q-koa 13.8.39 → 13.8.41

package/core/file/plugins/weixin/controller.js

@@ -1539,12 +1539,6 @@ exports.union_notify = async (ctx) => {
   try {
     const notifyData = ctx.request.body
 
-    // TODO: 临时观察日志，上线后删除
-    app.service.log.push({
-      app,
-      message: `通联融合回调union_notify报文: ${JSON.stringify(notifyData || {})}`,
-    })
-
     if (!notifyData || typeof notifyData !== 'object') {
       ctx.status = 400
       ctx.body = 'FAIL'
@@ -1588,17 +1582,6 @@ exports.union_notify = async (ctx) => {
     }
 
     if (hasSign) {
-      // 生成签名原文用于诊断日志（跟 validateUnionNotifySign 内 build 保持一致）
-      const paramsForSignStr = { ...notifyData }
-      delete paramsForSignStr.sign
-      const sortedKeysForSign = Object.keys(paramsForSignStr).sort()
-      let diagsignStr = ''
-      for (const k of sortedKeysForSign) {
-        const v = paramsForSignStr[k]
-        if (v === undefined || v === null || v === '') continue
-        if (diagsignStr) diagsignStr += '&'
-        diagsignStr += `${k}=${v}`
-      }
       const signOk = validateUnionNotifySign({
         notifyData,
         signType: rawSignType,
@@ -1607,15 +1590,9 @@ exports.union_notify = async (ctx) => {
         fallbackPlatformPublicKey: UNION_PROD_PLATFORM_PUBLIC_KEY,
       })
       if (!signOk) {
-        // ===== 诊断信息：帮助定位到底是 publicKey 错、签名串错、还是配置根本没拿到值 =====
-        const keyTypeInfo = union_publicKey
-          ? (String(union_publicKey).includes('-----BEGIN')
-              ? `pem-with-head,len=${String(union_publicKey).length},head=${String(union_publicKey).slice(0, 24)}`
-              : `pem-body-only,len=${String(union_publicKey).length},head=${String(union_publicKey).slice(0, 24)}`)
-          : 'NULL/UNDEFINED'
         app.service.log.push({
           app,
-          message: `通联回调验签失败【详细诊断】type=${rawSignType} cusid=${cusid} appid=${notifyData.appid} trxid=${notifyData.trxid} | union_publicKey=${keyTypeInfo} | union_publicKey_isSet=!!${!!union_publicKey} | union_md5Key_isSet=!!${!!union_md5Key} | signStr_len=${diagsignStr.length} | signStr=${diagsignStr} | raw_data=${JSON.stringify(notifyData)}`,
+          message: `通联回调验签失败(type=${rawSignType}): ${JSON.stringify(notifyData)}`,
         })
         ctx.body = 'FAIL'
         return
@@ -1693,9 +1670,11 @@ exports.union_notify = async (ctx) => {
           })
         }
       } else if (trxcode !== 'VSP683') {
+        // 非 VSP683（扫码支付/条码/小程序支付类、退款类）且不在 VSP501/VSP503/VSP681/VSP682/VSP684 名单里：
+        // 只记录业务指标，不打印完整报文（避免日志爆且涉及 openid/敏感字段）。
         app.service.log.push({
           app,
-          message: JSON.stringify(notifyData),
+          message: `通联回调未处理trxcode=${trxcode} cusorderid=${cusorderid} trxid=${trxid} trxamt=${trxamt} trxstatus=${trxstatus}`,
         })
       }
     } else {
@@ -1715,11 +1694,6 @@ exports.union_notify = async (ctx) => {
 exports.notify = async (ctx) => {
   const { app } = getAppByCtx(ctx)
   const result = ctx.request.xmlBody
-  // TODO: 临时观察日志，上线后删除
-  app.service.log.push({
-    app,
-    message: `微信支付回调notify报文: ${JSON.stringify(result || {})}`,
-  })
   if (!result || !result.xml) return sendWxFail(ctx, 'INVALID_BODY')
 
   // ===== 微信 V2 回调验签 + mch_id 匹配 =====
@@ -1994,11 +1968,6 @@ const getRefundResultJson = async ({ req_info, app_key }) => {
 exports.refund_notify = async (ctx) => {
   const { app } = getAppByCtx(ctx)
   const result = ctx.request.xmlBody
-  // TODO: 临时观察日志，上线后删除
-  app.service.log.push({
-    app,
-    message: `微信退款回调refund_notify报文: ${JSON.stringify(result || {})}`,
-  })
   if (!result || !result.xml) return sendWxFail(ctx, 'INVALID_BODY')
 
   const pay_config = ctx.params.sub || 'weixin_pay'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "q-koa",
-  "version": "13.8.39",
+  "version": "13.8.41",
   "description": "",
   "main": "index.js",
   "scripts": {