平台转发消息至用户 HTTP 服务1

const express = require('express')
const path = require('path')
const bodyParser = require('body-parser');
const sha1 = require('js-sha1');
const app = express()
app.use(bodyParser.json());
 
// 鉴权信息校验的代码在上文已经解释过，这里使用Middleware来简化代码
function checkSignatureMiddleware(req, res, next) {
  const token = 'test';
  const { signature, timestamp, nonce } = req.headers;
  let tmpStr = [token, timestamp, nonce].sort().join('');
  tmpStr = sha1(tmpStr);
  if (tmpStr === signature) {
    next(); // 身份校验通过，继续执行后续的中间件和路由处理器
  } else {
    res.status(403).send('Forbidden'); // 身份校验失败，返回403 Forbidden 状态码
  }
}

app.get('/test', checkSignatureMiddleware, (req, res) => {
  const { echostr } = req.headers;
  res.set('Content-Type', 'text/plain; charset=utf-8');
  res.send(echostr);
});

// 注意接收规则引擎转发的数据接口为 POST 类型
app.post('/test', checkSignatureMiddleware, (req, res) => {
  const params = req.body.payload.params;
  console.log(params); // { body_temperature: 36 }
  res.end();
});