{"id":349,"date":"2026-06-20T07:42:11","date_gmt":"2026-06-19T23:42:11","guid":{"rendered":"http:\/\/www.longxiapro.com\/?p=349"},"modified":"2026-06-20T07:42:11","modified_gmt":"2026-06-19T23:42:11","slug":"liangzimixin-v0379-liangzimixin-im-chajiandicengercizhonggougaizaoquanfanganyuanshengloudongchaijie","status":"publish","type":"post","link":"https:\/\/www.longxiapro.com\/index.php\/349\/","title":{"rendered":"liangzimixin v0.3.79 \u91cf\u5b50\u5bc6\u4fe1 IM \u63d2\u4ef6\u5e95\u5c42\u4e8c\u6b21\u91cd\u6784\u6539\u9020\u5168\u65b9\u6848\uff5c\u539f\u751f\u6f0f\u6d1e\u62c6\u89e3 + \u5168\u5957\u53ef\u76f4\u63a5\u6295\u4ea7\u4ee3\u7801\u4fee\u6539\u624b\u518c"},"content":{"rendered":"\n

\u4e00\u3001liangzimixin v0.3.79 \u63d2\u4ef6\u539f\u751f\u57fa\u7840\u8bf4\u660e<\/h4>\n\n\n\n

liangzimixin v0.3.79 \u662f OpenClaw \u5e73\u53f0\u4e13\u5c5e\u91cf\u5b50\u52a0\u5bc6\u5373\u65f6\u901a\u4fe1\u6e20\u9053\u63d2\u4ef6\uff0c\u4e3b\u6253\u7aef\u5230\u7aef\u91cf\u5b50\u5bc6\u94a5\u5206\u53d1\u52a0\u5bc6\u901a\u4fe1\u94fe\u8def\uff0c\u539f\u751f\u8986\u76d6\u6587\u672c\u6d88\u606f\u6536\u53d1\u3001\u6d88\u606f\u64a4\u56de\u3001\u9644\u4ef6\u6587\u4ef6\u4f20\u8f93\u3001\u8fde\u63a5\u65ad\u7ebf\u81ea\u52a8\u91cd\u8fde\u3001\u5ba2\u6237\u7aef\u63a8\u9001\u901a\u77e5\u3001OAuth \u7b2c\u4e09\u65b9\u8eab\u4efd\u9274\u6743\u516d\u5927\u57fa\u7840 IM \u80fd\u529b\uff0c\u4f5c\u4e3a\u5e73\u53f0\u9ad8\u5b89\u5168\u79c1\u5bc6\u901a\u4fe1\u901a\u9053\uff0c\u9762\u5411\u653f\u4f01\u3001\u9690\u79c1\u654f\u611f\u4e1a\u52a1\u573a\u666f\u627f\u8f7d\u52a0\u5bc6\u5bf9\u8bdd\u3001\u673a\u5bc6\u6587\u4ef6\u4f20\u8f93\u9700\u6c42\u3002<\/p>\n\n\n\n

\u5f53\u524d 0.3.79 \u6d4b\u8bd5\u7a33\u5b9a\u7248\u4ec5\u5b8c\u6210\u57fa\u7840\u901a\u4fe1\u94fe\u8def\u529f\u80fd\u6253\u901a\uff0c\u91cf\u5b50\u52a0\u5bc6\u94fe\u8def\u3001\u4f20\u8f93\u6821\u9a8c\u3001\u6743\u9650\u9694\u79bb\u3001\u5f02\u5e38\u5bb9\u9519\u3001\u5bc6\u94a5\u751f\u547d\u5468\u671f\u3001\u6587\u4ef6\u5b89\u5168\u4f20\u8f93\u3001\u4f1a\u8bdd\u98ce\u63a7\u5747\u672a\u505a\u6df1\u5ea6\u5de5\u4e1a\u7ea7\u52a0\u56fa\uff0c\u9ad8\u9891\u957f\u8fde\u63a5\u3001\u5927\u6587\u4ef6\u4f20\u8f93\u3001\u591a\u7ec8\u7aef\u540c\u65f6\u767b\u5f55\u573a\u666f\u4e0b\u66b4\u9732\u51fa\u52a0\u5bc6\u5931\u6548\u3001\u5bc6\u94a5\u6cc4\u9732\u3001\u6587\u4ef6\u7be1\u6539\u3001\u4f1a\u8bdd\u52ab\u6301\u3001\u63a8\u9001\u660e\u6587\u6cc4\u9732\u7b49\u591a\u91cd\u9ad8\u5371\u7f3a\u9677\uff0c\u56e0\u6b64\u843d\u5730\u5168\u5957\u4e13\u9879\u4e8c\u6b21\u6539\u9020\u5347\u7ea7\u8ba1\u5212\uff0c\u4ece\u91cf\u5b50\u5bc6\u94a5\u7ba1\u7406\u3001\u957f\u8fde\u63a5\u8c03\u5ea6\u3001\u6d88\u606f\u52a0\u89e3\u5bc6\u3001\u6587\u4ef6\u5b89\u5168\u4f20\u8f93\u3001OAuth \u9274\u6743\u3001\u63a8\u9001\u52a0\u5bc6\u3001\u4f1a\u8bdd\u98ce\u63a7\u4e03\u5927\u5e95\u5c42\u6a21\u5757\u5b8c\u6574\u91cd\u6784\uff0c\u6839\u9664\u539f\u751f\u5b89\u5168\u4e0e\u6027\u80fd\u77ed\u677f\u3002<\/p>\n\n\n\n

\u4e8c\u3001\u539f\u7248 liangzimixin v0.3.79 \u4e03\u5927\u6838\u5fc3\u539f\u751f\u7f3a\u9677<\/h4>\n\n\n\n

1. \u91cf\u5b50\u5bc6\u94a5\u751f\u547d\u5468\u671f\u7ba1\u7406\u7a7a\u767d\uff0c\u5bc6\u94a5\u590d\u7528\u3001\u8fc7\u671f\u4e0d\u8f6e\u6362\u5b58\u5728\u7a83\u542c\u98ce\u9669<\/h4>\n\n\n\n

\u539f\u7248\u4ec5\u5728\u4f1a\u8bdd\u521d\u6b21\u5efa\u7acb\u65f6\u751f\u6210\u4e00\u6b21\u91cf\u5b50\u534f\u5546\u5bc6\u94a5\uff0c\u5168\u7a0b\u4f1a\u8bdd\u590d\u7528\u540c\u4e00\u7ec4\u5bc6\u94a5\uff0c\u65e0\u5b9a\u65f6\u81ea\u52a8\u8f6e\u6362\u673a\u5236\uff1b\u5bc6\u94a5\u660e\u6587\u7f13\u5b58\u81f3\u672c\u5730\u5185\u5b58\uff0c\u8fdb\u7a0b\u91cd\u542f\u3001\u591a\u7ec8\u7aef\u767b\u5f55\u65f6\u5bc6\u94a5\u76f4\u63a5\u590d\u7528\u65e7\u6570\u636e\uff1b\u65e0\u5bc6\u94a5\u5931\u6548\u3001\u9500\u6bc1\u3001\u540a\u9500\u903b\u8f91\uff0c\u4f1a\u8bdd\u65ad\u5f00\u5bc6\u94a5\u4e0d\u6e05\u9664\uff0c\u672c\u5730\u7f13\u5b58\u53ef\u88ab\u8bfb\u53d6\u7834\u89e3\uff0c\u957f\u671f\u6301\u7eed\u901a\u4fe1\u5b58\u5728\u4e2d\u95f4\u4eba\u7a83\u542c\u6f0f\u6d1e\u3002<\/p>\n\n\n\n

2. \u957f\u8fde\u63a5\u5355\u5b9e\u4f8b\u4e32\u884c\u8c03\u5ea6\uff0c\u591a\u7ec8\u7aef\u5e76\u53d1\u8fde\u63a5\u963b\u585e\uff0c\u81ea\u52a8\u91cd\u8fde\u903b\u8f91\u7b80\u964b<\/h4>\n\n\n\n

\u5e95\u5c42 IM \u8fde\u63a5\u4ec5\u7ef4\u62a4\u5355\u4e00\u4e3b\u7ebf\u7a0b\u6536\u53d1\u6d88\u606f\uff0c\u591a\u8bbe\u5907\u540c\u65f6\u767b\u5f55\u3001\u767e\u4eba\u5728\u7ebf\u4f1a\u8bdd\u65f6\u6d88\u606f\u6392\u961f\u5806\u79ef\uff0c\u63a8\u9001\u5ef6\u8fdf\u4e25\u91cd\uff1b\u539f\u751f\u91cd\u8fde\u4ec5\u56fa\u5b9a 3 \u79d2\u95f4\u9694\u91cd\u8bd5\uff0c\u65e0\u6307\u6570\u9000\u907f\u3001\u7194\u65ad\u673a\u5236\uff0c\u670d\u52a1\u5668\u5b95\u673a\u540e\u65e0\u9650\u9ad8\u9891\u91cd\u8fde\u9020\u6210\u63a5\u53e3\u9650\u6d41\uff1b\u65ad\u7ebf\u8fc7\u7a0b\u4e2d\u672a\u7f13\u5b58\u79bb\u7ebf\u6d88\u606f\uff0c\u65ad\u8fde\u671f\u95f4\u5168\u90e8\u6d88\u606f\u76f4\u63a5\u4e22\u5931\u3002<\/p>\n\n\n\n

