open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-02-13 14:35:40 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add clarifying comments about Feishu signature algorithm

Browse Source 
Co-authored-by: whyour <22700758+whyour@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot] 2025-11-26 17:01:57 +00:00
parent 6fd7eabcb6
commit a3a556b625
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
back/services/notify.ts
View File

@ -562,6 +562,8 @@ export default class NotificationService {
}; };
// Add signature if secret is provided // Add signature if secret is provided
// Note: Feishu's signature algorithm uses timestamp+"\n"+secret as the HMAC key
// and signs an empty message, which differs from typical HMAC usage
if (larkSecret) { if (larkSecret) {
const timestamp = Math.floor(Date.now() / 1000).toString(); const timestamp = Math.floor(Date.now() / 1000).toString();
const stringToSign = `${timestamp}\n${larkSecret}`; const stringToSign = `${timestamp}\n${larkSecret}`;

2
sample/notify.js
View File

@ -995,6 +995,8 @@ function fsBotNotify(text, desp) {
const body = { msg_type: 'text', content: { text: `${text}\n\n${desp}` } }; const body = { msg_type: 'text', content: { text: `${text}\n\n${desp}` } };
// Add signature if secret is provided // Add signature if secret is provided
// Note: Feishu's signature algorithm uses timestamp+"\n"+secret as the HMAC key
// and signs an empty message, which differs from typical HMAC usage
if (FSSECRET) { if (FSSECRET) {
const crypto = require('crypto'); const crypto = require('crypto');
const timestamp = Math.floor(Date.now() / 1000).toString(); const timestamp = Math.floor(Date.now() / 1000).toString();

2
sample/notify.py
View File

@ -236,6 +236,8 @@ def feishu_bot(title: str, content: str) -> None:
data = {"msg_type": "text", "content": {"text": f"{title}\n\n{content}"}} data = {"msg_type": "text", "content": {"text": f"{title}\n\n{content}"}}
# Add signature if secret is provided # Add signature if secret is provided
# Note: Feishu's signature algorithm uses timestamp+"\n"+secret as the HMAC key
# and signs an empty message, which differs from typical HMAC usage
if push_config.get("FSSECRET"): if push_config.get("FSSECRET"):
timestamp = str(int(time.time())) timestamp = str(int(time.time()))
string_to_sign = f'{timestamp}\n{push_config.get("FSSECRET")}' string_to_sign = f'{timestamp}\n{push_config.get("FSSECRET")}'