
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
ep-open-tool-mini
Advanced tools
蚂蚁资金业务-小程序 SDK
依赖安装
npm i ep-open-tool-mini --save
import { EntPay } from 'ep-open-tool-mini';
const signUrl = EntPay.Staff.getSignUrl({
bizSceneCode: '接入时约定的bizSceneCode',
accountId: '企业的id',
});
import { EntPay } from 'ep-open-tool-mini';
// 跳转员工端签约页面
EntPay.Staff.goToSign({
bizSceneCode: '接入时约定的bizSceneCode',
accountId: '企业的id',
});
参数说明
signParam 内容 | 字段说明 | 类型 | 默认值 | 是否必填 |
---|---|---|---|---|
bizSceneCode | 接入时约定的 bizSceneCode | string | 无 | 是 |
accountId | 企业的 id | string | 无 | 是 |
returnUrl | 签约完成之后的回跳地址 | string | 无 | 否 |
import { ZCard } from 'ep-open-tool-mini';
// 跳转开通页面
ZCard.goToSign({
bizScene: '接入时约定的bizScene',
bindToken: '绑定时的token值',
});
参数说明
signParam 内容 | 字段说明 | 类型 | 默认值 | 是否必填 |
---|---|---|---|---|
bizScene | 接入时约定的 bizScene | string | 无 | 是 |
bindToken | 绑定时的 token 值 | string | 无 | 是 |
import { SceneWallet } from 'ep-open-tool-mini';
// 跳转场景钱包端签约页面
SceneWallet.goToSign({
bizScene: '接入时约定的bizScene',
bindToken: '绑定凭证',
});
import { SceneWallet } from 'ep-open-tool-mini';
const signUrl = SceneWallet.getSignUrl({
bizScene: '接入时约定的bizScene',
bindToken: '绑定凭证',
});
方法参数说明
signParam 内容 | 字段说明 | 类型 | 默认值 | 是否必填 |
---|---|---|---|---|
bizScene | 接入时约定的 bizScene | string | 无 | 是 |
bindToken | 绑定凭证 | string | 无 | 是 |
returnUrl | 回跳链接 | string | 无 | 否 |
skipResult | 跳过结果页 | Y | N | 无 | 否 |
import { MYBankSceneWallet } from 'ep-open-tool-mini';
// 跳转网商场景钱包端签约页面
MYBankSceneWallet.goToSign({
bizScene: '接入时约定的bizScene',
bindToken: '绑定凭证',
});
import { MYBankSceneWallet } from 'ep-open-tool-mini';
const signUrl = MYBankSceneWallet.getSignUrl({
bizScene: '接入时约定的bizScene',
bindToken: '绑定凭证',
});
方法参数说明
signParam 内容 | 字段说明 | 类型 | 默认值 | 是否必填 |
---|---|---|---|---|
bizScene | 接入时约定的 bizScene | string | 无 | 是 |
bindToken | 绑定凭证 | string | 无 | 是 |
returnUrl | 回跳链接 | string | 无 | 否 |
skipResult | 跳过结果页 | Y | N | 无 | 否 |
遇到 The keyword 'const' is reserved 如下的报错?
解决:项目中的 mini.project.json 中保证 enableNodeModuleBabelTransform 配置开关为 true
当前支持的跳转链接需要满足下面的格式之一: 1.需要是 https://开头域名链接地址; 2.需要是 alipays://开头的支付宝小程序链接
需要保证传入的 returnUrl 链接能够有效访问,可以通过草料二维码转换成二维码,支付宝扫码验证是否能打开;
⚠️⚠️⚠️ 注意: 1.整体 returnUrl 不需要额外的 encode,SDK 内部已经处理过了; 2.如果是跳转地址的链接需要 url 中有页面参数,则需要自己 encode 拼接好;比如跳转小程序的 pages/index/index 页面想带参数,则需要:'alipays://platformapi/startapp?appId=2021003126648243&page='+ encodeURIComponent('pages/index/index?参数 key=参数 value')
FAQs
蚂蚁资金业务-小程序 SDK
The npm package ep-open-tool-mini receives a total of 3 weekly downloads. As such, ep-open-tool-mini popularity was classified as not popular.
We found that ep-open-tool-mini demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.