Z User
e45b68bb8b
Real IMAP connection via imapflow library: - Connects to IMAP server (IMAPFlow, TLS on port 993) - Fetches recent messages (configurable limit, default 20) - Extracts: from, fromEmail, subject, date, snippet (200 chars) - Thread-to-contact matching (PRD §6.1): 1. Match sender email against persons table 2. If no person match, extract domain and match against company.website 3. Returns matchedCompany + matchedPerson for each email - Audit-logged (action: crm.mailsync:imap) - Zod validated (host, port, user, password, folder, limit) - 502 on IMAP connection failure with detail - 400 on validation failure Tested: invalid creds → 502 'IMAP connection failed', missing host → 400
1.3 KiB
Executable File
1.3 KiB
Executable File
编码配置解码
识别信号
- API 返回有
_encoded: true标志 definition字段是 Base64 字符串而非 JSON- JS 中有
atob()/btoa()+TextEncoder/TextDecoder+ XOR - Runtime config 中有
obfuscationKey
grep -oE '(atob|btoa|obfuscation|_encoded)' /tmp/*.js | sort | uniq -c
grep -oE 'obfuscationKey:"[^"]*"' /tmp/page.html
常见方案
Base64 + XOR
import base64, json
def decode(encoded, key):
raw = base64.b64decode(encoded)
key_bytes = key.encode('utf-8')
decrypted = bytes([raw[i] ^ key_bytes[i % len(key_bytes)] for i in range(len(raw))])
return json.loads(decrypted.decode('utf-8'))
短码映射（组件/属性名缩写）
配置中 C74/p29 代替 StudioBackground/color。
grep -oE '(codeToComponent|codeToProp)' /tmp/bundle.js
映射表通常是动态生成的——所有名称按字母排序分配 C{nn}/p{nn} 编号。
密钥来源
| 框架 | 位置 |
|---|---|
| Nuxt.js | public:{obfuscationKey:"..."} in HTML |
| Next.js | __NEXT_DATA__ 的 runtimeConfig |
| SPA | bundle 常量或 window.__CONFIG__ |
查找解码函数
grep -l '_encoded' /tmp/*.js
grep -A3 '_encoded' /tmp/bundle.js
# 模式：if (t._encoded) { return decode(t.definition, key) }