微信小程序内容安全

2023-10-29

微信小程序官方提供了内容安全接口，可免费调用。

SafeAuditConfig

微信小程序内容安全，官方相关的配置

import io.swagger.annotations.ApiModelProperty;
import lombok.Data;
import org.springframework.context.annotation.Configuration;

/**
 * @author 曳戈泰尔
 * @version 1.0
 * @description 曳戈泰尔
 * @date 2023/9/12 3:08 PM
 */
@Data
@Configuration
public class SafeAuditConfig {

    @ApiModelProperty(value = "文本请求地址")
    private String contentUrl = "https://api.weixin.qq.com/wxa/msg_sec_check?access_token=";

    @ApiModelProperty(value = "媒体请求地址")
    private String mediaUrl = "https://api.weixin.qq.com/wxa/media_check_async?access_token=";

    @ApiModelProperty(value = "版本version")
    private String version = "2";

    @ApiModelProperty(value = "场景枚举值")
    private String scene = "3";

    @ApiModelProperty(value = "审核结果模板")
    private String template = "命中标签：%s，建议：%s";

    @ApiModelProperty(value = "媒体类型")
    private String mediaType = "1";

    @ApiModelProperty(value = "媒体审核异步key")
    private String mediaAsyncKey = "safe:media:async:traceId:%s";

    @ApiModelProperty(value = "媒体审核异步缓存时间")
    private Long mediaAsyncExpire = 60 * 60 * 24L;
}

SafeLabelEnum

命中标签枚举

/**
 * @author 曳戈泰尔
 * @version 1.0
 * @description 曳戈泰尔
 * @date 2023/9/12 3:23 PM
 */
public enum SafeLabelEnum {
    DEFAULT(-1, "未知"),
    // 正常
    NORMAL(100, "正常"),
    // 广告
    AD(10001, "广告"),
    // 时政
    POLITICS(20001, "时政"),
    // 色情
    SE_QING(20002, "色情"),
    // 辱骂
    ABUSE(20003, "辱骂"),
    // 违法犯罪
    CRIME(20006, "违法犯罪"),
    // 欺诈
    CHEAT(20008, "欺诈"),
    // 低俗
    LOW(20012, "低俗"),
    // 版权
    COPYRIGHT(20013, "版权"),
    // 其他
    OTHER(21000, "其他"),
    ;

    private final Integer number;
    private final String label;

    SafeLabelEnum(Integer number, String label) {
        this.number = number;
        this.label = label;
    }

    public Integer getNumber() {
        return number;
    }

    public String getLabel() {
        return label;
    }

    public static SafeLabelEnum getLabelByNumber(Integer number) {
        for (SafeLabelEnum safeLabelEnum : SafeLabelEnum.values()) {
            if (safeLabelEnum.getNumber().equals(number)) {
                return safeLabelEnum;
            }
        }
        return DEFAULT;
    }

    public static SafeLabelEnum getNumberByLabel(String label) {
        for (SafeLabelEnum safeLabelEnum : SafeLabelEnum.values()) {
            if (safeLabelEnum.getLabel().equals(label)) {
                return safeLabelEnum;
            }
        }
        return DEFAULT;
    }
}

SafeSuggestionEnum

建议枚举

/**
 * @author 曳戈泰尔
 * @version 1.0
 * @description 曳戈泰尔
 * @date 2023/9/12 3:23 PM
 */
public enum SafeSuggestionEnum {
    DEFAULT("", "未知"),
    // 正常
    NORMAL("risky", "拒绝"),
    // 广告
    AD("pass", "通过"),
    // 时政
    POLITICS("review", "检查"),
    ;

    private final String label;
    private final String name;

    SafeSuggestionEnum(String label, String name) {
        this.label = label;
        this.name = name;
    }

    public String getLabel() {
        return label;
    }

    public String getName() {
        return name;
    }

    public static SafeSuggestionEnum getLabelByNumber(String label) {
        for (SafeSuggestionEnum safeSuggestionEnum : SafeSuggestionEnum.values()) {
            if (safeSuggestionEnum.getLabel().equals(label)) {
                return safeSuggestionEnum;
            }
        }
        return DEFAULT;
    }

    public static SafeSuggestionEnum getNumberByLabel(String name) {
        for (SafeSuggestionEnum safeSuggestionEnum : SafeSuggestionEnum.values()) {
            if (safeSuggestionEnum.getName().equals(name)) {
                return safeSuggestionEnum;
            }
        }
        return DEFAULT;
    }
}

SafeAuditHelper

内容安全辅助类，提供调用方法

import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
import com.youyu.base.http.HttpClientHelper;
import com.youyu.base.redis.helper.RedisHelper;
import com.youyu.base.safe.weixin.config.SafeAuditConfig;
import com.youyu.base.safe.weixin.enums.SafeLabelEnum;
import com.youyu.base.safe.weixin.enums.SafeSuggestionEnum;
import com.youyu.biz.user.mapper.UserMapper;
import com.youyu.biz.user.model.entity.UserEntity;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.ObjectUtils;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;

import static com.youyu.constants.AppConstants.ACCESS_TOKEN_KEY;

/**
 * @author 曳戈泰尔
 * @version 1.0
 * @description 微信安全审核帮助类
 * @date 2023/9/12 2:49 PM
 */
@Slf4j
@Component
public class SafeAuditHelper {

    /** 微信安全审核配置 */
    private final SafeAuditConfig safeAuditConfig;

