d

xgg-saas-merchant/app/base/api/impl/h5/merchantApi.js

@@ -77,7 +77,7 @@ class TestAPI extends APIBase {
             }
 
             let openID = "gtbh5_" + obj.mobile;
-            let merchant_id = decodeURIComponent(obj.merchant_id);
+            let merchant_id = system.decryption(obj.merchant_id);
             let params = {
                 saas_merchant_id: merchant_id,
                 saas_id: null,
@@ -102,7 +102,8 @@ class TestAPI extends APIBase {
 
     //验证登录
     async loginUser(obj) {
-        let merchant_id = decodeURIComponent(obj.merchant_id);
+        // let merchant_id = decodeURIComponent(obj.merchant_id);
+        let merchant_id = system.decryption(obj.merchant_id);
         let user = await this.getLoginUser(merchant_id, obj.openid);
         return this.returnSuccess(user);
     }

xgg-saas-merchant/app/base/system.js

@@ -217,6 +217,40 @@ class System {
 			}
 		}
 	}
+
+	static encryption(data) {
+		if(!data) {
+			return "";
+		}
+		let AES_conf = settings.apiconfig.AES;
+		let key = AES_conf.key;
+		let iv = AES_conf.iv;
+		// let padding = AES_conf.padding;
+
+		var cipherChunks = [];
+		var cipher = crypto.createCipheriv('aes-128-cbc', key, iv);
+		cipher.setAutoPadding(true);
+		cipherChunks.push(cipher.update(data, 'utf8', 'base64'));
+		cipherChunks.push(cipher.final('base64'));
+		return cipherChunks.join('');
+	}
+
+	static decryption(data){
+		if(!data) {
+			return "";
+		}
+		let AES_conf = settings.apiconfig.AES;
+		let key = AES_conf.key;
+		let iv = AES_conf.iv;
+		// let padding = AES_conf.padding;
+
+		var cipherChunks = [];
+		var decipher = crypto.createDecipheriv('aes-128-cbc', key, iv);
+		decipher.setAutoPadding(true);
+		cipherChunks.push(decipher.update(data, 'base64', 'utf8'));
+		cipherChunks.push(decipher.final('utf8'));
+		return cipherChunks.join('');
+	}
 }
 
 Date.prototype.Format = function (fmt) { //author: meizz

xgg-saas-merchant/app/config/settings.js

@@ -60,6 +60,11 @@ var settings = {
     opLogEsIsAdd: function () {
       return 1;
     },
+    AES: {
+      key: "qUPsMflPfgpPP1Ua", //密钥
+      iv: '1012133205963708', //偏移向量
+      padding: 'PKCS7Padding' //补全值
+    }
   },
   indexPage: function() {
     if(this.env == "dev") {