微信web协议分析和实现微信机器人

微信web协议分析和实现微信机器人（微信网页版 wx2.qq.com）

执行流程

+--------------+     +---------------+   +---------------+
|              |     |               |   |               |
|<
4000
/span>   Get UUID   |     |  Get Contact  |   | Status Notify |
|              |     |               |   |               |
+-------+------+     +-------^-------+   +-------^-------+
|                    |                   |
|                    +-------+  +--------+
|                            |  |
+-------v------+               +-----+--+------+      +--------------+
|              |               |               |      |              |
|  Get QRCode  |               |  Weixin Init  +------>  Sync Check  <----+
|              |               |               |      |              |    |
+-------+------+               +-------^-------+      +-------+------+    |
|                              |                      |           |
|                              |                      +-----------+
|                              |                      |
+-------v------+               +-------+--------+     +-------v-------+
|              | Confirm Login |                |     |               |
+------>    Login     +---------------> New Login Page |     |  Weixin Sync  |
|      |              |               |                |     |               |
|      +------+-------+               +----------------+     +---------------+
|             |
|QRCode Scaned|
+-------------+

WebWechat API

1. 获取UUID（参考方法 getUUID）

window.QRLogin.code = 200; window.QRLogin.uuid = "xxx"

2. 显示二维码（参考方法 showQrCode）

3. 等待登录（参考方法 waitForLogin）这里是微信确认登录

window.code=xxx;

xxx:
408 登陆超时
201 扫描成功
200 确认登录

当返回200时，还会有
window.redirect_uri="https://wx.qq.com/cgi-bin/mmwebwx-bin/webwxnewloginpage?ticket=xxx&uuid=xxx&lang=xxx&scan=xxx";

4. 登录获取Cookie（参考方法 login）

<error>
<ret>0</ret>
<message>OK</message>
<skey>xxx</skey>
<wxsid>xxx</wxsid>
<wxuin>xxx</wxuin>
<pass_ticket>xxx</pass_ticket>
<isgrayscale>1</isgrayscale>
</error>

skey

wxsid

wxuin

pass_ticket

5. 微信初始化（参考方法 wxInit）

{
"BaseResponse": {
"Ret": 0,
"ErrMsg": ""
},
"Count": 11,
"ContactList": [...],
"SyncKey": {
"Count": 4,
"List": [
{
"Key": 1,
"Val": 635705559
},
...
]
},
"User": {
"Uin": xxx,
"UserName": xxx,
"NickName": xxx,
"HeadImgUrl": xxx,
"RemarkName": "",
"PYInitial": "",
"PYQuanPin": "",
"RemarkPYInitial": "",
"RemarkPYQuanPin": "",
"HideInputBarFlag": 0,
"StarFriend": 0,
"Sex": 1,
"Signature": "Apt-get install B",
"AppAccountFlag": 0,
"VerifyFlag": 0,
"ContactFlag": 0,
"WebWxPluginSwitch": 0,
"HeadImgFlag": 1,
"SnsFlag": 17
},
"ChatSet": xxx,
"SKey": xxx,
"ClientVersion": 369297683,
"SystemTime": 1453124908,
"GrayScale": 1,
"InviteStartCount": 40,
"MPSubscribeMsgCount": 2,
"MPSubscribeMsgList": [...],
"ClickReportInterval": 600000
}

SyncKey

User

6. 开启微信状态通知（参考方法 wxStatusNotify）

{
"BaseResponse": {
"Ret": 0,
"ErrMsg": ""
},
...
}

7. 获取联系人列表（参考方法 getContact）

{
"BaseResponse": {
"Ret": 0,
"ErrMsg": ""
},
"MemberCount": 334,
"MemberList": [
{
"Uin": 0,
"UserName": xxx,
"NickName": "Urinx",
"HeadImgUrl": xxx,
"ContactFlag": 3,
"MemberCount": 0,
"MemberList": [],
"RemarkName": "",
"HideInputBarFlag": 0,
"Sex": 0,
"Signature": "我是二蛋",
"VerifyFlag": 8,
"OwnerUin": 0,
"PYInitial": "URINX",
"PYQuanPin": "Urinx",
"RemarkPYInitial": "",
"RemarkPYQuanPin": "",
"StarFriend": 0,
"AppAccountFlag": 0,
"Statues": 0,
"AttrStatus": 0,
"Province": "",
"City": "",
"Alias": "Urinxs",
"SnsFlag": 0,
"UniFriend": 0,
"DisplayName": "",
"ChatRoomId": 0,
"KeyWord": "gh_",
"EncryChatRoomId": ""
},
...
],
"Seq": 0
}

8.消息检查（参考方法 syncCheck）

window.synccheck={retcode:"xxx",selector:"xxx"}

retcode:
0 正常
1100 失败/登出微信
selector:
0 正常
2 新的消息
7 进入/离开聊天界面

9. 获取最新消息（参考方法 webwxsync）

时间戳取反

{
'BaseResponse': {'ErrMsg': '', 'Ret': 0},
'SyncKey': {
'Count': 7,
'List': [
{'Val': 636214192, 'Key': 1},
...
]
},
'ContinueFlag': 0,
'AddMsgCount': 1,
'AddMsgList': [
{
'FromUserName': '',
'PlayLength': 0,
'RecommendInfo': {...},
'Content': "",
'StatusNotifyUserName': '',
'StatusNotifyCode': 5,
'Status': 3,
'VoiceLength': 0,
'ToUserName': '',
'ForwardFlag': 0,
'AppMsgType': 0,
'AppInfo': {'Type': 0, 'AppID': ''},
'Url': '',
'ImgStatus': 1,
'MsgType': 51,
'ImgHeight': 0,
'MediaId': '',
'FileName': '',
'FileSize': '',
...
},
...
],
'ModChatRoomMemberCount': 0,
'ModContactList': [],
'DelContactList': [],
'ModChatRoomMemberList': [],
'DelContactCount': 0,
...
}

10. 发送消息（参考方法 webwxsendmsg）

{
"BaseResponse": {
"Ret": 0,
"ErrMsg": ""
},
...
}