1.优化查询岗位详情，查询无效岗位提示

2.优化微信授权登录，把PKCS5Padding 改成PKCS7Padding并且添加appid验证是否一致问题

ruoyi-bussiness/src/main/java/com/ruoyi/cms/controller/app/AppJobController.java

@@ -26,6 +26,7 @@ import org.springframework.web.bind.annotation.*;
 
 import javax.servlet.http.HttpServletRequest;
 import java.util.List;
+import java.util.Optional;
 
 /**
  * 岗位Controller
@@ -172,18 +173,20 @@ public class AppJobController extends BaseController
     @GetMapping(value = "/{encryptJobId}")
     public AjaxResult getInfo(@PathVariable("encryptJobId") String encryptJobId, HttpServletRequest request)
     {
+        Long jobId;
         if(StringUtils.isBlank(encryptJobId)){
             return error("岗位id为空!");
         }
         try {
-            Long jobId=Long.parseLong(SM4Utils.decryptEcb(SM4Constants.SM4_KET, encryptJobId));
-            //Job job = jobService.selectJobByJobIdApp(jobId);
-            Job job = jobService.selectHttpJobByJobIdApp(jobId,request);
-            return success(job);
+            String decryptStr=SM4Utils.decryptEcb(SM4Constants.SM4_KET, encryptJobId);
+            jobId=Long.parseLong(decryptStr);
         }catch (Exception e){
             e.printStackTrace();
             return error("参数不正确!");
         }
+        return Optional.ofNullable(jobService.selectHttpJobByJobIdApp(jobId, request))
+                .map(this::success)
+                .orElse(error("无效的岗位!"));
     }
 
     /**

ruoyi-bussiness/src/main/java/com/ruoyi/cms/service/impl/JobServiceImpl.java

@@ -617,11 +617,12 @@ public class JobServiceImpl extends ServiceImpl<JobMapper,Job> implements IJobSe
     @Override
     public Job selectHttpJobByJobIdApp(Long jobId,HttpServletRequest request) {
         Job job = jobMapper.selectById(jobId);
-        //查询公司信息
-        if(Objects.nonNull(job.getCompanyId())){
-            Company company = companyMapper.selectById(job.getCompanyId());
-            job.setCompany(company);
+        if(job==null){
+            return null;
         }
+        //查询公司信息
+        Optional.ofNullable(job.getCompanyId()).map(companyMapper::selectById).ifPresent(job::setCompany);
+
         if(SiteSecurityUtils.isLogin()){
             //查询申请信息
             Long applyCount = jobApplyMapper.selectCount(Wrappers.<JobApply>lambdaQuery().eq(JobApply::getJobId, jobId).eq(JobApply::getUserId, SiteSecurityUtils.getUserId()));

ruoyi-bussiness/src/main/java/com/ruoyi/cms/util/WechatUtil.java

@@ -12,6 +12,7 @@ import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.io.FileUtils;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Component;
+import org.bouncycastle.jce.provider.BouncyCastleProvider;
 
 import javax.crypto.Cipher;
 import javax.crypto.spec.IvParameterSpec;
@@ -20,6 +21,7 @@ import java.io.File;
 import java.io.IOException;
 import java.nio.charset.StandardCharsets;
 import java.security.MessageDigest;
+import java.security.Security;
 import java.util.Base64;
 import java.util.Formatter;
 import java.util.HashMap;
@@ -41,6 +43,13 @@ public class WechatUtil {
     @Value("${wx.secret}")
     private String secret;
 
+    // 全局注册一次 BC Provider，避免每次解密都重复注册
+    static {
+        if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) {
+            Security.addProvider(new BouncyCastleProvider());
+        }
+    }
+
     public AppWechatEntity sign(String url) {
         Map<String, String> ret = new HashMap();
         String nonceStr = create_nonce_str();
@@ -291,8 +300,8 @@ public class WechatUtil {
                 throw new RuntimeException("iv长度错误，应为16字节");
             }
 
-            // 2. 初始化 AES-128-CBC 解密器（使用PKCS5Padding替换PKCS7Padding，两者在AES中效果一致）
-            Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
+            // 2. 初始化 AES-128-CBC 解密器
+            Cipher cipher = Cipher.getInstance("AES/CBC/PKCS7Padding","BC");
             SecretKeySpec keySpec = new SecretKeySpec(sessionKeyBytes, "AES");
             IvParameterSpec ivSpec = new IvParameterSpec(ivBytes);
             cipher.init(Cipher.DECRYPT_MODE, keySpec, ivSpec);
@@ -302,9 +311,19 @@ public class WechatUtil {
             String decryptedStr = new String(decryptedBytes, StandardCharsets.UTF_8);
 
             // 4. 解析为 JSON 并返回（包含手机号等信息）
-            return JSONObject.parseObject(decryptedStr);
-        } catch (Exception e) {
-            throw new RuntimeException("解密用户手机号失败：" + e.getMessage(), e);
+            JSONObject jsonObject=JSONObject.parseObject(decryptedStr);
+            // 5.验证 watermark 中的 appid 是否匹配，防止伪造数据攻击
+            JSONObject watermark = jsonObject.getJSONObject("watermark");
+            if (watermark == null || !appid.equals(watermark.getString("appid"))) {
+                throw new SecurityException("解密数据校验失败：appid不匹配，数据可能已被篡改！");
+            }
+
+            return jsonObject;
+        } catch (IllegalArgumentException | SecurityException e) {
+            throw new RuntimeException(e.getMessage(), e);
+        }catch (Exception e) {
+            System.err.println("微信手机号解密底层异常: " + e.getMessage());
+            throw new RuntimeException("用户手机号解密失败，请检查登录态是否过期或参数是否正确");
         }
     }