feat : 新增sm4加密

package.json

@@ -81,7 +81,8 @@
     "react-dev-inspector": "^2.0.1",
     "react-dom": "^18.3.0",
     "react-helmet-async": "^2.0.0",
-    "react-highlight": "^0.15.0"
+    "react-highlight": "^0.15.0",
+    "sm-crypto": "^0.3.13"
   },
   "devDependencies": {
     "@ant-design/pro-cli": "^3.3.0",

src/app.tsx

@@ -17,6 +17,7 @@ import {
 import { PageEnum } from './enums/pagesEnums';
 import { stringify } from 'querystring';
 import { message } from 'antd';
+import { encrypt, decrypt, needEncrypt } from '@/utils/encrypt';
 
 const isDev = process.env.NODE_ENV === 'development';
 const loginOut = async () => {
@@ -217,18 +218,20 @@ export async function render(oldRender: () => void) {
 const checkRegion = 5 * 60 * 1000;
 export const request = {
   ...errorConfig,
-  // baseURL: process.env.NODE_ENV === 'development' ? '' : 'https://qd.zhaopinzao8dian.com/api',
+  baseURL: process.env.NODE_ENV === 'development' ? '' : 'https://qd.zhaopinzao8dian.com/api',
   // baseURL: 'http://39.98.44.136:8080',
-  baseURL:
+  // baseURL:
-    process.env.NODE_ENV === 'development'
+  //   process.env.NODE_ENV === 'development'
-      ? 'http://10.213.6.207:19010'
+  //     ? 'http://10.213.6.207:19010'
-      : 'http://10.213.6.207:19010/api',
+  //     : 'http://10.213.6.207:19010/api',
   requestInterceptors: [
-    (url: any, options: { headers: any }) => {
+    (url: any, options: { headers: any; data?: any; params?: any; method?: string }) => {
-      const headers = options.headers ? options.headers : [];
+      const headers = options.headers ? options.headers : {};
       console.log('request ====>:', url);
       const authHeader = headers['Authorization'];
       const isToken = headers['isToken'];
+
+      // 处理认证token
       if (!authHeader && isToken !== false) {
         const expireTime = getTokenExpireTime();
         if (expireTime) {
@@ -248,18 +251,82 @@ export const request = {
           clearSessionToken();
         }
       }
+
+      // 处理SM4加密 - 根据config的isEncrypt来判断
+      if (needEncrypt(options)) {
+        console.log('进行SM4加密处理');
+
+        let requestData = options.data;
+        let requestParams = options.params;
+
+        // 加密请求数据
+        if (requestData && Object.keys(requestData).length > 0) {
+          const jsonData = JSON.stringify(requestData);
+          const encryptedBody = encrypt(jsonData);
+          requestData = {
+            encrypted: true,
+            encryptedData: encryptedBody,
+            timestamp: Date.now(),
+          };
+        }
+
+        // 加密查询参数
+        if (requestParams && Object.keys(requestParams).length > 0) {
+          const jsonParams = JSON.stringify(requestParams);
+          const encryptedParams = encrypt(jsonParams);
+          requestParams = {
+            encrypted: true,
+            encryptedData: encryptedParams,
+            timestamp: Date.now(),
+          };
+        }
+
+        // 添加加密标识头
+        headers['X-Encrypted'] = 'true';
+
+        return {
+          url,
+          options: {
+            ...options,
+            headers,
+            data: requestData,
+            params: requestParams,
+          },
+        };
+      }
+
+      // 处理开发环境API路径
       if (process.env.NODE_ENV !== 'development') {
         if (url.startsWith('/api')) {
           url = url.replace(/^\/api/, '');
         }
       }
-      return { url, options };
+
+      return { url, options: { ...options, headers } };
     },
   ],
   responseInterceptors: [
     (response) => {
       // 不再需要异步处理读取返回体内容，可直接在data中读出，部分字段可在 config 中找到
       const { data = {} as any, config } = response;
+
+      // 检查是否需要解密
+      const isEncrypted = data.encrypted;
+
+      if (isEncrypted && data.encryptedData) {
+        console.log('进行SM4解密处理');
+        try {
+          // 解密响应数据
+          const decryptedData = decrypt(data.encryptedData);
+          response.data =
+            typeof decryptedData === 'string' ? JSON.parse(decryptedData) : decryptedData;
+        } catch (error) {
+          console.error('响应解密失败:', error);
+          // 如果解密失败，保持原始数据
+        }
+      }
+
+      // 处理业务状态码
       switch (data.code) {
         case 401:
           loginOut();
@@ -268,8 +335,7 @@ export const request = {
       if (data.code !== 200 && data.msg) {
         message.info(data.msg);
       }
-      // console.log('data: ', data)
+
-      // console.log('config: ', config)
       return response;
     },
   ],

src/services/mobileusers/list.ts

@@ -5,6 +5,7 @@ export async function getCmsAppUserList(params?: API.MobileUser.ListParams) {
   return request<API.MobileUser.ListResult>(`/api/cms/appUser/list`, {
     method: 'GET',
     params: params,
+    isEncrypt: true,
   });
 }
 

src/services/resumeLibrary/resumeList.ts

@@ -4,11 +4,13 @@ export async function getResumeList(params?: API.AppUser.ListParams) {
   return request<API.AppUser.ResumePageResult>(`/api/cms/appUser/getResumeList`, {
     method: 'GET',
     params: params,
+    isEncrypt: true,
   });
 }
 
 export async function getResumeDetail(userId: string) {
   return request<API.AppUser.ResumeDetailResult>(`/api/cms/appUser/getResumeDetail/${userId}`, {
     method: 'GET',
+    isEncrypt: true,
   });
 }

src/services/system/auth.ts

@@ -22,6 +22,7 @@ export async function login(body: API.LoginParams, options?: Record<string, any>
       'Content-Type': 'application/json',
     },
     data: body,
+    isEncrypt: true,
     ...(options || {}),
   });
 }

src/services/system/user.ts

@@ -4,14 +4,18 @@ import { DataNode } from 'antd/es/tree';
 import { downLoadXlsx } from '@/utils/downloadfile';
 
