fixed 建木认证code加密生成,key=Client Secret

app/helpers/projects_helper.rb

@@ -109,22 +109,25 @@ module ProjectsHelper
   #  "owner": "xxx",  // 用户登录名或组织账号
   #  "timestamp": xxx // 当前时间戳，单位：毫秒
   # }
-  # 加密方式：把数据序列化成JSON字符串，用Client Secret对称加密（模式：AES/ECB/PKCS5Padding）
+  # 加密方式：把数据序列化成JSON字符串，用Client Secret和固定IV（5183666c72eec9e4）对称加密（模式：AES-256-CBC）
   #
   # API：
   # GET：https://ci-v3.test.jianmuhub.com/oauth2/authorize?code=${encode(密文)}
   def jianmu_devops_code(project, user)
     data = { userId: user.id, ref: project.identifier, owner: project.owner.login, timestamp: Time.now.to_i * 1000 }
-    aes_encrypt(data.to_json)
+    uid = EduSetting.get("jianmu_oauth2_uid") || 'oedKx4v-WyAfu2oy_AsFpFQCH_-g91ms0PQKN7YcEuw'
+    app = Doorkeeper::Application.find_by(uid: uid)
+    key = app&.secret || 'bf3c199c2470cb477d907b1e0917c17b'
+    aes_encrypt(key, data.to_json)
   end
 
-  def aes_encrypt(des_text)
+  def aes_encrypt(key, des_text)
     # des_text='{"access_key_id":"STS.NTuC9RVmWfJqj3JkcMzPnDf7X","access_key_secret":"E8NxRZWGNxxMfwgt5nFLnBFgg6AzgXCZkSNCyqygLuHM","end_point":"oss-accelerate.aliyuncs.com","security_token":"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","bucket":"edu-bigfiles1","region":"oss-cn-hangzhou","callback_url":"https://data.educoder.net/api/buckets/callback.json","bucket_host":"data.educoder.net"}'
     # des = OpenSSL::Cipher::Cipher.new('aes-256-ctr')
     des = OpenSSL::Cipher.new('AES-256-CBC')
     des.encrypt
     # des.padding =
-    des.key = 'bf3c199c2470cb477d907b1e0917c17b'
+    des.key = key
     des.iv = "5183666c72eec9e4"
     result = des.update(des_text)
     result << des.final