Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/zhi-miao/wechat-sdk
此工程为 https://github.com/silenceper/wechat的二开版本
主场开发场景是多第三方平台为起点控制多小程序包含支付全套流程中间件
因此本工程开发线路也是围绕着主场工程线路展开,有坑排坑,有缺补缺
https://github.com/zhi-miao/wechat
sdk实例获取
// memcache := cache.NewMemcache("127.0.0.1:11211")
memcache := chache.NewMemory()
wcConfig := &wechat.Config{
AppID: cfg.AppID,
AppSecret: cfg.AppSecret,
Token: cfg.Token,
EncodingAESKey: cfg.EncodingAESKey,//消息加解密时用到
Cache: memcache,
}
微信通知接收
//配置微信参数
config := &wechat.Config{
AppID: "xxxx",
AppSecret: "xxxx",
Token: "xxxx",
EncodingAESKey: "xxxx",
Cache: cache.NewMemory(), // 使用memory保存access_token,也可选择redis或自定义cache
}
wc := wechat.NewWechat(config)
// 传入request和responseWriter
server := wc.GetServer(request, responseWriter)
server.SetMessageHandler(func(msg message.MixMessage) *message.Reply {
//回复消息:演示回复用户发送的消息
text := message.NewText(msg.Content)
return &message.Reply{message.MsgTypeText, text}
})
server.Serve()
server.Send()
主要是request和responseWriter在不同框架中获取方式可能不一样:
Cache 设置
Cache主要用来保存全局access_token以及js-sdk中的ticket:
默认采用memcache存储。当然也可以直接实现cache/cache.go
中的接口
缓存字典
key | 备注 |
---|---|
qy_access_token_${小程序APPID} | 小程序token |
authorizer_access_token_${小程序APPID} | 代小程序accesstoken |
component_access_token_${平台APPID} | 代小程序accesstoken |
component_verify_ticket_${平台APPID} | 第三方平台票据 |
更多API使用请参考 godoc : https://godoc.org/github.com/zhi-miao/wechat-sdk
Apache License, Version 2.0
This software uses the following third party open source components.
The third party licensors of these components may provide additional license rights,
terms and conditions and/or require certain notices as described below.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.