Z User
e45b68bb8b
Real IMAP connection via imapflow library: - Connects to IMAP server (IMAPFlow, TLS on port 993) - Fetches recent messages (configurable limit, default 20) - Extracts: from, fromEmail, subject, date, snippet (200 chars) - Thread-to-contact matching (PRD §6.1): 1. Match sender email against persons table 2. If no person match, extract domain and match against company.website 3. Returns matchedCompany + matchedPerson for each email - Audit-logged (action: crm.mailsync:imap) - Zod validated (host, port, user, password, folder, limit) - 502 on IMAP connection failure with detail - 400 on validation failure Tested: invalid creds → 502 'IMAP connection failed', missing host → 400
54 lines
1.3 KiB
Markdown
Executable File
54 lines
1.3 KiB
Markdown
Executable File
# 编码配置解码
|
|
|
|
## 识别信号
|
|
|
|
1. API 返回有 `_encoded: true` 标志
|
|
2. `definition` 字段是 Base64 字符串而非 JSON
|
|
3. JS 中有 `atob()`/`btoa()` + `TextEncoder`/`TextDecoder` + XOR
|
|
4. Runtime config 中有 `obfuscationKey`
|
|
|
|
```bash
|
|
grep -oE '(atob|btoa|obfuscation|_encoded)' /tmp/*.js | sort | uniq -c
|
|
grep -oE 'obfuscationKey:"[^"]*"' /tmp/page.html
|
|
```
|
|
|
|
## 常见方案
|
|
|
|
### Base64 + XOR
|
|
|
|
```python
|
|
import base64, json
|
|
|
|
def decode(encoded, key):
|
|
raw = base64.b64decode(encoded)
|
|
key_bytes = key.encode('utf-8')
|
|
decrypted = bytes([raw[i] ^ key_bytes[i % len(key_bytes)] for i in range(len(raw))])
|
|
return json.loads(decrypted.decode('utf-8'))
|
|
```
|
|
|
|
### 短码映射（组件/属性名缩写）
|
|
|
|
配置中 `C74`/`p29` 代替 `StudioBackground`/`color`。
|
|
|
|
```bash
|
|
grep -oE '(codeToComponent|codeToProp)' /tmp/bundle.js
|
|
```
|
|
|
|
映射表通常是动态生成的——所有名称按字母排序分配 `C{nn}`/`p{nn}` 编号。
|
|
|
|
## 密钥来源
|
|
|
|
| 框架 | 位置 |
|
|
|------|------|
|
|
| Nuxt.js | `public:{obfuscationKey:"..."}` in HTML |
|
|
| Next.js | `__NEXT_DATA__` 的 runtimeConfig |
|
|
| SPA | bundle 常量或 `window.__CONFIG__` |
|
|
|
|
## 查找解码函数
|
|
|
|
```bash
|
|
grep -l '_encoded' /tmp/*.js
|
|
grep -A3 '_encoded' /tmp/bundle.js
|
|
# 模式：if (t._encoded) { return decode(t.definition, key) }
|
|
```
|