安全识别4

ch-wx-api/src/main/java/com/wwdz/ch/wx/api/QdAppletCallbackController.java

@@ -93,8 +93,12 @@ public class QdAppletCallbackController {
             while ((length = input.read(by)) != -1) {
                 output.write(by, 0, length);
             }
-            String noticeStr = new String(output.toByteArray(), "UTF-8");
-            logger.info("微信内容安全审核异步通知原文:{}", noticeStr);
+            String jsonInfo = new String(output.toByteArray(), "UTF-8");
+            logger.info("微信内容安全审核异步通知原文:{}", jsonInfo);
+            WXBizMsgCrypt wxBizMsgCrypt = new WXBizMsgCrypt("aabbcceeffqqtt", "lkPUPk84L0EfqdUjTepT7p9TFWVxcfln3chgr8ywSV6", APPID);
+            String noticeStr = wxBizMsgCrypt.decryptJsonMsg(signature, timestamp, nonce, jsonInfo);
+            logger.info("微信公众号通知回调接口解密后内容:{}", noticeStr);
+
             String result = JsonUtils.getValueByPath(noticeStr, "result/suggest");
             String traceId = JsonUtils.getValueByPath(noticeStr, "trace_id");
             WxCheckRecord wxCheckRecord = wxCheckRecordDao.findByTraceId(traceId);

ch-wx-api/src/main/java/com/wwdz/ch/wx/config/WebMvcConfiguration.java

@@ -41,7 +41,7 @@ public class WebMvcConfiguration implements WebMvcConfigurer {
 				// 放行路径
 				.excludePathPatterns("/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/wx/qdUser/login"
 						, "/wx/user/loginByWx", "/wx/user/finishLogin", "/wx/user/loginByMobile", "/wx/user/loginRegCaptcha", "/wx/user/updateRegCaptcha", "/wx/user/login", "/wx/user/fillCode",
-						"/officialAccountCallback/**","/wxPayCallback/**","/QdOfficialAccountCallback/**",
+						"/officialAccountCallback/**","/wxPayCallback/**","/QdOfficialAccountCallback/**","/QdAppletCallback/**",
 						"/imCallback/**", "/wx/category/**",
 						"/wx/consignSale/**",  "/wx/item/**",
 						"/wx/returnOrder/**", "/wx/distributionOrder/confirmSigned",  "/wx/distributionOrder/delivery", "/wx/distributionOrder/cancel",

ch-wx-api/src/main/java/com/wwdz/ch/wx/impl/qiandao/QdUserSignInServiceImpl.java

@@ -145,7 +145,6 @@ public class QdUserSignInServiceImpl implements QdUserSignInService {
             //查询用户openid
             QdUser user = qdUserDao.queryById(dto.getUserId());
             wxCheckMediaRequestDto.setWxOpenId(user.getWxOpenid());
-
             if (StringUtils.hasLength(dto.getContent())) {
                 wxCheckMediaRequestDto.setWordStr(dto.getContent());
                 boolean result = qdWxAppletApi.checkWord(wxCheckMediaRequestDto);