
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
$ npm i node-dd --save
# $ npm i node-dingtalk --save for version 0.2.x, 0.1.x
const DingTalk = require('node-dd').DingTalk;
const dingtalk = new DingTalk({
corpid: '',
corpsecret: ''
});
const deparment = await dingtalk.department.get('1');
console.log(deparment);
import { DingTalk } from 'node-dd';
// or
import DingTalk from 'node-dd';
const dingtalk = new DingTalk({
corpid: '',
corpsecret: ''
});
const deparment = await dingtalk.department.get('1');
console.log(deparment);
官方文档: https://open-doc.dingtalk.com/
获取 AccessToken, 并在有效期内自动缓存, gettoken
获取 jsapi_ticket, 并在有效期内自动缓存, get_jsapi_ticket
获取 js api 接入时需要的配置数据以及签名
辅助方法, 参见 npm urllib
https://open-doc.dingtalk.com/doc2/detail.htm?treeId=172&articleId=104979&docType=1
获取部门列表 department/list
获取部门详情 department/get
创建部门 department/create
更新部门 department/update
删除部门 department/delete
https://open-doc.dingtalk.com/doc2/detail.htm?treeId=172&articleId=104979&docType=1
user/simplelist分页查询参数放到 opts
user/list分页查询参数放到 opts
自动遍历分页查询
自动遍历分页查询
获取成员详情 user/get
id 对应于 userid, 参数, 其他参数放到 opts
创建成员 user/create
更新成员 user/update
user/deleteuser/batchdelete根据 unionid 获取成员的 userid, user/getUseridByUnionid
此处的 unionid 即为 user.openId
根据手机号获取成员 userid, user/get_by_mobile
发送企业消息, message/send
获取企业会话消息已读未读状态, message/list_message_status
上传媒体文件 media/upload
获取媒体文件的下载地址 media/get
下载媒体文件 media/get
$ git clone git@github.com:ali-sdk/node-dingtalk.git
$ cnpm install
# you may have gulp installed globally by `npm i -g gulp` or `yarn global add gulp`
$ gulp
$ npm test
Please open an issue here.
FAQs
dingtalk node sdk
The npm package node-dd receives a total of 26 weekly downloads. As such, node-dd popularity was classified as not popular.
We found that node-dd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.