠道状态监控 - status: 会话状态管理 - media: 媒体资源处理 微信 iLink 渠道扩展功能模块： - config: 渠道配置管理 - gateway: SSE/WebSocket 网关接入 - outbound: 外发消息管理 - streaming: 流式消息处理 - pairing: 用户配对与绑定 - security: 安全校验 - dedupe: 消息去重 - monitor: 渠道状态监控 - status: 会话状态管理 - context_store: 上下文存储 - aes_ecb: AES-ECB 加解密 - media: 媒体资源处理 - typing: 输入状态 微信小程序渠道扩展功能模块： - config: 渠道配置管理 - gateway: SSE/WebSocket 网关接入 - webhook: Webhook 事件处理 - outbound: 外发消息管理 - streaming: 流式消息处理 - pairing: 用户配对与绑定 - security: 安全校验 - crypto: 加解密处理 - dedupe: 消息去重 - message: 消息处理 - passive_reply: 被动回复 - media: 媒体资源处理 - status: 会话状态管理
55 lines
1.8 KiB
Python
55 lines
1.8 KiB
Python
import base64
|
|
import hashlib
|
|
import os
|
|
import socket
|
|
import struct
|
|
|
|
from Crypto.Cipher import AES
|
|
|
|
|
|
class WeChatCrypto:
|
|
BLOCK_SIZE = 32
|
|
|
|
def __init__(self, token: str, encoding_aes_key: str, app_id: str):
|
|
self.token = token
|
|
self.app_id = app_id
|
|
self.aes_key = base64.b64decode(encoding_aes_key + "=")
|
|
|
|
def verify_signature(
|
|
self,
|
|
signature: str,
|
|
timestamp: str,
|
|
nonce: str,
|
|
msg_encrypt: str = "",
|
|
) -> bool:
|
|
computed = self.compute_signature(timestamp, nonce, msg_encrypt)
|
|
return computed == signature
|
|
|
|
def compute_signature(self, timestamp: str, nonce: str, msg_encrypt: str = "") -> str:
|
|
params = sorted([self.token, timestamp, nonce, msg_encrypt])
|
|
return hashlib.sha1("".join(params).encode()).hexdigest()
|
|
|
|
def decrypt(self, msg_encrypt: str) -> tuple[str, str]:
|
|
cipher = AES.new(self.aes_key, AES.MODE_CBC, iv=self.aes_key[:16])
|
|
raw = base64.b64decode(msg_encrypt)
|
|
decrypted = cipher.decrypt(raw)
|
|
|
|
pad = decrypted[-1]
|
|
content = decrypted[:-pad]
|
|
|
|
msg_len = socket.ntohl(struct.unpack("I", content[16:20])[0])
|
|
xml = content[20:20 + msg_len].decode("utf-8")
|
|
receiver_app_id = content[20 + msg_len:].decode("utf-8")
|
|
|
|
return xml, receiver_app_id
|
|
|
|
def encrypt(self, msg: str) -> str:
|
|
random_bytes = os.urandom(16)
|
|
msg_bytes = msg.encode("utf-8")
|
|
msg_len = socket.htonl(len(msg_bytes))
|
|
|
|
raw = random_bytes + struct.pack("I", msg_len) + msg_bytes + self.app_id.encode("utf-8")
|
|
pad_len = self.BLOCK_SIZE - (len(raw) % self.BLOCK_SIZE)
|
|
raw = raw + bytes([pad_len]) * pad_len
|
|
cipher = AES.new(self.aes_key, AES.MODE_CBC, iv=self.aes_key[:16])
|
|
return base64.b64encode(cipher.encrypt(raw)).decode() |