3. \u6d88\u606f\u52a0\u89e3\u5bc6\u4ec5\u5916\u5c42\u5c01\u88c5\u91cf\u5b50\u5bc6\u94a5\uff0c\u7f3a\u5c11\u5b8c\u6574\u6027\u6821\u9a8c\uff0c\u6613\u7be1\u6539\u4f2a\u9020<\/h3>\n\n\n\n

\u6240\u6709\u6587\u672c\u6d88\u606f\u4ec5\u5b8c\u6210\u5355\u6b21\u91cf\u5b50\u52a0\u5bc6\uff0c\u672a\u9644\u52a0\u6d88\u606f\u54c8\u5e0c\u6821\u9a8c\u503c\uff0c\u653b\u51fb\u8005\u53ef\u62e6\u622a\u5bc6\u6587\u7be1\u6539\u5185\u5bb9\u540e\u8f6c\u53d1\uff0c\u5ba2\u6237\u7aef\u65e0\u6cd5\u8bc6\u522b\u6d88\u606f\u4f2a\u9020\uff1b\u64a4\u56de\u6d88\u606f\u65e0\u7b7e\u540d\u6821\u9a8c\uff0c\u4efb\u610f\u7ec8\u7aef\u53ef\u4f2a\u9020\u64a4\u56de\u6307\u4ee4\u5220\u9664\u4ed6\u4eba\u4f1a\u8bdd\u8bb0\u5f55\uff1b\u65e0\u6d88\u606f\u5e8f\u5217\u53f7\u9632\u91cd\u653e\u673a\u5236\uff0c\u91cd\u590d\u63a8\u9001\u5bc6\u6587\u4f1a\u9020\u6210\u5927\u91cf\u91cd\u590d\u6d88\u606f\u5237\u5c4f\u3002<\/p>\n\n\n\n

4. \u6587\u4ef6\u4f20\u8f93\u4e0d\u5206\u5757\u52a0\u5bc6\uff0c\u5927\u6587\u4ef6\u4e00\u6b21\u6027\u52a0\u8f7d\u5185\u5b58\uff0c\u4f20\u8f93\u6613\u7be1\u6539\u3001\u6cc4\u9732<\/h4>\n\n\n\n

\u6587\u4ef6\u4f20\u8f93\u903b\u8f91\u4e3a\u5b8c\u6574\u6587\u4ef6\u4e00\u6b21\u6027\u8bfb\u5165\u5185\u5b58\u52a0\u5bc6\uff0c100MB \u4ee5\u4e0a\u5927\u6587\u4ef6\u76f4\u63a5\u5f15\u53d1\u5185\u5b58\u6ea2\u51fa\u5d29\u6e83\uff1b\u6587\u4ef6\u4ec5\u6574\u4f53\u52a0\u5bc6\uff0c\u65e0\u5206\u7247\u72ec\u7acb\u6821\u9a8c\u54c8\u5e0c\uff0c\u4f20\u8f93\u4e2d\u65ad\u3001\u4e22\u5305\u540e\u91cd\u4f20\u65e0\u6cd5\u5b9a\u4f4d\u635f\u574f\u5206\u7247\uff1b\u6587\u4ef6\u4e34\u65f6\u7f13\u5b58\u672a\u52a0\u5bc6\u5b58\u50a8\uff0c\u672c\u5730\u53ef\u76f4\u63a5\u8bfb\u53d6\u539f\u59cb\u660e\u6587\u9644\u4ef6\uff0c\u673a\u5bc6\u6587\u4ef6\u5b58\u5728\u6cc4\u9732\u98ce\u9669\u3002<\/p>\n\n\n\n

5. OAuth \u8ba4\u8bc1\u8f7b\u91cf\u5316\u65e0\u591a\u5c42\u9632\u62a4\uff0c\u5b58\u5728\u51ed\u8bc1\u52ab\u6301\u3001\u8d8a\u6743\u767b\u5f55\u6f0f\u6d1e<\/h4>\n\n\n\n

OAuth \u6d41\u7a0b\u4ec5\u5355\u6b21\u83b7\u53d6 token \u540e\u6c38\u4e45\u6709\u6548\uff0c\u65e0\u77ed\u671f\u65f6\u6548\u5237\u65b0\u673a\u5236\uff1b\u767b\u5f55\u51ed\u8bc1\u660e\u6587\u5b58\u5165\u672c\u5730\u914d\u7f6e\uff0c\u65e0\u52a0\u5bc6\u5b58\u50a8\uff1b\u672a\u7ed1\u5b9a\u8bbe\u5907\u6307\u7eb9\u3001\u4f1a\u8bdd\u7ed1\u5b9a\u8bbe\u5907\u6807\u8bc6\uff0c\u7a83\u53d6 token \u540e\u53ef\u4efb\u610f\u5f02\u5730\u767b\u5f55\u52ab\u6301\u4f1a\u8bdd\uff1b\u7f3a\u5c11\u767b\u5f55\u5f02\u5e38\u98ce\u63a7\uff08\u5f02\u5730\u3001\u65b0\u8bbe\u5907\u767b\u5f55\u65e0\u544a\u8b66\u62e6\u622a\uff09\u3002<\/p>\n\n\n\n

6. \u5ba2\u6237\u7aef\u63a8\u9001\u901a\u77e5\u660e\u6587\u4e0b\u53d1\uff0c\u654f\u611f\u804a\u5929\u5185\u5bb9\u76f4\u63a5\u66b4\u9732\u7cfb\u7edf\u901a\u77e5\u680f<\/h4>\n\n\n\n

\u63a8\u9001\u63a8\u9001\u6a21\u5757\u4ec5\u52a0\u5bc6\u901a\u9053\u5185\u6d88\u606f\uff0c\u63a8\u9001\u63a8\u9001\u8f7d\u4f53\u4e3a\u660e\u6587\u4f20\u8f93\uff0c\u4f1a\u8bdd\u5173\u952e\u8bcd\u3001\u6d88\u606f\u6458\u8981\u3001\u53d1\u9001\u4eba ID \u76f4\u63a5\u4ee5\u660e\u6587\u63a8\u9001\u81f3\u8bbe\u5907\u901a\u77e5\u680f\uff0c\u624b\u673a\u3001\u684c\u9762\u9501\u5c4f\u754c\u9762\u53ef\u76f4\u63a5\u67e5\u770b\u673a\u5bc6\u804a\u5929\u5185\u5bb9\uff0c\u5b8c\u5168\u8fdd\u80cc\u7aef\u5230\u7aef\u9690\u79c1\u5b89\u5168\u8bbe\u8ba1\u521d\u8877\u3002<\/p>\n\n\n\n

7. \u65e0\u4f1a\u8bdd\u98ce\u63a7\u4e0e\u64cd\u4f5c\u5ba1\u8ba1\u65e5\u5fd7\uff0c\u5165\u4fb5\u3001\u5f02\u5e38\u64cd\u4f5c\u65e0\u6cd5\u6eaf\u6e90<\/h4>\n\n\n\n

\u539f\u7248\u65e0\u5b8c\u6574\u901a\u4fe1\u5ba1\u8ba1\u8bb0\u5f55\uff0c\u5bc6\u94a5\u751f\u6210 \/ \u9500\u6bc1\u3001\u6587\u4ef6\u4e0a\u4f20\u4e0b\u8f7d\u3001\u767b\u5f55\u767b\u51fa\u3001\u64a4\u56de\u3001\u5f02\u5730\u767b\u5f55\u5168\u90e8\u65e0\u65e5\u5fd7\u7559\u5b58\uff1b\u65e0\u5f02\u5e38\u884c\u4e3a\u68c0\u6d4b\uff08\u9ad8\u9891\u6279\u91cf\u53d1\u6d88\u606f\u3001\u5f02\u5730\u591a\u7ec8\u7aef\u540c\u65f6\u767b\u5f55\u3001\u77ed\u65f6\u95f4\u5927\u91cf\u6587\u4ef6\u4f20\u8f93\uff09\uff0c\u906d\u9047\u8d26\u53f7\u52ab\u6301\u3001\u6570\u636e\u7a83\u53d6\u540e\u65e0\u6cd5\u5b9a\u4f4d\u653b\u51fb\u94fe\u8def\u3002<\/p>\n\n\n\n

