sm2-加密

src/assets/js/utils/request.js

@@ -3,10 +3,15 @@ import { Loading, Message, MessageBox } from 'element-ui'
 import store from '@/store'
 import { getToken, removeToken } from '@/assets/js/utils/auth'
 import router from '@/router'
-import SM, { sm2 } from 'sm-crypto'
+import { sm2 } from 'sm-crypto'
 import { logger } from 'runjs/lib/common'
 
-import { encrypt } from '@/assets/js/utils/encrypt'
+import {
+  decryptWithPrivateKey,
+  encrypt,
+  shouldEncrypt,
+  privateKeyHex
+} from '@/assets/js/utils/encrypt'
 
 // create an axios instance
 const service = axios.create({
@@ -14,54 +19,6 @@ const service = axios.create({
   timeout: 600000 // request timeout
 })
 
-// SM2公钥
-const SM2_PUBLIC_KEY =
-  '3059301306072a8648ce3d020106082a811ccf5501822d0342000463c7ed894e2e4a1c2de4adb8b71c2fa15409356e6851d2f965ddd0e09283044fabb3457bad5a0cbb689d2668309cdb96f987716f0f83125d6f7fa6b295ac0e1f'
-// SM2私钥
-const SM2_PRIVATE_KEY =
-  '3f5f667ca627d9a442fc5144cbd5ebd81d7fb66158665c7381186c93de4d8edf'
-
-// 不加密的URL列表
-const ENCRYPT_EXCLUDE_URLS = ['/bpic/ta/*']
-
-// 将ENCRYPT_EXCLUDE_URLS通配符模式转换为正则表达式
-const excludePatterns = ENCRYPT_EXCLUDE_URLS.map(pattern => {
-  // 将 * 转换为 .* 用于正则匹配
-  const regexPattern = pattern.replace(/\*/g, '.*')
-  return new RegExp('^' + regexPattern + '$')
-})
-// 加密函数
-const encryptData = data => {
-  try {
-    const dataStr = JSON.stringify(data)
-    const encrypted = sm2.doEncrypt(dataStr, SM2_PUBLIC_KEY, 1)
-    // 使用加密模式1
-    return { encrypted: encrypted }
-  } catch (e) {
-    return data // 失败时返回原始数据
-  }
-}
-
-// 解密函数
-const decryptData = encrypted => {
-  try {
-    encrypted =
-      '04496dfb4a38707c6ac95416f5dc855c9b5d02a3778ebf6bff18efe9e02fdd132bf65437f3283efeadbf52bec92793e16014b284ea034cdc0e3061fea56ff9495c50af6b0aa8c444ca87976e7ba05fcac47dbda652dad7de54cf0d51f9b6c264eea53fa4f28983f174fb5a702bd8517116340dd77cbb7f385fa02106913a8fa4e61394742a989862c804e43179'
-    const decrypted = sm2.doDecrypt(encrypted, SM2_PRIVATE_KEY, 1)
-    return JSON.parse(decrypted)
-  } catch (e) {
-    return encrypted // 失败时返回原始数据
-  }
-}
-
-// 检查是否需要加密
-const shouldEncrypt = config => {
-  // 获取url eg:/sysUserEx/baseLogin
-  const url = config.url.substring(config.url.lastIndexOf(':')).substring(6)
-  // 排除不加密的url
-  const isExcluded = excludePatterns.some(pattern => pattern.test(url))
-  return !isExcluded
-}
 let loading
 function startLoading() {
   //使用Element loading-start 方法
@@ -102,10 +59,9 @@ service.interceptors.request.use(
         // 保存原始数据用于调试
         config.originalData = config.data
         // config.data = encryptData(config.data)
-        var s = { content: encrypt(config.data, config.url) }
-        config.data = JSON.stringify(s)
+        var requestJson = { content: encrypt(config.data, config.url) }
+        config.data = JSON.stringify(requestJson)
         config.headers['Content-Type'] = 'application/json'
-        console.log('config', config)
       }
     }
 
@@ -122,18 +78,18 @@ service.interceptors.request.use(
 // response interceptor
 service.interceptors.response.use(
   response => {
+    let res = response.data
+    // 解密处理
+    if (response.config.headers['X-Encrypted'] === 'true') {
+      try {
+        res = decryptWithPrivateKey(res, privateKeyHex, 1)
+      } catch (e) {
+        logger.error('解密响应失败', e)
+      }
+    }
+    res = JSON.parse(res)
     endLoading()
     if (response.config.back) {
-      let res = response.data
-      // 解密处理
-      if (response.config.headers['X-Encrypted'] === 'true') {
-        try {
-          const contentStr = decryptData(res.content)
-          res.content = contentStr
-        } catch (e) {
-          logger.error('解密响应失败', e)
-        }
-      }
       return res
     }
     // 二进制数据则直接返回