server.js

var express = require('express');
var app = express();
var bodyParser = require('body-parser');
var morgan = require('morgan');
var mongoose = require('mongoose');

const url = require('url');
const crypto = require('crypto');
const xmlparser = require('express-xml-bodyparser');
const parseString = require('xml2js').parseString;
const fetch = require("node-fetch");

// Web 服务器端口
// 微信公众平台服务器配置中的 Token
const token = '8dI6rx4iBtPqRWmEjE8h';

var config = require('./config'); //读取配置文件config.js信息
var User = require('./app/models/yiyan'); //获取 yiyan model 信息
var Shi = require('./app/models/shi'); //获取 yiyan model 信息
var Ci = require('./app/models/ci'); //获取 yiyan model 信息
var LunYu = require('./app/models/lunyu'); //获取 yiyan model 信息
var ShiJing = require('./app/models/shijing'); //获取 yiyan model 信息
var Code = require('./app/models/code'); //获取 share code
var Factory = require('./app/models/factory'); //获取 share code
var JxFactory = require('./app/models/jx-factory'); //获取 share code
var JxFactoryTuan = require('./app/models/jx-factory-tuan'); //获取 share code
var port = process.env.PORT || 8080; // 设置启动端口
app.set('superSecret', config.secret); // 设置app 的超级密码--用来生成摘要的密码
const whiteList = ['https://ninesix.cc', 'https://whyour.cn', 'http://localhost:8080'];
// Add headers
app.use(function (req, res, next) {

  // Website you wish to allow to connect
  const origin = req.get('origin');
  if (origin && (whiteList.includes(origin) || origin.includes('chrome-extension://'))) {
    res.setHeader('Access-Control-Allow-Origin', origin);    
  }

  // Request methods you wish to allow
  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, PATCH, DELETE');

  res.setHeader('Access-Control-Allow-Credentials', true);

  next();
});

//用body parser 来解析post和url信息中的参数
app.use(bodyParser.urlencoded({ extended: false }));
app.use(bodyParser.json());
app.use(xmlparser({trim: false, explicitArray: false}));

// 使用 morgan 将请求日志打印到控制台
app.use(morgan('dev'));

app.get('/', function (req, res) {
  res.send('Hello! The API is at http://localhost:' + port + '/api');
});

// API 路由 -------------------
app.get('/yiyan', function (req, res) {

  User.aggregate([{ $sample: { size: 1 } }], function (err, data) {
    if (err) throw err;
    res.send({ code: 200, data: data[0] });
  });

});

app.get('/shici', function (req, res) {
  const obj = {
    0: Shi,
    1: Ci,
    2: ShiJing,
    3: LunYu
  }

  const random = Math.floor(Math.random() * 4);
  obj[random].aggregate([{ $sample: { size: 1 } }], function (err, data) {
    if (err) throw err;
    res.send({ code: 200, data: data[0] });
  });

});

app.get('/code/:code/:name', function (req, res) {
  Code.findOneAndUpdate(
    { name: req.params.name },
    {
      value: req.params.code,
      name: req.params.name,
      type: 1,
    },
    { upsert: true, new: true, setDefaultsOnInsert: true },
    (err, data) => {
      console.log(data);
      res.send({ code: 200, data });
    }
  );
});

app.get('/code', function (req, res) {
  Code.aggregate([{ $sample: { size: 1 } }], function (err, data) {
    if (err) throw err;
    res.send({ code: 200, data: data[0] });
  });

});

app.get('/code/count', function (req, res) {
  Code.count({}, function( err, count){
    if (err) throw err;
    res.send({ code: 200, data: count });
  })
});

app.get('/code/remove', function (req, res) {
  Code.remove({}, function( err ){
    if (err) throw err;
    res.send({ code: 200 });
  })
});

app.get('/factory/:code/:name', function (req, res) {
  Factory.findOneAndUpdate(
    { name: req.params.name },
    {
      value: req.params.code,
      name: req.params.name,
      type: 1,
    },
    { upsert: true, new: true, setDefaultsOnInsert: true },
    (err, data) => {
      res.send({ code: 200, data });
    }
  );
});

app.get('/factory', function (req, res) {
  Factory.aggregate([{ $sample: { size: 1 } }], function (err, data) {
    if (err) throw err;
    res.send({ code: 200, data: data[0] });
  });

});

app.get('/factory/count', function (req, res) {
  Factory.count({type:1}, function( err, count){
    if (err) throw err;
    res.send({ code: 200, data: count });
  })
});

app.get('/factory/remove', function (req, res) {
  Factory.remove({}, function( err ){
    if (err) throw err;
    res.send({ code: 200 });
  })
});

app.get('/jx-factory/:code/:name', function (req, res) {
  JxFactory.findOneAndUpdate(
    { name: req.params.name },
    {
      value: req.params.code,
      name: req.params.name,
      type: 1,
    },
    { upsert: true, new: true, setDefaultsOnInsert: true },
    (err, data) => {
      res.send({ code: 200, data });
    }
  );
});

app.get('/jx-factory', function (req, res) {
  JxFactory.aggregate([{ $sample: { size: 1 } }], function (err, data) {
    if (err) throw err;
    res.send({ code: 200, data: data[0] });
  });