\u4e09\u3001liangzimixin \u4e13\u5c5e\u4e8c\u6b21\u6539\u9020\u5347\u7ea7\u5b8c\u6574\u6267\u884c\u8ba1\u5212<\/h4>\n\n\n\n

\uff08\u4e00\uff09\u6539\u9020\u6838\u5fc3\u76ee\u6807<\/h4>\n\n\n\n
    \n
  1. \u642d\u5efa\u5b8c\u6574\u91cf\u5b50\u5bc6\u94a5\u751f\u547d\u5468\u671f\u7ba1\u63a7\u4f53\u7cfb\uff0c\u5b9a\u65f6\u81ea\u52a8\u8f6e\u6362\u3001\u4f1a\u8bdd\u9500\u6bc1\u5f3a\u5236\u6e05\u5bc6\u3001\u5bc6\u94a5\u52a0\u5bc6\u7f13\u5b58\uff0c\u675c\u7edd\u5bc6\u94a5\u590d\u7528\u6cc4\u9732\uff1b<\/li>\n\n\n\n
  2. \u91cd\u6784\u591a\u8fde\u63a5\u5f02\u6b65\u7ebf\u7a0b\u6c60\uff0c\u79bb\u7ebf\u6d88\u606f\u6301\u4e45\u7f13\u5b58\uff0c\u6307\u6570\u9000\u907f\u7194\u65ad\u5f0f\u91cd\u8fde\uff0c\u652f\u6301\u767e\u7ea7\u7ec8\u7aef\u7a33\u5b9a\u5e76\u53d1\u5728\u7ebf\uff1b<\/li>\n\n\n\n
  3. \u65b0\u589e\u6d88\u606f\u54c8\u5e0c\u9632\u7be1\u6539\u3001\u5e8f\u5217\u53f7\u9632\u91cd\u653e\u3001\u64cd\u4f5c\u7b7e\u540d\u6821\u9a8c\uff0c\u62e6\u622a\u4f2a\u9020\u64a4\u56de\u3001\u7be1\u6539\u5bc6\u6587\u3001\u91cd\u590d\u6d88\u606f\u653b\u51fb\uff1b<\/li>\n\n\n\n
  4. \u6587\u4ef6\u5206\u7247\u6d41\u5f0f\u52a0\u5bc6\u4f20\u8f93\uff0c\u5206\u7247\u72ec\u7acb\u54c8\u5e0c\u6821\u9a8c\uff0c\u52a0\u5bc6\u4e34\u65f6\u5b58\u50a8\uff0c\u5927\u6587\u4ef6\u65e0\u5185\u5b58\u6ea2\u51fa\u98ce\u9669\uff0c\u675c\u7edd\u9644\u4ef6\u660e\u6587\u6cc4\u9732\uff1b<\/li>\n\n\n\n
  5. OAuth \u5206\u5c42\u9274\u6743\u52a0\u56fa\uff0c\u77ed\u671f\u65f6\u6548 token + \u81ea\u52a8\u5237\u65b0\u3001\u8bbe\u5907\u6307\u7eb9\u7ed1\u5b9a\u3001\u5f02\u5730\u767b\u5f55\u98ce\u9669\u62e6\u622a\u3001\u51ed\u8bc1\u52a0\u5bc6\u672c\u5730\u5b58\u50a8\uff1b<\/li>\n\n\n\n
  6. \u5168\u94fe\u8def\u63a8\u9001\u5185\u5bb9\u52a0\u5bc6\u8131\u654f\uff0c\u901a\u77e5\u680f\u4ec5\u5c55\u793a\u6a21\u7cca\u6458\u8981\uff0c\u654f\u611f\u5185\u5bb9\u4e0d\u843d\u5730\u660e\u6587\u63a8\u9001\uff1b<\/li>\n\n\n\n
  7. \u5168\u7ef4\u5ea6\u901a\u4fe1\u5ba1\u8ba1\u65e5\u5fd7 + \u5f02\u5e38\u98ce\u63a7\u68c0\u6d4b\uff0c\u5b9e\u65f6\u8bc6\u522b\u52ab\u6301\u3001\u6279\u91cf\u4f20\u8f93\u3001\u5f02\u5730\u767b\u5f55\u7b49\u98ce\u9669\u884c\u4e3a\u5e76\u544a\u8b66\uff1b<\/li>\n\n\n\n
  8. \u5b8c\u5168\u517c\u5bb9\u539f\u7248\u91cf\u5b50\u901a\u4fe1\u534f\u8bae\u3001IM \u6536\u53d1\u63a5\u53e3\u3001OAuth \u5bf9\u63a5\u903b\u8f91\uff0c\u4e0a\u5c42\u4e1a\u52a1\u8c03\u7528\u65e0\u9700\u6539\u52a8\uff0c\u65e0\u7f1d\u5e73\u6ed1\u5347\u7ea7\u3002<\/li>\n<\/ol>\n\n\n\n

    \uff08\u4e8c\uff09\u4e8c\u6b21\u6539\u9020\u5bf9\u6bd4\u539f\u7248\u6838\u5fc3\u4f18\u52bf<\/h4>\n\n\n\n
      \n
    1. \u91cf\u5b50\u52a0\u5bc6\u5b89\u5168\u7b49\u7ea7\u8d28\u53d8<\/strong> \u5bc6\u94a5\u5b9a\u65f6\u8f6e\u6362 + \u52a0\u5bc6\u5185\u5b58\u7f13\u5b58 + \u4f1a\u8bdd\u9500\u6bc1\u81ea\u52a8\u540a\u9500\uff0c\u6574\u5957\u91cf\u5b50\u5bc6\u94a5\u95ed\u73af\u7ba1\u7406\uff0c\u4ece\u6e90\u5934\u6d88\u9664\u957f\u671f\u901a\u4fe1\u7a83\u542c\u98ce\u9669\uff0c\u7b26\u5408\u9ad8\u5bc6\u7ea7\u901a\u4fe1\u5b89\u5168\u89c4\u8303\u3002<\/li>\n\n\n\n
    2. \u9ad8\u5e76\u53d1\u957f\u8fde\u63a5\u7a33\u5b9a\u53ef\u9760<\/strong> \u591a\u7ebf\u7a0b\u8fde\u63a5\u6c60\u627f\u8f7d\u591a\u7ec8\u7aef\u540c\u65f6\u5728\u7ebf\uff0c\u79bb\u7ebf\u6d88\u606f\u6301\u4e45\u4fdd\u5b58\u4e0d\u4e22\u5931\uff0c\u6545\u969c\u91cd\u8fde\u6307\u6570\u9000\u907f\uff0c\u4e0d\u4f1a\u89e6\u53d1\u670d\u52a1\u9650\u6d41\uff0c\u767e\u4e07\u7ea7\u6d88\u606f\u65e0\u5806\u79ef\u5ef6\u8fdf\u3002<\/li>\n\n\n\n
    3. \u6d88\u606f\u9632\u653b\u51fb\u9632\u62a4\u62c9\u6ee1<\/strong> \u54c8\u5e0c\u5b8c\u6574\u6027\u6821\u9a8c\u3001\u6d88\u606f\u5e8f\u5217\u53f7\u9632\u91cd\u653e\u3001\u6307\u4ee4\u7b7e\u540d\u6821\u9a8c\u4e09\u91cd\u9632\u62a4\uff0c\u5f7b\u5e95\u675c\u7edd\u5bc6\u6587\u7be1\u6539\u3001\u4f2a\u9020\u64a4\u56de\u3001\u91cd\u590d\u6d88\u606f\u7b49\u4e2d\u95f4\u4eba\u653b\u51fb\u624b\u6bb5\u3002<\/li>\n\n\n\n
    4. \u5927\u6587\u4ef6\u4f20\u8f93\u5b89\u5168\u8f7b\u91cf\u5316<\/strong> \u6d41\u5f0f\u5206\u7247\u52a0\u5bc6\uff0c\u5206\u7247\u72ec\u7acb\u6821\u9a8c\uff0c\u8d85\u5927\u6587\u4ef6\u4e0d\u4f1a\u5360\u7528\u9ad8\u989d\u5185\u5b58\uff0c\u672c\u5730\u7f13\u5b58\u5168\u7a0b\u52a0\u5bc6\uff0c\u673a\u5bc6\u9644\u4ef6\u4e0d\u4f1a\u51fa\u73b0\u660e\u6587\u6cc4\u9732\u3002<\/li>\n\n\n\n
    5. \u767b\u5f55\u9274\u6743\u98ce\u63a7\u95ed\u73af<\/strong> \u65f6\u6548 Token\u3001\u8bbe\u5907\u7ed1\u5b9a\u3001\u5f02\u5730\u767b\u5f55\u544a\u8b66\u3001\u52a0\u5bc6\u5b58\u50a8\u51ed\u8bc1\u591a\u91cd\u9632\u62a4\uff0c\u7a83\u53d6\u767b\u5f55\u51ed\u8bc1\u4e5f\u65e0\u6cd5\u52ab\u6301\u539f\u6709\u4f1a\u8bdd\uff0c\u5927\u5e45\u964d\u4f4e\u8d26\u53f7\u88ab\u76d7\u98ce\u9669\u3002<\/li>\n\n\n\n
    6. \u63a8\u9001\u9690\u79c1\u8131\u654f\u4fdd\u62a4<\/strong> \u63a8\u9001\u5168\u7a0b\u52a0\u5bc6\u8131\u654f\uff0c\u9501\u5c4f\u901a\u77e5\u4e0d\u5c55\u793a\u5b8c\u6574\u654f\u611f\u5185\u5bb9\uff0c\u517c\u987e\u6d88\u606f\u63d0\u9192\u4e0e\u901a\u4fe1\u9690\u79c1\uff0c\u9002\u914d\u6d89\u5bc6\u529e\u516c\u8bbe\u5907\u573a\u666f\u3002<\/li>\n\n\n\n
    7. \u5168\u94fe\u8def\u53ef\u5ba1\u8ba1\u53ef\u98ce\u63a7<\/strong> \u5b8c\u6574\u64cd\u4f5c\u65e5\u5fd7\u6c38\u4e45\u7559\u5b58\uff0c\u81ea\u52a8\u8bc6\u522b\u5f02\u5e38\u901a\u4fe1\u884c\u4e3a\u5e76\u5b9e\u65f6\u544a\u8b66\uff0c\u5165\u4fb5\u3001\u6570\u636e\u7a83\u53d6\u884c\u4e3a\u53ef\u5b8c\u6574\u6eaf\u6e90\u6392\u67e5\u3002<\/li>\n<\/ol>\n\n\n\n

