c7e154d7cc
Motivation: 钉钉机器人的 webhook 前缀固定不变,要求用户填写完整 URL 冗余且容易出错。简化通道配置项,降低接入配置成本,同时保证存量配置不受影响。 Changes: * 钉钉通道配置改用 access_token,webhook 前缀由内部固定拼接 * 保留对旧 webhook_url 配置的兼容,access_token 存在时优先生效 * 新增 webhook 地址解析逻辑的单元测试,覆盖优先级与回退场景 * 同步更新 README、HTTP 请求示例及设计文档中的配置示例 * E2E 测试改用 E2E_DINGTALK_ACCESS_TOKEN 环境变量并按新格式创建通道
95 lines
2.3 KiB
Go
95 lines
2.3 KiB
Go
package adapter
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"crypto/hmac"
|
|
"crypto/sha256"
|
|
"encoding/base64"
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
"net/url"
|
|
"time"
|
|
)
|
|
|
|
// 钉钉自定义机器人 webhook 前缀固定,配置时只需提供 access_token
|
|
const dingtalkWebhookPrefix = "https://oapi.dingtalk.com/robot/send?access_token="
|
|
|
|
type dingtalkConfig struct {
|
|
AccessToken string `json:"access_token"`
|
|
Secret string `json:"secret,omitempty"`
|
|
// WebhookURL 兼容旧配置;新配置优先使用 AccessToken
|
|
WebhookURL string `json:"webhook_url,omitempty"`
|
|
}
|
|
|
|
func (c *dingtalkConfig) webhookURL() string {
|
|
if c.AccessToken != "" {
|
|
return dingtalkWebhookPrefix + c.AccessToken
|
|
}
|
|
return c.WebhookURL
|
|
}
|
|
|
|
type dingtalkMessage struct {
|
|
MsgType string `json:"msgtype"`
|
|
Markdown *dingtalkMD `json:"markdown"`
|
|
}
|
|
|
|
type dingtalkMD struct {
|
|
Title string `json:"title"`
|
|
Text string `json:"text"`
|
|
}
|
|
|
|
type DingTalkSender struct {
|
|
limiter *DingTalkLimiter
|
|
}
|
|
|
|
func (s *DingTalkSender) Type() string { return "dingtalk" }
|
|
|
|
func (s *DingTalkSender) Send(title, content string, config json.RawMessage) error {
|
|
var cfg dingtalkConfig
|
|
if err := json.Unmarshal(config, &cfg); err != nil {
|
|
return fmt.Errorf("parse dingtalk config: %w", err)
|
|
}
|
|
|
|
if s.limiter != nil {
|
|
if err := s.limiter.Acquire(context.Background(), DingTalkLimitKey(cfg.webhookURL())); err != nil {
|
|
return fmt.Errorf("dingtalk rate limit: %w", err)
|
|
}
|
|
}
|
|
|
|
reqURL := cfg.webhookURL()
|
|
if cfg.Secret != "" {
|
|
timestamp := time.Now().UnixMilli()
|
|
sign := dingtalkSign(timestamp, cfg.Secret)
|
|
reqURL = fmt.Sprintf("%s×tamp=%d&sign=%s", reqURL, timestamp, sign)
|
|
}
|
|
|
|
msg := dingtalkMessage{
|
|
MsgType: "markdown",
|
|
Markdown: &dingtalkMD{
|
|
Title: title,
|
|
Text: content,
|
|
},
|
|
}
|
|
|
|
body, _ := json.Marshal(msg)
|
|
resp, err := http.Post(reqURL, "application/json", bytes.NewReader(body))
|
|
if err != nil {
|
|
return fmt.Errorf("dingtalk send: %w", err)
|
|
}
|
|
defer resp.Body.Close()
|
|
|
|
if resp.StatusCode >= 400 {
|
|
return fmt.Errorf("dingtalk returned status %d", resp.StatusCode)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func dingtalkSign(timestamp int64, secret string) string {
|
|
mac := hmac.New(sha256.New, []byte(secret))
|
|
fmt.Fprintf(mac, "%d\n%s", timestamp, secret)
|
|
signData := mac.Sum(nil)
|
|
return url.QueryEscape(base64.StdEncoding.EncodeToString(signData))
|
|
}
|