});

app.get('/jx-factory/count', function (req, res) {
  JxFactory.count({}, function( err, count){
    if (err) throw err;
    res.send({ code: 200, data: count });
  })
});

app.get('/jx-factory-tuan/:code/:name', function (req, res) {
  JxFactoryTuan.findOneAndUpdate(
    { name: req.params.name },
    {
      value: req.params.code,
      name: req.params.name,
      type: 1,
    },
    { upsert: true, new: true, setDefaultsOnInsert: true },
    (err, data) => {
      res.send({ code: 200, data });
    }
  );
});

app.get('/jx-factory-tuan', function (req, res) {
  JxFactoryTuan.aggregate([{ $sample: { size: 1 } }], function (err, data) {
    if (err) throw err;
    res.send({ code: 200, data: data[0] });
  });

});

app.get('/jx-factory-tuan/count', function (req, res) {
  JxFactoryTuan.count({}, function( err, count){
    if (err) throw err;
    res.send({ code: 200, data: count });
  })
});

app.get('/yi', function (req, res) {

  var user = new User({
    content: "这是一个测试内容",
    from: "hunter",
    type: "e",
    creator: "hunter",
    yid: "12345"
  });

  user.save(function (err, data) {
    res.send(data);
  });

});

app.get('/calendar', async function (req, res) {
  console.log(req.query)
  const text = await fetch(`https://wannianrili.51240.com/ajax/?q=${req.query.q}`, {
        method: "get",
      }).then((res) => res.text());
  res.send(text);
});

// app.get('/worktile', function (req, res) {
//   const result = checkSignature(req, res);
//   res.send(result);
//   console.log('req.body', req.body);
// });

// app.post('/worktile', function (req, res) {
//   const str = req.body.xml.encrypt || req.body.xml.Encrypt || '';
//   if (str) {
//     const xmlResult = checkSignature(req, res, str);
//     parseString(xmlResult, { trim: true, explicitArray: false }, (err, result) => {
//       if (result && result.xml) {
//         console.log('result', result.xml);
//       }
//     })
//   }
//   console.log('req.body', req.body);
//   console.log('req.query', req.query);

//   res.send('success');

// });

function sha1(str) {
  const md5sum = crypto.createHash('sha1');
  md5sum.update(str);
  const ciphertext = md5sum.digest('hex');
  return ciphertext;
}

function _decode(data) {
  let aesKey = Buffer.from('21IpFqj8qolJbaqPqe1rVTAK5sgkaQ3GQmUKiUQLwRe' + '=', 'base64');
  let aesCipher = crypto.createDecipheriv("aes-256-cbc", aesKey, aesKey.slice(0, 16));
  aesCipher.setAutoPadding(false);
  let decipheredBuff = Buffer.concat([aesCipher.update(data, 'base64'), aesCipher.final()]);
  decipheredBuff = PKCS7Decoder(decipheredBuff);
  let len_netOrder_corpid = decipheredBuff.slice(16);
  let msg_len = len_netOrder_corpid.slice(0, 4).readUInt32BE(0);
  const result = len_netOrder_corpid.slice(4, msg_len + 4).toString();

  return result; // 返回一个解密后的明文
}

function PKCS7Decoder(buff) {
  let pad = buff[buff.length - 1];
  if (pad < 1 || pad > 32) {
    pad = 0;
  }
  return buff.slice(0, buff.length - pad);
}

function checkSignature(req, res, encrypt) {
  const query = req.query;
  console.log('Request URL: ', req.url);
  const signature = query.msg_signature;
  const timestamp = query.timestamp;
  const nonce = query.nonce;
  let echostr;
  console.log('encrypt', encrypt);
  if (!encrypt) {
    echostr = query.echostr;
  } else {
    echostr = encrypt;
  }
  console.log('timestamp: ', timestamp);
  console.log('nonce: ', nonce);
  console.log('signature: ', signature);
  // 将 token/timestamp/nonce 三个参数进行字典序排序
  const tmpArr = [token, timestamp, nonce, echostr];
  const tmpStr = sha1(tmpArr.sort().join(''));
  console.log('Sha1 String: ', tmpStr);
  // 验证排序并加密后的字符串与 signature 是否相等
  if (tmpStr === signature) {
    // 原样返回echostr参数内容
    const result = _decode(echostr);
    console.log('last', result);
    console.log('Check Success');
    return result;
  } else {
    console.log('Check Failed');
    return 'failed';
  }
}

app.listen(port);
console.log('you are a good man');