feat: 接入消息加密与实名认证能力

2026-09-21 09:53:39 +08:00
parent 841c0c77cd
commit e3b93113f1
33 changed files with 1747 additions and 99 deletions
@@ -0,0 +1,112 @@
+package aliyun
+
+import (
+	"errors"
+	"strconv"
+	"strings"
+	"time"
+
+	cloudauth "github.com/alibabacloud-go/cloudauth-20190307/v3/client"
+	openapi "github.com/alibabacloud-go/darabonba-openapi/v2/client"
+	util "github.com/alibabacloud-go/tea-utils/v2/service"
+	"github.com/alibabacloud-go/tea/dara"
+)
+
+type Config struct {
+	AccessKeyID     string
+	AccessKeySecret string
+	RegionID        string
+	Endpoint        string
+	TimeoutMS       int
+}
+
+type ID2MetaResult struct {
+	Passed             bool
+	BizCode            string
+	RequestID          string
+	ProviderCode       string
+	ProviderMessage    string
+	ProviderStatusCode int32
+	Latency            time.Duration
+}
+
+type ID2MetaClient struct {
+	client    *cloudauth.Client
+	timeoutMS int
+}
+
+func NewID2MetaClient(config Config) (*ID2MetaClient, error) {
+	if strings.TrimSpace(config.AccessKeyID) == "" || strings.TrimSpace(config.AccessKeySecret) == "" {
+		return nil, errors.New("missing aliyun realname credentials")
+	}
+	if strings.TrimSpace(config.RegionID) == "" {
+		config.RegionID = "cn-hangzhou"
+	}
+	clientConfig := &openapi.Config{
+		AccessKeyId:     dara.String(strings.TrimSpace(config.AccessKeyID)),
+		AccessKeySecret: dara.String(strings.TrimSpace(config.AccessKeySecret)),
+		RegionId:        dara.String(strings.TrimSpace(config.RegionID)),
+		Protocol:        dara.String("https"),
+	}
+	if endpoint := strings.TrimSpace(config.Endpoint); endpoint != "" {
+		clientConfig.Endpoint = dara.String(endpoint)
+	}
+	client, err := cloudauth.NewClient(clientConfig)
+	if err != nil {
+		return nil, err
+	}
+	if config.TimeoutMS <= 0 {
+		config.TimeoutMS = 1500
+	}
+	return &ID2MetaClient{client: client, timeoutMS: config.TimeoutMS}, nil
+}
+
+func (c *ID2MetaClient) Verify(name, idNumber string) (*ID2MetaResult, error) {
+	if c == nil || c.client == nil {
+		return nil, errors.New("nil aliyun realname client")
+	}
+	name = strings.TrimSpace(name)
+	idNumber = strings.TrimSpace(idNumber)
+	if name == "" || idNumber == "" {
+		return nil, errors.New("missing realname identity fields")
+	}
+	started := time.Now()
+	resp, err := c.client.Id2MetaVerifyWithOptions(&cloudauth.Id2MetaVerifyRequest{
+		UserName:    dara.String(name),
+		IdentifyNum: dara.String(idNumber),
+		ParamType:   dara.String("normal"),
+	}, (&util.RuntimeOptions{}).SetConnectTimeout(c.timeoutMS).SetReadTimeout(c.timeoutMS).SetAutoretry(false))
+	latency := time.Since(started)
+	if err != nil {
+		return nil, err
+	}
+	result := &ID2MetaResult{Latency: latency}
+	if resp != nil {
+		result.ProviderStatusCode = dara.Int32Value(resp.StatusCode)
+	}
+	if resp == nil || resp.Body == nil {
+		return result, errors.New("empty aliyun realname response")
+	}
+	result.RequestID = dara.StringValue(resp.Body.RequestId)
+	result.ProviderCode = dara.StringValue(resp.Body.Code)
+	result.ProviderMessage = dara.StringValue(resp.Body.Message)
+	if resp.Body.ResultObject != nil {
+		result.BizCode = strings.TrimSpace(dara.StringValue(resp.Body.ResultObject.BizCode))
+	}
+	if result.ProviderCode != "" && result.ProviderCode != "200" {
+		return result, errors.New("aliyun realname response code " + result.ProviderCode)
+	}
+	if result.BizCode == "" {
+		return result, errors.New("empty aliyun realname biz code")
+	}
+	result.Passed = result.BizCode == "1"
+	return result, nil
+}
+
+func ParseTimeoutMS(value string, fallback int) int {
+	parsed, err := strconv.Atoi(strings.TrimSpace(value))
+	if err != nil || parsed <= 0 {
+		return fallback
+	}
+	return parsed
+}
@@ -0,0 +1,36 @@
+package aliyun
+
+import (
+	"os"
+	"testing"
+)
+
+func TestLiveID2MetaVerify(t *testing.T) {
+	accessKeyID := os.Getenv("ALIYUN_REALNAME_ACCESS_KEY_ID")
+	accessKeySecret := os.Getenv("ALIYUN_REALNAME_ACCESS_KEY_SECRET")
+	if accessKeyID == "" || accessKeySecret == "" {
+		t.Skip("ALIYUN_REALNAME_ACCESS_KEY_ID and ALIYUN_REALNAME_ACCESS_KEY_SECRET are required")
+	}
+	client, err := NewID2MetaClient(Config{
+		AccessKeyID:     accessKeyID,
+		AccessKeySecret: accessKeySecret,
+		RegionID:        envOrDefault("ALIYUN_REALNAME_REGION_ID", "cn-hangzhou"),
+		Endpoint:        os.Getenv("ALIYUN_REALNAME_ENDPOINT"),
+		TimeoutMS:       ParseTimeoutMS(os.Getenv("ALIYUN_REALNAME_TIMEOUT_MS"), 3000),
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	result, err := client.Verify(envOrDefault("ALIYUN_REALNAME_TEST_NAME", "张三"), envOrDefault("ALIYUN_REALNAME_TEST_ID_NUMBER", "110101199003071234"))
+	if err != nil {
+		t.Fatalf("live id2meta verify failed: %v result=%+v", err, result)
+	}
+	t.Logf("live id2meta result: passed=%v biz_code=%s request_id=%s code=%s message=%s", result.Passed, result.BizCode, result.RequestID, result.ProviderCode, result.ProviderMessage)
+}
+
+func envOrDefault(key, fallback string) string {
+	if value := os.Getenv(key); value != "" {
+		return value
+	}
+	return fallback
+}