      \u56db\u3001\u5b8c\u6574\u5e95\u5c42\u4ee3\u7801\u4e8c\u6b21\u4fee\u6539\u65b9\u6848\uff08\u53ef\u76f4\u63a5\u590d\u5236\u90e8\u7f72\uff09<\/h4>\n\n\n\n

      \u6539\u9020\u6d89\u53ca\u6838\u5fc3\u6587\u4ef6\u6e05\u5355<\/h4>\n\n\n\n

      \u91cf\u5b50\u5bc6\u94a5\u751f\u547d\u5468\u671f\u7ba1\u7406 quantum-key-mgr.js<\/code>\u3001\u957f\u8fde\u63a5\u8c03\u5ea6 im-connection-pool.js<\/code>\u3001\u6d88\u606f\u52a0\u89e3\u5bc6\u6821\u9a8c msg-crypto-core.js<\/code>\u3001\u6587\u4ef6\u5206\u7247\u4f20\u8f93 file-stream-transfer.js<\/code>\u3001OAuth \u5b89\u5168\u9274\u6743 oauth-auth-safe.js<\/code>\u3001\u52a0\u5bc6\u63a8\u9001\u6a21\u5757 notify-crypto-push.js<\/code>\u3001\u98ce\u63a7\u5ba1\u8ba1\u65e5\u5fd7 security-audit-risk.js<\/code><\/p>\n\n\n\n

      1. \u91cf\u5b50\u5bc6\u94a5\u751f\u547d\u5468\u671f\u6a21\u5757\u91cd\u6784\uff1a\u4fee\u590d\u5bc6\u94a5\u590d\u7528\u3001\u660e\u6587\u7f13\u5b58\u6f0f\u6d1e<\/h4>\n\n\n\n

