This commit is contained in:
2026-06-15 10:19:24 +08:00
parent fa6543ea54
commit d222291135
+6 -3
View File
@@ -167,11 +167,14 @@ async def wechat_callback(request: Request, db: AsyncSession = Depends(get_db)):
# 使用 AES-GCM 解密 # 使用 AES-GCM 解密
try: try:
# API v3 key 和 nonce 需要转换为字节串 # 所有参数都需要转换为字节串
api_v3_key_bytes = api_v3_key.encode('utf-8') api_v3_key_bytes = api_v3_key.encode('utf-8')
nonce_bytes = nonce_str.encode('utf-8') ciphertext_bytes = ciphertext.encode('utf-8') if ciphertext else b''
associated_data_bytes = associated_data.encode('utf-8') if associated_data else b''
nonce_bytes = nonce_str.encode('utf-8') if nonce_str else b''
aesgcm = AESGCM(api_v3_key_bytes) aesgcm = AESGCM(api_v3_key_bytes)
decrypted_str = aesgcm.decrypt(ciphertext, associated_data, nonce_bytes) decrypted_str = aesgcm.decrypt(ciphertext_bytes, associated_data_bytes, nonce_bytes)
except InvalidTag: except InvalidTag:
logger.error("WeChat callback decryption failed: Invalid tag") logger.error("WeChat callback decryption failed: Invalid tag")
raise HTTPException(status_code=400, detail="数据解密失败") raise HTTPException(status_code=400, detail="数据解密失败")