getUserInfo拿到的敏感信息是否可以在前端解密 - WXOPEN Club

为什么我getUserInfo的success回调里的res解密出来后是乱码呢？

我的base64和aes库测试过一般的字符串加密解密都是可以的？

求解答，谢谢！

打印结果：

部分代码如下：

wx.request({

url: 'https://api.weixin.qq.com/sns/jscode2session?appid=' + APPID + '&secret=' + SECRET + '&js_code=' + JSCODE + '&grant_type=authorization_code'

, success(res) {

console.log('jscode to session success: ', res)

var session_key = res.data.session_key

wx.getUserInfo({

withCredentials: true,

success(res) {

console.log('getUserInfo success :', res)

var encryptedData = res.encryptedData

var iv = res.iv

var ciphertext = base64.decode(encryptedData)

var aeskey = base64.decode(session_key)

var aesiv = base64.decode(iv)

var decryptedData = aes.Decrypt(ciphertext,aeskey,aesiv)

console.log('res of wx.getUserInfo is:', '\nencryptedData:\n', encryptedData,'\nsession_key:\n',session_key,'\niv:\n',iv)

console.log('after base64.decode,data is: (ciphertext,aeskey,aesiv)\n',ciphertext,aeskey,aesiv)

console.log('after aes.Decrypt,result is',decryptedData)

},

fail: res => {

console.log('getUserInfo fail :', res)

}

})

}

})

}

qiangdeng 1楼•5 年前

谢谢！