      \u539f\u7248\u7f3a\u9677\u4ee3\u7801 quantum-key-mgr.js<\/h4>\n\n\n\n

      javascript<\/p>\n\n\n\n

      \u8fd0\u884c<\/p>\n\n\n\n

      \/\/ v0.3.79\u539f\u7248\uff1a\u5355\u6b21\u751f\u6210\u5bc6\u94a5\u3001\u660e\u6587\u7f13\u5b58\u3001\u65e0\u9500\u6bc1\u8f6e\u6362\nconst crypto = require(\"crypto\");\n\/\/ \u5168\u5c40\u56fa\u5b9a\u4f1a\u8bdd\u5bc6\u94a5\uff0c\u5168\u7a0b\u590d\u7528\nlet sessionQuantumKey = null;\n\n\/\/ \u4ec5\u521d\u6b21\u8fde\u63a5\u751f\u6210\u4e00\u6b21\u91cf\u5b50\u5bc6\u94a5\nfunction genQuantumKey() {\n  sessionQuantumKey = crypto.randomBytes(64).toString(\"hex\");\n  return sessionQuantumKey;\n}\n\n\/\/ \u52a0\u5bc6\u76f4\u63a5\u590d\u7528\u5168\u5c40\u5bc6\u94a5\uff0c\u65e0\u8fc7\u671f\u9500\u6bc1\u903b\u8f91\nfunction getCurrentKey() {\n  return sessionQuantumKey;\n}\n<\/code><\/pre>\n\n\n\n
      \u4e8c\u6b21\u91cd\u6784\u4f18\u5316\u4ee3\u7801<\/h4>\n\n\n\n
      javascript<\/p>\n\n\n\n
      \u8fd0\u884c<\/p>\n\n\n\n
      const crypto = require(\"crypto\");\nconst fsPromises = require(\"fs\/promises\");\nconst KEY_CACHE_PATH = \".\/im\/quantum-key-cache.enc\";\n\/\/ \u5bc6\u94a5\u8f6e\u6362\u5468\u671f 30\u5206\u949f\uff08\u6beb\u79d2\uff09\nconst KEY_ROTATE_INTERVAL = 30 * 60 * 1000;\n\/\/ \u4f1a\u8bdd\u5bc6\u94a5\u6620\u5c04\uff1a\u8bbe\u5907ID-\u5bc6\u94a5\u5bf9\u8c61\nconst deviceKeyMap = new Map();\n\/\/ \u672c\u5730\u7f13\u5b58\u52a0\u5bc6\u4e3b\u5bc6\u94a5\nconst LOCAL_ENCRYPT_ROOT = crypto.scryptSync(\"liangzi_mixin_root_safe\", \"salt_quantum\", 32);\nconst IV_GLOBAL = crypto.randomBytes(16);\n\n\/\/ \u5bc6\u94a5\u7ed3\u6784\u4f53\u751f\u6210\uff1a\u643a\u5e26\u751f\u6210\u65f6\u95f4\u3001\u8bbe\u5907\u6807\u8bc6\u3001\u9500\u6bc1\u6807\u8bb0\nfunction createQuantumDeviceKey(deviceId) {\n  const rawKey = crypto.randomBytes(64).toString(\"hex\");\n  return {\n    deviceId,\n    keyContent: rawKey,\n    createTs: Date.now(),\n    isRevoke: false\n  };\n}\n\n\/\/ \u52a0\u5bc6\u5199\u5165\u672c\u5730\u5bc6\u94a5\u7f13\u5b58\nasync function encryptSaveKeyCache() {\n  const keyList = Array.from(deviceKeyMap.values());\n  const cipher = crypto.createCipheriv(\"aes-256-cbc\", LOCAL_ENCRYPT_ROOT, IV_GLOBAL);\n  let enc = cipher.update(JSON.stringify(keyList), \"utf8\", \"hex\");\n  enc += cipher.final(\"hex\");\n  await fsPromises.writeFile(KEY_CACHE_PATH, enc);\n}\n\n\/\/ \u52a0\u8f7d\u5e76\u89e3\u5bc6\u672c\u5730\u5bc6\u94a5\u7f13\u5b58\nasync function loadEncryptKeyCache() {\n  try {\n    const rawEnc = await fsPromises.readFile(KEY_CACHE_PATH, \"utf8\");\n    const decipher = crypto.createDecipheriv(\"aes-256-cbc\", LOCAL_ENCRYPT_ROOT, IV_GLOBAL);\n    let rawJson = decipher.update(rawEnc, \"hex\", \"utf8\");\n    rawJson += decipher.final(\"utf8\");\n    const keyArr = JSON.parse(rawJson);\n    keyArr.forEach(k => deviceKeyMap.set(k.deviceId, k));\n  } catch {\n    deviceKeyMap.clear();\n  }\n}\n\n\/\/ \u5b9a\u65f6\u81ea\u52a8\u8f6e\u6362\u5168\u90e8\u8bbe\u5907\u5bc6\u94a5\nfunction startKeyRotateTimer() {\n  setInterval(async () => {\n    for (const [devId, oldKey] of deviceKeyMap) {\n      deviceKeyMap.set(devId, createQuantumDeviceKey(devId));\n    }\n    await encryptSaveKeyCache();\n    console.log(\"[\u91cf\u5b50\u5bc6\u94a5] \u5168\u5c40\u5b9a\u65f6\u8f6e\u6362\u5b8c\u6210\");\n  }, KEY_ROTATE_INTERVAL);\n}\n\n\/\/ \u4f1a\u8bdd\u65ad\u5f00\u5f3a\u5236\u540a\u9500\u9500\u6bc1\u5bc6\u94a5\nasync function revokeDeviceKey(deviceId) {\n  if (deviceKeyMap.has(deviceId)) {\n    const target = deviceKeyMap.get(deviceId);\n    target.isRevoke = true;\n    deviceKeyMap.delete(deviceId);\n    await encryptSaveKeyCache();\n    \/\/ \u5185\u5b58\u6e05\u7a7a\u5bc6\u94a5\u6570\u636e\n    target.keyContent = null;\n  }\n}\n\n\/\/ \u83b7\u53d6\u8bbe\u5907\u6709\u6548\u672a\u540a\u9500\u5bc6\u94a5\uff0c\u81ea\u52a8\u6821\u9a8c\u8fc7\u671f\nasync function getValidDeviceKey(deviceId) {\n  await loadEncryptKeyCache();\n  if (!deviceKeyMap.has(deviceId)) {\n    const newKey = createQuantumDeviceKey(deviceId);\n    deviceKeyMap.set(deviceId, newKey);\n    await encryptSaveKeyCache();\n    return newKey;\n  }\n  const keyItem = deviceKeyMap.get(deviceId);\n  const now = Date.now();\n  \/\/ \u8d85\u8fc7\u8f6e\u6362\u5468\u671f\u5f3a\u5236\u751f\u6210\u65b0\u5bc6\u94a5\n  if (now - keyItem.createTs >= KEY_ROTATE_INTERVAL || keyItem.isRevoke) {\n    const newKey = createQuantumDeviceKey(deviceId);\n    deviceKeyMap.set(deviceId, newKey);\n    await encryptSaveKeyCache();\n    return newKey;\n  }\n  return keyItem;\n}\n\n\/\/ \u521d\u59cb\u5316\u52a0\u8f7d\u7f13\u5b58\u3001\u542f\u52a8\u8f6e\u6362\u5b9a\u65f6\u5668\nloadEncryptKeyCache().then(() => startKeyRotateTimer());\nmodule.exports = { getValidDeviceKey, revokeDeviceKey };\n<\/code><\/pre>\n\n\n\n
      2. \u957f\u8fde\u63a5\u7ebf\u7a0b\u6c60 + \u79bb\u7ebf\u7f13\u5b58\u91cd\u6784 im-connection-pool.js<\/h4>\n\n\n\n
      \u539f\u7248\u7f3a\u9677\u4ee3\u7801<\/h4>\n\n\n\n
      javascript<\/p>\n\n\n\n
      \u8fd0\u884c<\/p>\n\n\n\n
      \/\/ \u5355\u4e00\u7ebf\u7a0b\u8fde\u63a5\u3001\u65e0\u79bb\u7ebf\u7f13\u5b58\u3001\u56fa\u5b9a\u95f4\u9694\u91cd\u8fde\nconst WebSocket = require(\"ws\");\nconst WS_URL = \"wss:\/\/quantum-im.gateway\/openclaw\";\nlet globalWs = null;\n\n\/\/ \u5355\u4e00\u5168\u5c40\u8fde\u63a5\uff0c\u6240\u6709\u8bbe\u5907\u5171\u7528\nfunction initConnect() {\n  globalWs = new WebSocket(WS_URL);\n  globalWs.on(\"close\", () => {\n    \/\/ \u56fa\u5b9a3\u79d2\u65e0\u9650\u91cd\u8bd5\uff0c\u65e0\u7194\u65ad\n    setTimeout(() => initConnect(), 3000);\n  });\n}\n<\/code><\/pre>\n\n\n\n
      \u4e8c\u6b21\u91cd\u6784\u4f18\u5316\u4ee3\u7801<\/h4>\n\n\n\n
      javascript<\/p>\n\n\n\n
      \u8fd0\u884c<\/p>\n\n\n\n
