yumoqing/wechat-office-account
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bugfix

Browse Source
This commit is contained in:
yumoqing 2026-03-03 13:43:18 +08:00
parent 82ff6d73f5
commit 5035535ac0
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
woa/init.py
View File

@ -43,13 +43,20 @@ class WOAHandler:
debug(f'{self.app_id=}::{self.token=}::{encoding_aes_key=}::{len(encoding_aes_key)=}') debug(f'{self.app_id=}::{self.token=}::{encoding_aes_key=}::{len(encoding_aes_key)=}')
self.media_manager = WeChatMediaManager(self.app_id, self.secret) self.media_manager = WeChatMediaManager(self.app_id, self.secret)
def _signature(self, timestamp: str, nonce: str, encrypt:str=None) -> str:
lst = [self.token, timestamp, nonce]
if encrypt:
lst.append(encrypt)
check_list = sorted(lst)
check_str = "".join(check_list)
hash_code = hashlib.sha1(check_str.encode('utf-8')).hexdigest()
return hash_code
def _check_signature(self, signature: str, timestamp: str, nonce: str) -> bool: def _check_signature(self, signature: str, timestamp: str, nonce: str) -> bool:
"""验证签名""" """验证签名"""
if not signature: if not signature:
return False return False
check_list = sorted([self.token, timestamp, nonce]) hash_code = self._signature(timestamp, nonce)
check_str = "".join(check_list)
hash_code = hashlib.sha1(check_str.encode('utf-8')).hexdigest()
return hash_code == signature return hash_code == signature
def _decrypt_msg(self, encrypt_msg: str) -> str: def _decrypt_msg(self, encrypt_msg: str) -> str:
@ -252,8 +259,9 @@ class WOAHandler:
exception(f'{e}') exception(f'{e}')
# 构造加密后的返回 XML 包 # 构造加密后的返回 XML 包
sign = self._signature(timestamp, nonce, encrypt=encrypted_xml_str)
final_xml = f""" final_xml = f"""
<xml><Encrypt><![CDATA[{encrypted_xml_str}]]></Encrypt><MsgSignature><![CDATA[{hashlib.sha1((self.token + timestamp + nonce + encrypted_xml_str).encode()).hexdigest()}]]></MsgSignature><TimeStamp>{timestamp}</TimeStamp><Nonce><![CDATA[{nonce}]]></Nonce></xml>""" <xml><Encrypt><![CDATA[{encrypted_xml_str}]]></Encrypt><MsgSignature><![CDATA[{sign}]]></MsgSignature><TimeStamp>{timestamp}</TimeStamp><Nonce><![CDATA[{nonce}]]></Nonce></xml>"""
debug(f'加密后的返回：{final_xml}') debug(f'加密后的返回：{final_xml}')
return web.Response(text=final_xml, content_type='application/xml') return web.Response(text=final_xml, content_type='application/xml')
elif reply_xml: elif reply_xml: