require 'openssl/cipher' require 'base64' # the file copy from here # https://github.com/Eric-Guo/wechat/blob/master/lib/wechat/cipher.rb module Wework module Cipher extend ActiveSupport::Concern BLOCK_SIZE = 32 CIPHER = 'AES-256-CBC'.freeze def encrypt(plain, encoding_aes_key) cipher = OpenSSL::Cipher.new(CIPHER) cipher.encrypt cipher.padding = 0 key_data = Base64.decode64(encoding_aes_key + '=') cipher.key = key_data cipher.iv = [key_data].pack('H*') cipher.update(plain) + cipher.final end def decrypt(msg, encoding_aes_key) cipher = OpenSSL::Cipher.new(CIPHER) cipher.decrypt cipher.padding = 0 key_data = Base64.decode64(encoding_aes_key + '=') cipher.key = key_data cipher.iv = [key_data].pack('H*') plain = cipher.update(msg) + cipher.final decode_padding(plain) end # app_id or corp_id def pack(content, app_id) random = SecureRandom.hex(8) text = content.force_encoding('ASCII-8BIT') msg_len = [text.length].pack('N') encode_padding("#{random}#{msg_len}#{text}#{app_id}") end def unpack(msg) msg = decode_padding(msg) msg_len = msg[16, 4].reverse.unpack('V')[0] content = msg[20, msg_len] app_id = msg[(20 + msg_len)..-1] [content, app_id] end def msg_decrypt message unpack(decrypt(Base64.decode64(message), encoding_aes_key))[0] end def msg_encrypt message Base64.strict_encode64(encrypt(pack(message, corp_id), encoding_aes_key)) end def signature(timestamp, nonce, encrypt) array = [token, timestamp, nonce] array << encrypt unless encrypt.nil? Digest::SHA1.hexdigest array.compact.collect(&:to_s).sort.join end def generate_xml(msg, timestamp, nonce) encrypt = msg_encrypt(msg) { Encrypt: encrypt, MsgSignature: signature(timestamp, nonce, encrypt), TimeStamp: timestamp, Nonce: nonce }.to_xml(root: 'xml', children: 'item', skip_instruct: true, skip_types: true) end private def encode_padding(data) length = data.bytes.length amount_to_pad = BLOCK_SIZE - (length % BLOCK_SIZE) amount_to_pad = BLOCK_SIZE if amount_to_pad == 0 padding = ([amount_to_pad].pack('c') * amount_to_pad) data + padding end def decode_padding(plain) pad = plain.bytes[-1] # no padding pad = 0 if pad < 1 || pad > BLOCK_SIZE plain[0...(plain.length - pad)] end end end