    @Autowired
    public SafeAuditHelper(SafeAuditConfig safeAuditConfig) {
        this.safeAuditConfig = safeAuditConfig;
    }

    /** 注入Redis */
    private RedisHelper redisHelper;

    @Autowired
    public void setRedisHelper(RedisHelper redisHelper) {
        this.redisHelper = redisHelper;
    }

    /** 注入用户 Mapper */
    private UserMapper userMapper;

    @Autowired
    public void setUserMapper(UserMapper userMapper) {
        this.userMapper = userMapper;
    }

    /**
     * 微信安全审核——文本
     *
     * @param userId 用户ID
     * @param content 文本内容
     * @return 审核结果
     */
    public String msgSecCheck(Integer userId, String content) {

        // 查询用户信息
        LambdaQueryWrapper<UserEntity> lqwUser = new LambdaQueryWrapper<>();
        lqwUser.select(UserEntity::getId, UserEntity::getOpenId);
        lqwUser.eq(UserEntity::getId, userId);
        UserEntity userEntity = userMapper.selectOne(lqwUser);
        if (ObjectUtils.isEmpty(userEntity)) {
            log.error("微信安全审核失败，原因：用户不存在");

            return "";
        }

        // 获取access_token
        String accessToken = redisHelper.get(ACCESS_TOKEN_KEY);
        if (StringUtils.isBlank(accessToken)) {
            log.error("微信安全审核失败，原因：获取access_token失败");

            return "";
        }

        // 构造请求参数
        JSONObject jsonObject = new JSONObject();
        jsonObject.put("openid", userEntity.getOpenId());
        jsonObject.put("scene", safeAuditConfig.getScene());
        jsonObject.put("version", safeAuditConfig.getVersion());
        jsonObject.put("content", content);

        // 发送请求
        String httpResult =
                HttpClientHelper.doDouyinSubPostJson(
                        safeAuditConfig.getContentUrl() + accessToken, jsonObject.toJSONString());
        // 检查返回结果
        if (StringUtils.isBlank(httpResult)) {
            log.error("微信安全审核失败，原因：请求返回结果为空");

            return "";
        }

        // 解析返回结果
        JSONObject resultJson = JSON.parseObject(httpResult);
        if (resultJson.getInteger("errcode") != 0) {
            log.error("微信安全审核失败，原因：{}", resultJson.getString("errmsg"));

            return "";
        }

        // 获取建议结果
        JSONObject suggestionJson = resultJson.getJSONObject("result");
        return String.format(
                safeAuditConfig.getTemplate(),
                SafeLabelEnum.getLabelByNumber(suggestionJson.getInteger("label")).getLabel(),
                SafeSuggestionEnum.getLabelByNumber(suggestionJson.getString("suggest")).getName());
    }

    /**
     * 微信安全审核——音频
     *
     * @param userId 用户ID
     * @param mediaUrl 音频链接
     * @return 审核序号
     */
    public String mediaCheckAsync(Integer userId, String mediaUrl) {

        // 查询用户信息
        LambdaQueryWrapper<UserEntity> lqwUser = new LambdaQueryWrapper<>();
        lqwUser.select(UserEntity::getId, UserEntity::getOpenId);
        lqwUser.eq(UserEntity::getId, userId);
        UserEntity userEntity = userMapper.selectOne(lqwUser);
        if (ObjectUtils.isEmpty(userEntity)) {
            log.error("微信安全审核失败，原因：用户不存在");

            return "";
        }

        // 获取access_token
        String accessToken = redisHelper.get(ACCESS_TOKEN_KEY);
        if (StringUtils.isBlank(accessToken)) {
            log.error("微信安全审核失败，原因：获取access_token失败");

            return "";
        }

        // 构造请求参数
        JSONObject jsonObject = new JSONObject();
        jsonObject.put("openid", userEntity.getOpenId());
        jsonObject.put("scene", safeAuditConfig.getScene());
        jsonObject.put("version", safeAuditConfig.getVersion());
        jsonObject.put("media_type", safeAuditConfig.getMediaType());
        jsonObject.put("media_url", mediaUrl);

        // 发送请求
        String httpResult =
                HttpClientHelper.doDouyinSubPostJson(
                        safeAuditConfig.getMediaUrl() + accessToken, jsonObject.toJSONString());
        // 检查返回结果
        if (StringUtils.isBlank(httpResult)) {
            log.error("微信安全审核失败，原因：请求返回结果为空");

            return "";
        }

        // 解析返回结果
        JSONObject resultJson = JSON.parseObject(httpResult);
        if (resultJson.getInteger("errcode") != 0) {
            log.error("微信安全审核失败，原因：{}", resultJson.getString("errmsg"));

            return "";
        }

        // 异步标识
        return resultJson.getString("trace_id");
    }

    /**
     * 微信安全审核——回调
     *
     * @param callbackContent 回调内容
     * @return 审核序号
     */
    public String mediaCheckAsyncCallback(String callbackContent) {

        // 解析返回结果
        JSONObject resultJson = JSON.parseObject(callbackContent);
        if (resultJson.getInteger("errcode") != 0) {
            log.error("微信安全审核失败，原因：{}", resultJson.getString("errmsg"));

            return "";
        }

        // 获取建议结果
        JSONObject suggestionJson = resultJson.getJSONObject("result");
        return String.format(
                safeAuditConfig.getTemplate(),
                SafeLabelEnum.getLabelByNumber(suggestionJson.getInteger("label")).getLabel(),
                SafeSuggestionEnum.getLabelByNumber(suggestionJson.getString("suggest")).getName());
    }
}