 // 查询用户信息列表
-export async function getUserList(params?: API.System.UserListParams, options?: { [key: string]: any }) {
+export async function getUserList(
+  params?: API.System.UserListParams,
+  options?: { [key: string]: any },
+) {
   return request<API.System.UserPageResult>('/api/system/user/list', {
     method: 'GET',
     headers: {
       'Content-Type': 'application/json;charset=UTF-8',
     },
     params,
-    ...(options || {})
+    isEncrypt: true,
+    ...(options || {}),
   });
 }
 
@@ -19,7 +23,7 @@ export async function getUserList(params?: API.System.UserListParams, options?:
 export function getUser(userId: number, options?: { [key: string]: any }) {
   return request<API.System.UserInfoResult>(`/api/system/user/${userId}`, {
     method: 'GET',
-    ...(options || {})
+    ...(options || {}),
   });
 }
 
@@ -31,7 +35,8 @@ export async function addUser(params: API.System.User, options?: { [key: string]
       'Content-Type': 'application/json;charset=UTF-8',
     },
     data: params,
-    ...(options || {})
+    isEncrypt: true,
+    ...(options || {}),
   });
 }
 
@@ -43,7 +48,7 @@ export async function updateUser(params: API.System.User, options?: { [key: stri
       'Content-Type': 'application/json;charset=UTF-8',
     },
     data: params,
-    ...(options || {})
+    ...(options || {}),
   });
 }
 
@@ -51,7 +56,7 @@ export async function updateUser(params: API.System.User, options?: { [key: stri
 export async function removeUser(ids: string, options?: { [key: string]: any }) {
   return request<API.Result>(`/api/system/user/${ids}`, {
     method: 'DELETE',
-    ...(options || {})
+    ...(options || {}),
   });
 }
 
@@ -64,74 +69,73 @@ export function exportUser(params?: API.System.UserListParams, options?: { [key:
 export function changeUserStatus(userId: number, status: string) {
   const data = {
     userId,
-    status
+    status,
-  }
+  };
   return request<API.Result>('/api/system/user/changeStatus', {
     method: 'put',
-    data: data
+    data: data,
-  })
+  });
 }
 
 // 查询用户个人信息
 export function getUserProfile() {
   return request('/api/system/user/profile', {
-    method: 'get'
+    method: 'get',
-  })
+  });
 }
 
 export function updateUserProfile(data: API.CurrentUser) {
   return request<API.Result>('/api/system/user/profile', {
     method: 'put',
-    data: data
+    data: data,
-  })
+  });
 }
 
 // 用户密码重置
 export function resetUserPwd(userId: number, password: string) {
   const data = {
     userId,
-    password
+    password,
-  }
+  };
   return request<API.Result>('/api/system/user/resetPwd', {
     method: 'put',
-    data: data
+    data: data,
-  })
+  });
 }
 
 // 用户t个人密码重置
 export function updateUserPwd(oldPassword: string, newPassword: string) {
   const data = {
     oldPassword,
-    newPassword
+    newPassword,
-  }
+  };
   return request<API.Result>('/api/system/user/profile/updatePwd', {
     method: 'put',
-    params: data
+    params: data,
-  })
+  });
 }
 
 // 用户头像上传
 export function uploadAvatar(data: any) {
   return request('/api/system/user/profile/avatar', {
     method: 'post',
-    data: data
+    data: data,
-  })
+  });
 }
 
-
 // 查询授权角色
 export function getAuthRole(userId: number) {
   return request('/system/user/authRole/' + userId, {
-    method: 'get'
+    method: 'get',
-  })
+  });
 }
 
 // 保存授权角色
 export function updateAuthRole(data: Record<string, any>) {
   return request('/system/user/authRole', {
     method: 'put',
-    params: data
+    params: data,
-  })
+  });
 }
 
 // 获取数据列表

src/utils/encrypt.ts

@@ -0,0 +1,47 @@
+import { sm4 } from 'sm-crypto';
+
+const pwdKey = '86C63180C1306ABC4D8F989E0A0BC9F3'; // 32位十六进制密钥，与移动端一致
+
+/**
+ * 加密文本
+ * @param text 待加密文本
+ */
+export function encrypt(text: any): string {
+  if (typeof text !== 'string') {
+    text = JSON.stringify(text);
+  }
+  return sm4.encrypt(text, pwdKey, {
+    output: 'string',
+    padding: 'pkcs#5',
+  });
+}
+
+/**
+ * 解密密文
+ * @param text 待解密密文
+ */
+export function decrypt(text: string): any {
+  try {
+    const decrypted = sm4.decrypt(text, pwdKey, {
+      output: 'string',
+      padding: 'pkcs#5',
+    });
+
+    // 尝试解析为JSON，如果不是JSON则直接返回字符串
+    try {
+      return JSON.parse(decrypted);
+    } catch {
+      return decrypted;
+    }
+  } catch (error) {
+    console.error('SM4解密失败:', error);
+    return text; // 解密失败返回原文本
+  }
+}
+
+/**
+ * 判断是否需要加密处理
+ */
+export function needEncrypt(options: any): boolean {
+  return options?.isEncrypt === true;
+}