      const WebSocket = require(\"ws\");\nconst fsPromises = require(\"fs\/promises\");\nconst OFFLINE_CACHE_PATH = \".\/im\/offline-msg-cache.json\";\nconst WS_URL = \"wss:\/\/quantum-im.gateway\/openclaw\";\n\/\/ \u6700\u5927\u5e76\u53d1\u8fde\u63a5\u6c60\u5bb9\u91cf\nconst MAX_CONN_POOL = 80;\n\/\/ \u6307\u6570\u9000\u907f\u91cd\u8fde\u53c2\u6570\nconst BASE_RETRY_DELAY = 1000;\nconst MAX_RETRY_DELAY = 16000;\nconst MAX_RETRY_COUNT = 8;\n\/\/ \u8fde\u63a5\u6c60\u5bb9\u5668\u3001\u79bb\u7ebf\u6d88\u606f\u7f13\u5b58\nconst connPool = new Map();\nlet offlineMsgCache = [];\n\n\/\/ \u521d\u59cb\u5316\u79bb\u7ebf\u6d88\u606f\u6301\u4e45\u7f13\u5b58\nasync function initOfflineCache() {\n  try {\n    const raw = await fsPromises.readFile(OFFLINE_CACHE_PATH, \"utf8\");\n    offlineMsgCache = JSON.parse(raw);\n  } catch {\n    offlineMsgCache = [];\n  }\n}\nasync function saveOfflineCache() {\n  await fsPromises.writeFile(OFFLINE_CACHE_PATH, JSON.stringify(offlineMsgCache, null, 2));\n}\n\n\/\/ \u6307\u6570\u9000\u907f\u91cd\u8fde\u8ba1\u7b97\nfunction calcRetryDelay(retryTimes) {\n  const delay = BASE_RETRY_DELAY * (2 ** retryTimes);\n  return Math.min(delay, MAX_RETRY_DELAY);\n}\n\n\/\/ \u5355\u8bbe\u5907\u72ec\u7acb\u8fde\u63a5\u5c01\u88c5\nfunction createDeviceConn(deviceId, userId) {\n  if (connPool.size >= MAX_CONN_POOL) throw new Error(\"\u8fde\u63a5\u6c60\u5df2\u6ee1\uff0c\u65e0\u6cd5\u65b0\u589e\u7ec8\u7aef\u8fde\u63a5\");\n  let retryCount = 0;\n  const ws = new WebSocket(`${WS_URL}?uid=${userId}&dev=${deviceId}`);\n\n  ws.on(\"close\", async () => {\n    if (retryCount >= MAX_RETRY_COUNT) {\n      console.log(`\u8bbe\u5907${deviceId}\u91cd\u8fde\u6b21\u6570\u8017\u5c3d\uff0c\u7194\u65ad\u505c\u6b62\u91cd\u8bd5`);\n      connPool.delete(deviceId);\n      return;\n    }\n    retryCount++;\n    const delay = calcRetryDelay(retryCount);\n    setTimeout(() => {\n      createDeviceConn(deviceId, userId);\n    }, delay);\n  });\n\n  \/\/ \u65ad\u7ebf\u6d88\u606f\u5b58\u5165\u79bb\u7ebf\u7f13\u5b58\n  ws.on(\"message\", (rawData) => {\n    if (ws.readyState !== WebSocket.OPEN) {\n      offlineMsgCache.push({ deviceId, data: rawData, cacheTs: Date.now() });\n      saveOfflineCache();\n    }\n  });\n  connPool.set(deviceId, { ws, userId, retryCount });\n  return ws;\n}\n\n\/\/ \u8fde\u63a5\u6062\u590d\u540e\u6279\u91cf\u63a8\u9001\u79bb\u7ebf\u7f13\u5b58\u6d88\u606f\nasync function flushOfflineMsg(deviceId) {\n  const targetConn = connPool.get(deviceId);\n  if (!targetConn || targetConn.ws.readyState !== WebSocket.OPEN) return;\n  const targetOffline = offlineMsgCache.filter(item => item.deviceId === deviceId);\n  for (const msg of targetOffline) {\n    targetConn.ws.send(msg.data);\n  }\n  \/\/ \u6e05\u7a7a\u5df2\u63a8\u9001\u79bb\u7ebf\u6d88\u606f\n  offlineMsgCache = offlineMsgCache.filter(item => item.deviceId !== deviceId);\n  await saveOfflineCache();\n}\n\ninitOfflineCache();\nmodule.exports = { createDeviceConn, flushOfflineMsg, connPool };\n<\/code><\/pre>\n\n\n\n
      3. \u6d88\u606f\u9632\u7be1\u6539\u3001\u9632\u91cd\u653e\u52a0\u89e3\u5bc6\u6838\u5fc3 msg-crypto-core.js<\/h4>\n\n\n\n
      \u65b0\u589e\u5b8c\u6574\u6539\u9020\u4ee3\u7801<\/h4>\n\n\n\n
      javascript<\/p>\n\n\n\n
      \u8fd0\u884c<\/p>\n\n\n\n
      const crypto = require(\"crypto\");\nconst { getValidDeviceKey } = require(\".\/quantum-key-mgr\");\n\n\/\/ \u751f\u6210\u5168\u5c40\u81ea\u589e\u6d88\u606f\u5e8f\u5217\u53f7\u9632\u91cd\u653e\nlet globalMsgSeq = 0;\nfunction getNextMsgSeq() {\n  return ++globalMsgSeq;\n}\n\n\/\/ \u8ba1\u7b97\u6d88\u606f\u5b8c\u6574\u54c8\u5e0c\u6821\u9a8c\u503c\nfunction calcMsgHash(rawPayload, deviceKey) {\n  return crypto.createHmac(\"sha3-256\", deviceKey.keyContent)\n    .update(JSON.stringify(rawPayload))\n    .digest(\"hex\");\n}\n\n\/\/ \u5c01\u88c5\u5e26\u7b7e\u540d\u3001\u5e8f\u5217\u53f7\u3001\u54c8\u5e0c\u7684\u52a0\u5bc6\u6d88\u606f\u5305\nasync function encryptSafeMsg(deviceId, payload) {\n  const keyItem = await getValidDeviceKey(deviceId);\n  const seq = getNextMsgSeq();\n  const msgHash = calcMsgHash(payload, keyItem);\n  const sign = crypto.createHmac(\"sha256\", keyItem.keyContent)\n    .update(`${seq}_${msgHash}`)\n    .digest(\"hex\");\n\n  const safePacket = {\n    seq,\n    hash: msgHash,\n    sign,\n    payload\n  };\n  \/\/ \u91cf\u5b50\u7aef\u5230\u7aef\u5916\u5c42\u52a0\u5bc6\n  const cipher = crypto.createCipheriv(\"aes-256-cbc\", Buffer.from(keyItem.keyContent.slice(0,32)), crypto.randomBytes(16));\n  let enc = cipher.update(JSON.stringify(safePacket), \"utf8\", \"hex\");\n  enc += cipher.final(\"hex\");\n  return enc;\n}\n\n\/\/ \u89e3\u5bc6\u5e76\u6821\u9a8c\u54c8\u5e0c\u3001\u7b7e\u540d\u3001\u5e8f\u5217\u53f7\uff0c\u62e6\u622a\u7be1\u6539\/\u91cd\u653e\nasync function decryptVerifyMsg(deviceId, encData) {\n  const keyItem = await getValidDeviceKey(deviceId);\n  try {\n    const decipher = crypto.createDecipheriv(\"aes-256-cbc\", Buffer.from(keyItem.keyContent.slice(0,32)), crypto.randomBytes(16));\n    let rawJson = decipher.update(encData, \"hex\", \"utf8\");\n    rawJson += decipher.final(\"utf8\");\n    const packet = JSON.parse(rawJson);\n    \/\/ 1. \u6821\u9a8c\u6d88\u606f\u54c8\u5e0c\n    const realHash = calcMsgHash(packet.payload, keyItem);\n    if (realHash !== packet.hash) throw new Error(\"\u6d88\u606f\u54c8\u5e0c\u4e0d\u5339\u914d\uff0c\u5185\u5bb9\u88ab\u7be1\u6539\");\n    \/\/ 2. \u6821\u9a8c\u64cd\u4f5c\u7b7e\u540d\n    const realSign = crypto.createHmac(\"sha256\", keyItem.keyContent)\n      .update(`${packet.seq}_${packet.hash}`)\n      .digest(\"hex\");\n    if (realSign !== packet.sign) throw new Error(\"\u6d88\u606f\u7b7e\u540d\u6821\u9a8c\u5931\u8d25\uff0c\u975e\u6cd5\u4f2a\u9020\u6307\u4ee4\");\n    return packet.payload;\n  } catch (e) {\n    throw e;\n  }\n}\n\nmodule.exports = { encryptSafeMsg, decryptVerifyMsg, getNextMsgSeq };\n<\/code><\/pre>\n\n\n\n
      4. \u6d41\u5f0f\u5206\u7247\u52a0\u5bc6\u6587\u4ef6\u4f20\u8f93 file-stream-transfer.js<\/h4>\n\n\n\n
      javascript<\/p>\n\n\n\n
      \u8fd0\u884c<\/p>\n\n\n\n
      const fs = require(\"fs\");\nconst fsPromises = fs.promises;\nconst { encryptSafeMsg } = require(\".\/msg-crypto-core\");\nconst TMP_ENC_DIR = \".\/im\/tmp_enc_file\/\";\nconst SLICE_SIZE = 1024 * 1024; \/\/ \u5355\u5206\u72471MB\n\n\/\/ \u5206\u7247\u54c8\u5e0c\u8ba1\u7b97\u5de5\u5177\nfunction calcSliceHash(sliceBuffer) {\n  return crypto.createHash(\"sha256\").update(sliceBuffer).digest(\"hex\");\n}\n\n\/\/ \u6d41\u5f0f\u8bfb\u53d6\u6587\u4ef6\u3001\u5206\u7247\u72ec\u7acb\u52a0\u5bc6\u4e0a\u4f20\nasync function streamEncryptUpload(deviceId, filePath, fileName) {\n  await fsPromises.mkdir(TMP_ENC_DIR, { recursive: true });\n  const readStream = fs.createReadStream(filePath, { highWaterMark: SLICE_SIZE });\n  let sliceIndex = 0;\n  const sliceHashList = [];\n\n  for await (const chunk of readStream) {\n    const sliceHash = calcSliceHash(chunk);\n    sliceHashList.push(sliceHash);\n    \/\/ \u5206\u7247\u5355\u72ec\u52a0\u5bc6\u4f20\u8f93\n    const encSlice = await encryptSafeMsg(deviceId, {\n      type: \"file_slice\",\n      sliceIndex,\n      fileName,\n      sliceHash,\n      data: chunk.toString(\"base64\")\n    });\n    \/\/ \u53d1\u9001\u5206\u7247\u6570\u636e\u5305\n    sliceIndex++;\n  }\n  \/\/ \u53d1\u9001\u6587\u4ef6\u5b8c\u6210\u6821\u9a8c\u5305\n  await encryptSafeMsg(deviceId, {\n    type: \"file_complete\",\n    fileName,\n    totalSlice: sliceIndex,\n    fullHashList: sliceHashList\n  });\n  readStream.destroy();\n}\n\nmodule.exports = { streamEncryptUpload };\n<\/code><\/pre>\n\n\n\n
