Skip to content

Commit 4650af9

Browse files
bump to 0.9.3
- feat: dropped supporting `RSA_PKCS1_PADDING`
1 parent 772d45a commit 4650af9

3 files changed

Lines changed: 8 additions & 3 deletions

File tree

CHANGELOG.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,10 @@
11
# 变更历史
22

3+
## v0.9.3 (2025-03-30)
4+
5+
- 优化`Rsa.encrypt``Rsa.decrypt` 第三参数放弃支持 `RSA_PKCS1_PADDING` 填充方案;
6+
- 标记`Rsa.RSA_PKCS1_PADDING`封装常量为废弃,下一主要版本将剔除;
7+
38
## v0.9.2 (2025-03-22)
49

510
- 支持 `Hash.keyObjectFrom``Hash.md5` 第一个参数是`KeyObject`对象的用法;

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -552,9 +552,9 @@ Q: `APIv3`上请求参数敏感信息如何加密?返回参数敏感信息如
552552

553553
> 接口区分国内版还是国际版,国内版的`RSA`填充方案是`RSA_PKCS1_OAEP_PADDING`,方法如下:
554554
>
555-
> 加密: `Rsa.encrypt('原始信息', Rsa.from(platformPublicKeyFilePath, Rsa.KEY_TYPE_PUBLIC), Rsa.RSA_PKCS1_OAEP_PADDING)`
555+
> 加密: `Rsa.encrypt('原始信息', Rsa.from(platformPublicKeyFilePath, Rsa.KEY_TYPE_PUBLIC))`
556556
>
557-
> 解密: `Rsa.decrypt('密文base64', Rsa.from(merchantPrivateKeyFilePath, Rsa.KEY_TYPE_PRIVATE), Rsa.RSA_PKCS1_OAEP_PADDING)`
557+
> 解密: `Rsa.decrypt('密文base64', Rsa.from(merchantPrivateKeyFilePath, Rsa.KEY_TYPE_PRIVATE))`
558558
>
559559
> 国际版`RSA`填充方案是`RSA_PKCS1_PADDING`,本类库放弃支持此种`加/解密`填充方案,同时`node18.19.0`也是最后一版默认支持`加密`的版本(延展阅读见[CVE-2023-46809](https://nodejs.org/en/blog/vulnerability/february-2024-security-releases)[这里](https://github.com/wechatpay-apiv3/wechatpay-php/issues/133)),如需使用,请自行寻替代方案。
560560

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "wechatpay-axios-plugin",
3-
"version": "0.9.2",
3+
"version": "0.9.3",
44
"description": "微信支付APIv2及v3 NodeJS SDK,支持CLI模式请求OpenAPI,支持v3证书下载,v2付款码支付、企业付款、退款,企业微信-企业支付-企业红包/向员工付款,v2&v3 Native支付、扫码支付、H5支付、JSAPI/小程序支付、合单支付...",
55
"main": "index.js",
66
"typings": "index.d.ts",

0 commit comments

Comments
 (0)