
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@axolo/node-wechat
Advanced tools
Wechat OpenAPI Node.js SDK.
yarn add @axolo/node-wechat
please see src and test for more api usage.
params
| config | description |
|---|---|
| appMode | mp = MiniProgram, oa = OfficialAccount |
| appId | Wechat appId |
| appSecret | Wechat AppSecret |
| eventToken | http event callback token |
| eventAesKey | http event callback encode aes key |
| baseUrl | base url of Wechat OpenAPI |
| authTokenUrl | url of get wechat access token |
| error | throw error settings |
| axios | HTTP Client, use axios |
| cache | cache settings, cache.manager use cache-manager |
| logger | logger settings, use log4js |
return
A instance of Wechat OpenAPI Node.js SDK.
more request options see axios.
params
| parmas | description |
|---|---|
| api | querystring, Wechat OpenAPI |
| request.method | HTTP Method |
| request.params | HTTP querystring as Object by GET |
| request.body | HTTP body as Object by POST/PATCH/PUT |
| scope | scope or other options of api |
return
Get data with return code from Wechat OpenAPI.
See http event callback for help. This method use as middleware usualy.
params
| params | description |
|---|---|
| signature | signature string |
| timestamp | timestamp string |
| nonce | random number |
| echostr | random string |
return
event decrypted of callback. response echostr if callback success.
const WechatSdk = require('@axolo/node-wechat');
const config = { appId: 'APP_ID', appSecret: 'APP_SECRET' };
const wechat = new WechatSdk(config);
wechat.execute('/user/info', {
params: { openid: 'openid' }
}).catch(err => {
console.log(err);
}).then(res => {
console.log(res);
});
yarn test ./test/execute.test.js # test execute
yarn test ./test/callback-koa.test.js # test callback
TIP: Please create .env and .env.test in project root before test.
appMode = mp
appId = APP_ID
appSecret = APP_SECRET
## http server for http event callback
httpPort = 7001
miniprogram, work wechat, etc.memory, redis, mysql, etc.Yueming Fang
FAQs
Wechat OpenAPI Node.js SDK.
We found that @axolo/node-wechat demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.