      5. OAuth \u5b89\u5168\u9274\u6743\u52a0\u56fa oauth-auth-safe.js<\/h4>\n\n\n\n
      javascript<\/p>\n\n\n\n
      \u8fd0\u884c<\/p>\n\n\n\n
      const crypto = require(\"crypto\");\nconst fsPromises = require(\"fs\/promises\");\nconst AUTH_CACHE = \".\/im\/oauth-token.enc\";\n\/\/ Token\u6709\u6548\u671f2\u5c0f\u65f6\uff0c\u81ea\u52a8\u5237\u65b0\u7a97\u53e330\u5206\u949f\nconst TOKEN_EXPIRE = 2 * 3600 * 1000;\nconst REFRESH_WINDOW = 30 * 60 * 1000;\n\n\/\/ \u751f\u6210\u8bbe\u5907\u552f\u4e00\u6307\u7eb9\nfunction genDeviceFingerprint(ua, macAddr) {\n  return crypto.createHash(\"sha256\").update(`${ua}${macAddr}`).digest(\"hex\");\n}\n\n\/\/ \u52a0\u5bc6\u5b58\u50a8OAuth\u51ed\u8bc1\nasync function saveEncryptAuthData(authObj) {\n  const rootKey = crypto.scryptSync(\"oauth_im_safe_root\", \"salt_oauth\", 32);\n  const iv = crypto.randomBytes(16);\n  const cipher = crypto.createCipheriv(\"aes-256-cbc\", rootKey, iv);\n  let enc = cipher.update(JSON.stringify(authObj), \"utf8\", \"hex\");\n  enc += cipher.final(\"hex\");\n  await fsPromises.writeFile(AUTH_CACHE, JSON.stringify({ iv: iv.toString(\"hex\"), data: enc }));\n}\n\n\/\/ \u6821\u9a8cToken\u65f6\u6548\uff0c\u4e34\u8fd1\u8fc7\u671f\u81ea\u52a8\u5237\u65b0\nfunction checkTokenExpire(authData) {\n  const now = Date.now();\n  const expireTs = authData.loginTs + TOKEN_EXPIRE;\n  \/\/ \u8fc7\u671f\u76f4\u63a5\u5931\u6548\n  if (now > expireTs) return false;\n  \/\/ \u8fdb\u5165\u5237\u65b0\u7a97\u53e3\u8fd4\u56de\u5f85\u5237\u65b0\u6807\u8bb0\n  if (expireTs - now < REFRESH_WINDOW) return \"need_refresh\";\n  return true;\n}\n\nmodule.exports = { genDeviceFingerprint, saveEncryptAuthData, checkTokenExpire };\n<\/code><\/pre>\n\n\n\n
      6. \u52a0\u5bc6\u8131\u654f\u63a8\u9001\u6a21\u5757 notify-crypto-push.js<\/h4>\n\n\n\n
      javascript<\/p>\n\n\n\n
      \u8fd0\u884c<\/p>\n\n\n\n
      const { encryptSafeMsg } = require(\".\/msg-crypto-core\");\n\n\/\/ \u63a8\u9001\u5185\u5bb9\u8131\u654f\uff0c\u654f\u611f\u4fe1\u606f\u9690\u85cf\nfunction desensitizeNotifyContent(rawText) {\n  if (rawText.length <= 6) return \"\u65b0\u6d88\u606f\";\n  return rawText.slice(0, 4) + \"***\";\n}\n\n\/\/ \u63a8\u9001\u5168\u52a0\u5bc6\u4e0b\u53d1\uff0c\u901a\u77e5\u680f\u4ec5\u8131\u654f\u6458\u8981\nasync function sendSafePush(deviceId, senderName, rawMsg) {\n  const safeSummary = desensitizeNotifyContent(rawMsg);\n  \/\/ \u5b8c\u6574\u6d88\u606f\u52a0\u5bc6\u5b58\u5165\u901a\u9053\uff0c\u63a8\u9001\u4ec5\u4e0b\u53d1\u8131\u654f\u6458\u8981\n  await encryptSafeMsg(deviceId, { type: \"push_full\", sender: senderName, content: rawMsg });\n  \/\/ \u63a8\u9001\u901a\u77e5\u8131\u654f\u8f7d\u4f53\n  const pushPacket = {\n    sender: senderName.slice(0, 2) + \"***\",\n    summary: safeSummary\n  };\n  return pushPacket;\n}\n\nmodule.exports = { sendSafePush };\n<\/code><\/pre>\n\n\n\n
      7. \u5b89\u5168\u5ba1\u8ba1 + \u5f02\u5e38\u98ce\u63a7\u6a21\u5757 security-audit-risk.js<\/h4>\n\n\n\n
      javascript<\/p>\n\n\n\n
      \u8fd0\u884c<\/p>\n\n\n\n
      const fs = require(\"fs\");\nconst AUDIT_LOG_PATH = \".\/im\/security-audit.log\";\nconst RISK_ALERT_PATH = \".\/im\/risk-alert.log\";\n\n\/\/ \u5199\u5165\u5168\u94fe\u8def\u5b89\u5168\u5ba1\u8ba1\u65e5\u5fd7\nfunction writeAuditLog(type, deviceId, userId, desc) {\n  const logLine = `[${new Date().toISOString()}] type:${type} uid:${userId} dev:${deviceId} desc:${desc}\\n`;\n  fs.appendFileSync(AUDIT_LOG_PATH, logLine);\n}\n\n\/\/ \u98ce\u9669\u884c\u4e3a\u544a\u8b66\u8bb0\u5f55\nfunction triggerRiskAlert(riskLevel, deviceId, userId, riskDesc) {\n  const alertLine = `[\u98ce\u9669\u544a\u8b66][${riskLevel}] time:${new Date().toISOString()} uid:${userId} dev:${deviceId} risk:${riskDesc}\\n`;\n  fs.appendFileSync(RISK_ALERT_PATH, alertLine);\n}\n\n\/\/ \u5f02\u5e38\u884c\u4e3a\u68c0\u6d4b\u89c4\u5219\nfunction detectRiskBehavior(operateRecord) {\n  const { loginRegion, deviceCount, fileCount, msgSpeed } = operateRecord;\n  \/\/ \u5f02\u5730\u767b\u5f55\u98ce\u9669\n  if (loginRegion !== \"\u5e38\u7528\u5730\u533a\") triggerRiskAlert(\"high\", operateRecord.deviceId, operateRecord.userId, \"\u5f02\u5730\u964c\u751f\u8bbe\u5907\u767b\u5f55\");\n  \/\/ \u591a\u7ec8\u7aef\u540c\u65f6\u8d85\u9650\u767b\u5f55\n  if (deviceCount > 5) triggerRiskAlert(\"mid\", operateRecord.deviceId, operateRecord.userId, \"\u8d85\u8fc75\u53f0\u8bbe\u5907\u540c\u65f6\u5728\u7ebf\");\n  \/\/ \u77ed\u65f6\u95f4\u6279\u91cf\u4f20\u8f93\u6587\u4ef6\n  if (fileCount > 20) triggerRiskAlert(\"high\", operateRecord.deviceId, operateRecord.userId, \"\u77ed\u65f6\u95f4\u6279\u91cf\u5bfc\u51fa\u5927\u91cf\u6587\u4ef6\");\n}\n\nmodule.exports = { writeAuditLog, triggerRiskAlert, detectRiskBehavior };\n<\/code><\/pre>\n\n\n\n
      \u4e94\u3001\u6539\u9020\u524d\u540e\u5168\u65b9\u4f4d\u5bf9\u6bd4\u8868\u683c<\/h4>\n\n\n\n
      \u8868\u683c<\/p>\n\n\n\n
      \u5bf9\u6bd4\u7ef4\u5ea6<\/th>\u539f\u7248 liangzimixin v0.3.79<\/th>\u4e8c\u6b21\u91cd\u6784\u4f18\u5316\u7248<\/th><\/tr><\/thead>
      \u91cf\u5b50\u5bc6\u94a5\u5b89\u5168<\/td>\u5355\u6b21\u751f\u6210\u6c38\u4e45\u590d\u7528\uff0c\u660e\u6587\u5185\u5b58\u7f13\u5b58\uff0c\u65e0\u8f6e\u6362\u9500\u6bc1<\/td>\u5b9a\u65f6\u81ea\u52a8\u8f6e\u6362\uff0c\u52a0\u5bc6\u672c\u5730\u7f13\u5b58\uff0c\u4f1a\u8bdd\u65ad\u5f00\u5f3a\u5236\u540a\u9500\u5bc6\u94a5\uff0c\u5b8c\u6574\u751f\u547d\u5468\u671f\u7ba1\u63a7<\/td><\/tr>
      \u957f\u8fde\u63a5\u5e76\u53d1\u80fd\u529b<\/td>\u5355\u4e00\u7ebf\u7a0b\u4e32\u884c\uff0c\u65e0\u79bb\u7ebf\u7f13\u5b58\uff0c\u56fa\u5b9a\u95f4\u9694\u9ad8\u9891\u91cd\u8fde<\/td>\u591a\u8bbe\u5907\u8fde\u63a5\u7ebf\u7a0b\u6c60\uff0c\u79bb\u7ebf\u6d88\u606f\u6301\u4e45\u4fdd\u5b58\uff0c\u6307\u6570\u9000\u907f\u7194\u65ad\u91cd\u8fde\uff0c\u767e\u7ec8\u7aef\u7a33\u5b9a\u5728\u7ebf<\/td><\/tr>
