微信企业号开发node版

第一步：根据corpid和secret去微信接口\'https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=\' + config.appId + \'&corpsecret=\' + config.appSecret;这里拿到access_token，

access_token有时间限制，先把它存在文件或数据库里 ，到期就自动再重新获取一次，再通过access_token去拿取ticket，接着再用算法生成签名给到前台拿去与微信接口做配置。

 

var url = require(\'url\');
var crypto = require(\'crypto\');
var request = require(\'request\');
var async = require(\'async\');
var BufferHelp = require(\'bufferhelper\');
var iconv = require(\'iconv-lite\');
var fs = require(\'fs\');


var cache = {
    ticket: null,
    time: 0
};

function getSignature(config, url, cb) {
    console.log(\'start getSignature\');
    // 判断内存中是否有缓存
    if (!cache || !cache.ticket) {
        console.log(\'readCache\');
        readFile(\'cache.json\', function(str) {
            if (str) {
                console.log(str);
                cache = JSON.parse(str);
            }
            tryGetSignature(config, url, cb);
        });
    }
    else {
        tryGetSignature(config, url, cb);
    }
}

function checkSignature(config) {
    return function(req, res, next) {
        console.log(\'checkSignature\');
        req.query = url.parse(req.url, true).query;

        if (req.query.getsignature) {
            console.log(\'req.query.getsignature\');
            return next();
        }


        if (!req.query.signature) {
            return res.end(\'Access Denied!\');
        }
        var tmp = [config.appToken, req.query.timestamp, req.query.nonce].sort().join(\'\');
        var signature = crypto.createHash(\'sha1\').update(tmp).digest(\'hex\');
        if (req.query.signature != signature) {
            console.log(\'req.query.signature != signature\');
            return res.end(\'Auth failed!\'); // 指纹码不匹配时返回错误信息，禁止后面的消息接受及发送
        }
        if (req.query.echostr) {
            console.log(\'req.query.echostr\');
            return res.end(req.query.echostr); // 添加公众号接口地址时，返回查询字符串echostr表示验证通过
        }
        // 消息真实性验证通过，继续后面的处理
        return next();
    };
}


function getToken(config, cb) {
    //var tokenUrl = \'https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appId=\' + config.appId + \'&secret=\' + config.appSecret;
    var tokenUrl = \'https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=\' + config.appId + \'&corpsecret=\' + config.appSecret;

    request.get(tokenUrl, function(error, response, body) {
        if (error) {
            cb(\'getToken error\', error);
        }
        else {
            try {
                console.log(body);
                var token = JSON.parse(body).access_token;
                var tt ={
                    token:token
                };
                writeFile(\'token.json\', JSON.stringify(tt));
                cb(null, token);
            }
            catch (e) {
                cb(\'getToken error\', e);
            }
        }
    });
}

function getNewTicket(token, cb) {
    //https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=ACCESS_TOKEN
    //request.get(\'https://api.weixin.qq.com/cgi-bin/ticket/getticket?access_token=\' + token + \'&type=jsapi\', function(error, res, body) {
    request.get(\'https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=\' + token , function(error, res, body) {
        if (error) {
            cb(\'getNewTicket error\', error);
        }
        else {
            try {
                console.log(JSON.parse(body));
                var ticket = JSON.parse(body).ticket;
                cb(null, ticket);
            }
            catch (e) {
                cb(\'getNewTicket error\', e);
            }
        }
    });
}



function tryGetSignature(config, u, cb) {
    // 判断cache 是否过期
    if (!cache.ticket || (new Date().getTime() - cache.time) > 7000000) {
        async.waterfall([function(cb) {
            console.log(\'start getNew Ticket\', cache);
            getToken(config, cb);
        }, function(token, cb) {
            getNewTicket(token, cb);
        }], function(error, result) {
            if (error) {
                cb(\'getToken getNewTicket error\', error);
            }
            else {
                cache.ticket = result;
                cache.time = new Date().getTime();
                // 文件保存
                writeFile(\'cache.json\', JSON.stringify(cache));
                console.log(result);

