drb/app/Http/Controllers/Api/DingTalkController.php

<?php

namespace App\Http\Controllers\Api;

use App\Service\DingCallbackCrypto;
use App\Service\DingTalkCrypto;
use App\Service\DrbService;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Http;
use Illuminate\Support\Facades\Log;

class DingTalkController extends BaseController
{
    public function getAccessToken(Request $request)
    {
        $service = new DrbService();
        list($status,$data) = $service->getAccessToken();

        if($status){
            return $this->json_return(200,'',$data);
        }else{
            return $this->json_return(201,$data);
        }
    }

    public function getUserByCode(Request $request)
    {
        $service = new DrbService();
        list($status,$data) = $service->getUserByCode($request->all());

        if($status){
            return $this->json_return(200,'',$data);
        }else{
            return $this->json_return(201,$data);
        }
    }

    public function createProcessInstance(Request $request)
    {
        $service = new DrbService();
        $userData = $request->userData;
        list($status,$data) = $service->createProcessInstance($request->all(), $userData);

        if($status){
            return $this->json_return(200,'',$data);
        }else{
            return $this->json_return(201,$data);
        }
    }

    public function getTemplateFields(Request $request)
    {
        $service = new DrbService();
        list($status,$data) = $service->getTemplateFields($request->all());

        if($status){
            return $this->json_return(200,'',$data);
        }else{
            return $this->json_return(201,$data);
        }
    }

    /**
     * 钉钉事件回调
     */
    public function dinCallback(Request $request)
    {
        $token  = config('dingtalk.token');    // 钉钉事件订阅 token
        $aesKey = config('dingtalk.aes_key');  // 钉钉事件订阅 aes_key
        $corpid = config('dingtalk.app_key');  // 钉钉事件订阅 corpid

        $crypt = new DingCallbackCrypto($token, $aesKey, $corpid);

        try {
            $encrypt = $request->input('encrypt');
            $msgSignature = $request->get('msg_signature');
            $timeStamp = $request->get('timestamp');
            $nonce = $request->get('nonce');

            // 1️⃣ 解密
            $event = $crypt->getDecryptMsg($msgSignature, $timeStamp, $nonce, $encrypt);
            $event = json_decode($event, true);
//            Log::info('钉钉回调解密后的数据', $event);

            // 2️⃣ 处理事件
            if (isset($event['EventType'])) {
                switch ($event['EventType']) {
                    case 'bpms_instance_change':
                        $processInstanceId = $event['processInstanceId'] ?? null;
                        $result = $event['result'] ?? null;
//                        Log::info('审批实例变更', compact('processInstanceId','result'));

                        // 捕捉最后一个节点审核通过
                        if ($result === 'agree') {
                            // TODO: 执行你的业务逻辑，比如更新数据库、触发后续操作
                            Log::info("最后一个节点审核通过，审批完成", compact('processInstanceId'));
                        }elseif ($result === 'oppose' || $result === 'terminate' || $result == "refuse") {
                            Log::info("审批流程被驳回或终止", compact('processInstanceId','result'));
                        }

                        break;
                    case 'bpms_task_change':
                        $processInstanceId = $event['processInstanceId'] ?? null;
                        $taskId = $event['taskId'] ?? null;
                        $result = $event['result'] ?? null;
                        $approverUserId = $event['staffId'] ?? null;

//                        Log::info('审批任务变更', compact('processInstanceId','taskId','result'));

                        // 捕获节点被驳回
                        if ($result === 'refuse') {
//                            Log::info("节点被驳回", compact('processInstanceId','taskId','approverUserId'));
                            // TODO: 执行你的业务逻辑，比如通知申请人、更新状态
                        }
                        break;
                }
            }

            // 3️⃣ 返回加密 success
            $res = $crypt->getEncryptedMap('success');
            return response($res, 200)->header('Content-Type', 'application/json');

        } catch (\Exception $e) {
            Log::error('钉钉回调解密异常', ['msg' => $e->getMessage()]);
            return response()->json(['errcode'=>1, 'errmsg'=>'解密失败']);
        }
    }
}