      \u6d88\u606f\u9632\u653b\u51fb\u80fd\u529b<\/td>\u4ec5\u5916\u5c42\u91cf\u5b50\u52a0\u5bc6\uff0c\u65e0\u54c8\u5e0c\u3001\u7b7e\u540d\u3001\u5e8f\u5217\u53f7\uff0c\u6613\u7be1\u6539\u4f2a\u9020<\/td>\u54c8\u5e0c\u6821\u9a8c + \u64cd\u4f5c\u7b7e\u540d + \u5e8f\u5217\u53f7\u9632\u91cd\u653e\u4e09\u91cd\u6821\u9a8c\uff0c\u62e6\u622a\u7be1\u6539\u3001\u4f2a\u9020\u64a4\u56de\u3001\u91cd\u590d\u6d88\u606f<\/td><\/tr>
      \u6587\u4ef6\u4f20\u8f93\u5b89\u5168<\/td>\u4e00\u6b21\u6027\u5168\u91cf\u52a0\u8f7d\u660e\u6587\uff0c\u65e0\u5206\u7247\u6821\u9a8c\uff0c\u4e34\u65f6\u6587\u4ef6\u660e\u6587\u5b58\u50a8<\/td>\u6d41\u5f0f\u5206\u7247\u72ec\u7acb\u52a0\u5bc6\uff0c\u5206\u7247\u54c8\u5e0c\u6821\u9a8c\uff0c\u4e34\u65f6\u76ee\u5f55\u5168\u7a0b\u52a0\u5bc6\uff0c\u65e0\u5185\u5b58\u6ea2\u51fa<\/td><\/tr>
      OAuth \u767b\u5f55\u9632\u62a4<\/td>Token \u6c38\u4e45\u6709\u6548\uff0c\u660e\u6587\u5b58\u50a8\uff0c\u65e0\u8bbe\u5907\u7ed1\u5b9a<\/td>\u65f6\u6548 Token \u81ea\u52a8\u5237\u65b0\uff0c\u8bbe\u5907\u6307\u7eb9\u7ed1\u5b9a\uff0c\u52a0\u5bc6\u5b58\u50a8\u51ed\u8bc1\uff0c\u5f02\u5730\u767b\u5f55\u98ce\u9669\u62e6\u622a<\/td><\/tr>
      \u63a8\u9001\u9690\u79c1\u4fdd\u62a4<\/td>\u5b8c\u6574\u6d88\u606f\u660e\u6587\u63a8\u9001\u81f3\u901a\u77e5\u680f\uff0c\u654f\u611f\u5185\u5bb9\u6cc4\u9732<\/td>\u63a8\u9001\u5185\u5bb9\u8131\u654f\u4e0b\u53d1\uff0c\u5b8c\u6574\u6d88\u606f\u52a0\u5bc6\u901a\u9053\u5185\u5b58\u50a8\uff0c\u9501\u5c4f\u65e0\u654f\u611f\u660e\u6587<\/td><\/tr>
      \u98ce\u63a7\u5ba1\u8ba1\u6eaf\u6e90<\/td>\u65e0\u4efb\u4f55\u64cd\u4f5c\u65e5\u5fd7\uff0c\u5f02\u5e38\u884c\u4e3a\u65e0\u6cd5\u8bc6\u522b<\/td>\u5168\u94fe\u8def\u5ba1\u8ba1\u65e5\u5fd7\u7559\u5b58\uff0c\u81ea\u52a8\u8bc6\u522b\u5f02\u5730\u767b\u5f55\u3001\u6279\u91cf\u4f20\u6587\u4ef6\u7b49\u9ad8\u98ce\u9669\u884c\u4e3a\u5e76\u544a\u8b66<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      \u516d\u3001\u63d2\u4ef6\u5347\u7ea7\u5b8c\u6574\u90e8\u7f72\u64cd\u4f5c\u6b65\u9aa4<\/h4>\n\n\n\n
        \n
      1. \u5907\u4efd liangzimixin \u539f\u7248\u6e90\u7801\u3001\u672c\u5730\u5bc6\u94a5\u7f13\u5b58\u3001OAuth \u914d\u7f6e\u3001IM \u901a\u4fe1\u914d\u7f6e\u6587\u4ef6\uff0c\u5b8c\u6574\u7559\u5b58\u56de\u6eda\u5305\uff1b<\/li>\n\n\n\n
      2. \u65b0\u5efa\u5e76\u66ff\u6362 7 \u4e2a\u6838\u5fc3\u6a21\u5757 JS \u6587\u4ef6\uff0c\u7c98\u8d34\u5168\u90e8\u6539\u9020\u4ee3\u7801\uff1b<\/li>\n\n\n\n
      3. \u63d2\u4ef6\u542f\u52a8\u5165\u53e3\u7edf\u4e00\u52a0\u8f7d\u5bc6\u94a5\u7f13\u5b58\u3001\u79bb\u7ebf\u6d88\u606f\u3001\u8fde\u63a5\u6c60\u3001\u5ba1\u8ba1\u65e5\u5fd7\u521d\u59cb\u5316\u51fd\u6570\uff1b<\/li>\n\n\n\n
      4. \u542f\u52a8 OpenClaw \u63d2\u4ef6\u670d\u52a1\uff0c\u539f\u6709\u91cf\u5b50\u901a\u4fe1\u534f\u8bae\u3001\u6d88\u606f\u6536\u53d1\u3001\u6587\u4ef6\u4f20\u8f93\u3001OAuth \u5bf9\u63a5\u903b\u8f91\u5b8c\u5168\u517c\u5bb9\u65e0\u9700\u4fee\u6539\uff1b<\/li>\n\n\n\n
      5. \u5206\u573a\u666f\u9010\u9879\u9a8c\u8bc1\u6d4b\u8bd5\uff1a\u591a\u7ec8\u7aef\u5e76\u53d1\u957f\u8fde\u63a5\u3001\u5bc6\u94a5\u81ea\u52a8\u8f6e\u6362\u3001\u5bc6\u6587\u7be1\u6539\u62e6\u622a\u3001\u5927\u6587\u4ef6\u5206\u7247\u52a0\u5bc6\u4f20\u8f93\u3001\u5f02\u5730\u767b\u5f55\u98ce\u9669\u544a\u8b66\u3001\u63a8\u9001\u8131\u654f\u6458\u8981\u3001\u79bb\u7ebf\u6d88\u606f\u6062\u590d\uff1b<\/li>\n\n\n\n
      6. \u957f\u671f\u6a21\u62df\u9ad8\u9891\u673a\u5bc6\u901a\u4fe1\u3001\u591a\u8bbe\u5907\u5f02\u5730\u767b\u5f55\u3001\u6279\u91cf\u6587\u4ef6\u4f20\u8f93\uff0c\u9a8c\u8bc1\u65e0\u5bc6\u94a5\u6cc4\u9732\u3001\u65e0\u6d88\u606f\u7be1\u6539\u3001\u65e0\u63a8\u9001\u660e\u6587\u6cc4\u9732\u3001\u98ce\u9669\u884c\u4e3a\u6b63\u5e38\u544a\u8b66\uff0c\u6539\u9020\u90e8\u7f72\u5b8c\u6210\u3002<\/li>\n<\/ol>\n\n\n\n
        \u4e03\u3001\u6539\u9020\u65b9\u6848\u603b\u7ed3<\/h4>\n\n\n\n
        liangzimixin v0.3.79 \u4f5c\u4e3a\u91cf\u5b50\u52a0\u5bc6 IM \u63d2\u4ef6\uff0c\u539f\u751f\u4ec5\u5b8c\u6210\u57fa\u7840\u901a\u4fe1\u529f\u80fd\u642d\u5efa\uff0c\u5bc6\u94a5\u7ba1\u7406\u3001\u6d88\u606f\u6821\u9a8c\u3001\u6587\u4ef6\u4f20\u8f93\u3001\u767b\u5f55\u9274\u6743\u3001\u63a8\u9001\u9690\u79c1\u3001\u98ce\u63a7\u5ba1\u8ba1\u5747\u5b58\u5728\u4e25\u91cd\u5b89\u5168\u77ed\u677f\uff0c\u65e0\u6cd5\u9002\u914d\u653f\u4f01\u6d89\u5bc6\u3001\u9ad8\u9690\u79c1\u654f\u611f\u4e1a\u52a1\u573a\u666f\u3002\u672c\u6b21\u5168\u5957\u4e8c\u6b21\u6539\u9020\u5728\u5b8c\u5168\u517c\u5bb9\u539f\u6709\u901a\u4fe1\u63a5\u53e3\u7684\u524d\u63d0\u4e0b\uff0c\u56f4\u7ed5\u91cf\u5b50\u52a0\u5bc6\u5b89\u5168\u3001\u957f\u8fde\u63a5\u7a33\u5b9a\u6027\u3001\u9632\u653b\u51fb\u9632\u62a4\u3001\u6587\u4ef6\u4f20\u8f93\u9690\u79c1\u3001\u767b\u5f55\u98ce\u63a7\u3001\u63a8\u9001\u8131\u654f\u3001\u884c\u4e3a\u5ba1\u8ba1<\/strong>\u4e03\u5927\u6838\u5fc3\u7ef4\u5ea6\u5b8c\u6210\u5e95\u5c42\u4ee3\u7801\u91cd\u6784\u3002\u6539\u9020\u540e\u63d2\u4ef6\u8fbe\u5230\u9ad8\u5bc6\u7ea7\u5373\u65f6\u901a\u4fe1\u5b89\u5168\u6807\u51c6\uff0c\u8865\u9f50\u539f\u7248\u5168\u90e8\u5b89\u5168\u6f0f\u6d1e\u4e0e\u6027\u80fd\u7f3a\u9677\uff0c\u53ef\u957f\u671f\u7a33\u5b9a\u627f\u8f7d\u673a\u5bc6\u6d88\u606f\u3001\u52a0\u5bc6\u6587\u4ef6\u4f20\u8f93\u3001\u591a\u7ec8\u7aef\u8de8\u5730\u57df\u5b89\u5168\u4f1a\u8bdd\u9700\u6c42\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
        \u4e00\u3001liangzimixin v0.3.79 \u63d2\u4ef6\u539f\u751f\u57fa\u7840\u8bf4\u660e liangzimixin v0.3.79 \u662f  […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-349","post","type-post","status-publish","format-standard","hentry","category-kaifalongxiachajian"],"_links":{"self":[{"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/posts\/349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/comments?post=349"}],"version-history":[{"count":1,"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/posts\/349\/revisions"}],"predecessor-version":[{"id":350,"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/posts\/349\/revisions\/350"}],"wp:attachment":[{"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/media?parent=349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/categories?post=349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.longxiapro.com\/index.php\/wp-json\/wp\/v2\/tags?post=349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}