                var timestamp = getTimesTamp();
                var noncestr = getNonceStr();
                var str = \'jsapi_ticket=\' + result + \'&noncestr=\'+ noncestr+\'&timestamp=\' + timestamp + \'&url=\' + u;
                console.log(str);
                var signature = crypto.createHash(\'sha1\').update(str).digest(\'hex\');
                cb(null, {
                    appId: config.appId,
                    timestamp: timestamp,
                    nonceStr: noncestr,
                    signature: signature
                });
            }
        });
    }
    else {
        console.log(\'缓存获取\');
        var timestamp = getTimesTamp();
        var noncestr = getNonceStr();
        var str = \'jsapi_ticket=\' + cache.ticket + \'&noncestr=\' + noncestr + \'&timestamp=\' + timestamp + \'&url=\' + u;
        console.log(str);
        var signature = crypto.createHash(\'sha1\').update(str).digest(\'hex\');
        cb(null, {
            appId: config.appId,
            timestamp: timestamp,
            nonceStr: noncestr,
            signature: signature
        });
    }
}

function getTimesTamp() {
    return parseInt(new Date().getTime() / 1000) + \'\';
}

function getNonceStr() {
    return Math.random().toString(36).substr(2, 15);
}


function readFile(path, cb) {
    var readstream = fs.createReadStream(path);
    var bf = new BufferHelp();
    readstream.on(\'data\', function(chunk) {
        bf.concat(chunk);
    });
    readstream.on(\'end\', function() {
        cb && cb(decodeBuffer(bf));
    });
}

function writeFile(path, str, cb) {
    var writestream = fs.createWriteStream(path);

    writestream.write(str);
    writestream.on(\'close\', function() {
        cb && cb();
    });
}

function decodeBuffer(bf, encoding) {
    var val = iconv.decode(bf.toBuffer(), encoding || \'utf8\');
    if (val.indexOf(\'�\') != -1) {
        val = iconv.decode(bf.toBuffer(), \'gbk\');
    }
    return val;
}

exports.checkSignature = checkSignature;
exports.getSignature = function(config) {
    return function(url, cb) {
        getSignature(config, url, cb);
    }
};

var signature = require(\'../signature\');
var config = require(\'../config\')();
var express = require(\'express\');

var createSignature = signature.getSignature(config);
//var express = require(\'express\');
var WXBizMsgCrypt = require(\'wechat-crypto\');

var configN = {
    token: \'shangmenxia\',
    encodingAESKey: \'kgIgMwv8Uf7dOPTEFyYIPIzk5D3W9s9havZymNgr33U\',
    corpId: \'wx3cc22c4e7a4d4312\'
};
module.exports = function(app) {
    app.post(\'/getsignature\', getSignature);
    app.get(\'/test\', fun);
    app.get(\'/wxservice\', function(req, res){
        var msg_signature = req.query.msg_signature;
        var timestamp = req.query.timestamp;
        var nonce = req.query.nonce;
        var echostr = req.query.echostr;
        var cryptor = new WXBizMsgCrypt(configN.token, configN.encodingAESKey, configN.corpId);
        var s = cryptor.decrypt(echostr);
        res.send(s.message);
    });
};

function fun(req, res) {
    var u = req.protocol + "://" + req.get(\'Host\') + req.url;
    createSignature(u, function(error, result) {
        console.log(result);
        res.render(\'../public/html/login.html\', result);
    });
}

function getSignature(req, res) {
    var url = req.body.url;
    console.log(url);
    createSignature(url, function(error, result) {
        if (error) {
            res.json({
                \'error\': error
            });
        } else {
            res.json(result);
        }
    });
}

　　//app.js  运行文件

var express = require(\'express\'),
    routes = require(\'./routes/routes\'),
    http = require(\'http\'),
    path = require(\'path\');
var template = require(\'art-template\');
var app = express();
app.use(express.static(__dirname+"/public"));
app.configure(function() {
    app.set(\'port\', process.env.PORT || 1342);
    template.config(\'base\', \'\');
    template.config(\'extname\', \'.html\');
    app.engine(\'.html\', template.__express);
    app.set(\'view engine\', \'html\');
    app.use(express.favicon());
    app.use(express.logger(\'dev\'));
    app.use(express.bodyParser());
    app.use(express.methodOverride());
    app.use(app.router);
    app.use(express.static(path.join(__dirname, \'public\')));

    // user
    // 这是用来 在接口配置信息 中验证的; 仅仅使用 JS-SDK 不需要使用;
    // app.use(signature.checkSignature(config));
});

app.configure(\'development\', function() {
    app.use(express.errorHandler());
});
routes(app);
http.createServer(app).listen(9001, function() {
    console.log("企业号监听 9001");
});