企微考试提交

index.js

@@ -1,4 +1,5 @@
 const express = require('express')
+const xmlparser = require('express-xml-bodyparser');
 require("express-async-errors")
 const db = require('./src/utils/dbUitls')
 const rest = require('./src/rest')
@@ -13,7 +14,9 @@ chalk.level = 1
 app.listen(port, () => {
   db.init()
   app.use(express.json()) // for parsing application/json
+  app.use(xmlparser());
   app.use(express.urlencoded({extended: true, limit: '50mb'})) // for parsing application/x-www-form-urlencoded
+
   Promise.all([rest.init(app)]).then(() => {
     log(`${chalk.bgGreen.black(" DONE ")} serve is listening on ${port}`)
     ws.init(app)

package.json

@@ -28,12 +28,15 @@
     "express": "^4.17.3",
     "express-async-errors": "^3.1.1",
     "express-ws": "^5.0.2",
+    "express-xml-bodyparser": "^0.3.0",
     "fast-csv": "^4.3.6",
     "form-data": "^4.0.0",
     "fs-extra": "^10.0.1",
     "helmet": "^5.0.2",
+    "jsonwebtoken": "^9.0.2",
     "mysql": "^2.18.1",
-    "uuid": "^8.3.2"
+    "uuid": "^8.3.2",
+    "xml2js": "^0.6.2"
   },
   "devDependencies": {
     "chalk": "^4.1.2"

src/config/auth.js

@@ -0,0 +1,23 @@
+const auth = require("jsonwebtoken");
+module.exports = {
+  //key wxtest token
+  secret: "ddb64c99f29d310c",
+  verifyToken(req, res, next) {
+    const token = req.headers['authorization'];
+
+    if (!token) {
+      return res.status(401).json({message: 'No token provided'});
+    }
+
+    auth.verify(token, this.secret, (err, decoded) => {
+      if (err) {
+        return res.status(403).json({message: 'Failed to authenticate token'});
+      }
+      req.userId = decoded.userId;
+      next();
+    });
+  },
+  generateToken(userId) {
+    return auth.sign({userId}, this.secret, {expiresIn: '24h'});
+  }
+}

src/rest/wxtest/action.js

@@ -1,20 +1,71 @@
 const {getSignature, decrypt} = require("@wecom/crypto");
-const {addOrUpdate} = require("../../utils/dbUitls");
+const {Parser} = require("xml2js");
+const {query} = require("../../utils/dbUitls");
+const dayjs = require("dayjs");
+const axios = require("axios");
+const {getAccessToken} = require("./getUserInfo");
 const token = "pnYAdXEHYzYhIyzE6Qbs2L"
 const encodingAESKey = "fHkOHrUGSVUmPjFmshLEFN2XbaqF3OxsuYgnJu6DB1G"
+
+let accessToken
+
+const reply = (agentid, to, content) => {
+  axios.post("https://qyapi.weixin.qq.com/cgi-bin/message/send", {
+    touser: to, agentid, msgtype: "markdown", markdown: {
+      content
+    }
+  }, {params: {access_token: accessToken}})
+}
+/**
+ * 获取当前值班人并将信息发送给询问人,同时通知值班人员
+ * @param params
+ */
+const handleReplyDutyInfo = (params) => {
+  const {FromUserName: touser, AgentID: agentid} = params,
+    now = dayjs().format("YYYY-MM-DD HH:mm:ss"),
+    sql = `select * from node_wx_test_duty where dutyStartTime<='${now}' and dutyEndTime>='${now}'`
+  query(sql).then(res => {
+    const info = res?.[0] || {}
+    if (info.dutyUserId) {
+      getAccessToken().then(access_token => {
+        accessToken = access_token
+        /**
+         * 回复查询值班信息给查询人
+         */
+        reply(agentid, touser, `当前值班信息如下\n>值班时间：${info.dutyStartTime} - ${info.dutyEndTime}\n值班人员：${info.dutyUserName}\n`)
+        /**
+         * 通知提醒值班人员
+         */
+        reply(agentid, info.dutyUserId, `今天轮到你值班了，请知悉~`)
+      })
+    } else {
+      /**
+       * 无值班人员
+       */
+      reply(agentid, touser, `今天没有值班人员哦~`)
+    }
+  })
+}
+
+
 module.exports = {
   action: "/node/wxtest/action",
   method: "post",
   execute: (request, response) => {
-    const {msg_signature, timestamp, nonce, echostr} = request.query
-    const signature = getSignature(token, timestamp, nonce, echostr);
+    const {msg_signature, timestamp, nonce} = request.query,
+      {xml: {encrypt}} = request.body
+    const signature = getSignature(token, timestamp, nonce, encrypt[0]);
     if (msg_signature == signature) {
-      const context = decrypt(encodingAESKey, echostr)
-      const {name, mobile: phone, email, userId} = context
-      addOrUpdate({
-        table: "sys_user", form: {name, email, phone, userId}
+      const context = decrypt(encodingAESKey, encrypt[0])
+      const parser = new Parser({explicitArray: false})
+      parser.parseString(context.message, (err, result) => {
+        if (!err) {
+          if (result.xml.Content == '值班') {
+            handleReplyDutyInfo(result.xml)
+          }
+          response.send({code: 0, message: "success"})
+        } else response.send({code: 1, err})
       })
-      response.send({code: 0, message: "success"})
-    }else response.send({code: 1, message: "error"})
+    } else response.send({code: 1, message: "error"})
   }
 }

src/rest/wxtest/actionGet.js

@@ -5,12 +5,11 @@ module.exports = {
   action: "/node/wxtest/action",
   method: "get",
   execute: (request, response) => {
-    const {msg_signature, timestamp, nonce, Encrypt} = request.query
-    const signature = getSignature(token, timestamp, nonce, Encrypt);
-    console.log(msg_signature, signature)
+    const {msg_signature, timestamp, nonce, echostr} = request.query
+    const signature = getSignature(token, timestamp, nonce, echostr);
     if (msg_signature == signature) {
-      const context = decrypt(encodingAESKey, Encrypt)
-      response.send(context)
+      const context = decrypt(encodingAESKey, echostr)
+      response.send(context.message)
     } else {
       response.send({code: 1, message: "验证不通过"})
     }

src/rest/wxtest/getUserInfo.js

@@ -1,6 +1,8 @@
 const axios = require("axios");
+const auth = require("../../config/auth.js")
 const CORPID = "ww596787bb70f08288"
-const SECRET = "Bh3GT11_bzxSm03xZBY8otjw_WLWeLsduzDQweUohAY"
+const SECRET = "ZEpS51fCRPznHG16k0z1lfxaH0VciEnBljeP9aR47VU"
+
 /**
  * 获取access_token
  */
@@ -14,7 +16,7 @@ const getAccessToken = (corpid = CORPID, secret = SECRET) => {
  * 获取 userId及其他信息
  */
 const getUserInfo = (accessToken, code) => {
-  return axios.get(`https://qyapi.weixin.qq.com/cgi-bin/user/getuserinfo`, {
+  return axios.get(`https://qyapi.weixin.qq.com/cgi-bin/auth/getuserinfo`, {
     params: {access_token: accessToken, code}
   })
 }
@@ -24,15 +26,18 @@ module.exports = {
   execute: (request, response) => {
     const {code} = request.query
     getAccessToken().then(token => getUserInfo(token, code)).then(res => {
-      if (res?.data?.data) {
-        response.send({code: 0, data: res.data.data})
+      const userid = res?.data?.userid
+      //userid换取我方系统token
+      if (userid) {
+        const token = auth.generateToken(userid)
+        response.send({code: 0, token})
       } else {
-        console.log(res.data)
         response.send({code: 1, err: res.data})
       }
     }).catch(err => {
       console.log(err)
       response.send({code: 1, err})
     })
-  }
+  },
+  getAccessToken
 }

src/rest/wxtest/token.js

@@ -9,7 +9,7 @@ const getAccessToken = (corpid = CORPID, secret = SECRET) => {
 }
 
 module.exports = {
-  action: "/node/wxtest/token",
+  action: "/node/wxtest/access",
   method: "post",
   execute: (request, response) => {
     getAccessToken().then(token => {