微信乘车卡是怎么判断手机是否 ROOT 的？

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

这是一个创建于 2086 天前的主题，其中的信息可能已经有所发展或是发生改变。

以下为我观察到的行为，不保证正确。

tldr

接口 https://wlx.tenpay.com/cgi-bin/wx/hce/ccm_hce_account_info.cgi 返回的数据存在 retcode: "912320107"，也就是 DEVICE_IS_ROOT: "912320107"

代码节选

节选自 pages/index/index.js

{
  var e = require("../../utils/config.js"),
    t = require("../../utils/util.js"),
    o = require("../../common/request.js"),
    a = require("../../utils/lib.js"),
    n = requirePlugin("vfcPlugin").vfc,
    i = require("../../logic/login.js"),
    c = require("../../logic/uiHelper.js"),
    r = require("../../logic/uiShare.js"),
    s = require("../../logic/report"),
    d = require("../../common/token.js"),
    l = require("../../logic/location.js"),
    u = require("../../logic/elementData.js"),
    g = require("../../utils/thirdparty/aes.js").CryptoJS,
    _ = require("../../utils/thirdparty/rsa.js"),
    f = require("../../utils/thirdparty/md5.js"),
    p = getApp(),
    request = o.request,
    h = { RIGHT: "/img/right.png", FALSE: "/img/false.png" },
    w = { BAL: "余额不足", FAIL: "该城市暂不支持使用乘车卡" },
    y = { normal: "刷新", refresh: "已刷新" },
    C = {};
  Page({
    requestCardInfo: function() {
      arguments.length > 0 && void 0 !== arguments[0] && arguments[0];
      var e = this;
      t.compare(C.SDKVersion, "2.6.2", !0) >= 0
        ? wx.getWxSecData({
            complete: function(t) {
              e.qryAccInfo({
                sec_data_enc: t.encryptedData,
                sec_data_enc_iv: t.iv
              });
            }
          })
        : e.qryAccInfo({
            sec_data_enc: "",
            sec_data_enc_iv: "",
            wx_version: C.version,
            sdk_version: C.SDKVersion
          });
    },
    qryAccInfo: function() {
      var request_raw_data =
          arguments.length > 0 && void 0 !== arguments[0] ? arguments[0] : {},
        o = this,
        request_data = Object.assign(
          {
            ykt_id: o.data.ykt_id,
            city_code: o.data.city_code,
            card_id: i.getCardId() || ""
          },
          request_raw_data
        );
      request({
        url: e.GET_CARD_INFO,
        showLoading: !0,
        data: request_data,
        success: function(resp) {
          var resp_data = resp.data;
          if ((console.log(resp), "0" === resp_data.retcode))
            if ("0" === resp_data.open_state) {
              var n = {
                cloud_card_id: resp_data.cloud_card_id,
                vfc_card_id: resp_data.vfc_card_id,
                vfc_user_id: resp_data.vfc_user_id,
                vfc_user_name: resp_data.vfc_user_name,
                acc_no: resp_data.acc_no,
                card_id: resp_data.card_id
              };
              wx.setStorageSync(e.USER_INFO_KEY, n);
              var i = resp_data.cloud_card_id || "";
              o.setData({
                loading: !1,
                acc_no: resp_data.acc_no,
                cloudCardId: i,
                formatCloudCardId: i.replace(/(\d{4})/g, "$1 ")
              }),
                p.setGlobalData({ acc_no: resp_data.acc_no }),
                wx.getStorageSync(e.HCETOKEN)
                  ? wx.getStorageSync(e.CERT_NO)
                    ? o.updateCardInfo()
                    : o.reqCertNo()
                  : o.requestToken();
            } else
              wx.redirectTo({
                url: "/pages/card/pre/pre?cardImg=" + o.data.cardImg
              });
          else
            switch (resp_data.retcode) {
              case e.RETCODE.USER_NOT_EXIST:
              case e.RETCODE.USER_STOPPED:
              case e.RETCODE.NEW_USER_NOT_NEED_PHONE_AUTH:
                wx.redirectTo({
                  url:
                    "/pages/card/pre/pre?retcode=" +
                    resp_data.retcode +
                    "&cardImg=" +
                    o.data.cardImg
                });
                break;
              case e.RETCODE.OPEN_NOT_IN_WHITELIST:
              case e.RETCODE.OPEN_NOT_ALLOWED:
                o.setData({ loading: !1, InWhiteList: !1 });
                break;
              case e.RETCODE.DEVICE_IS_ROOT:
                wx.redirectTo({
                  url: "/pages/notSupport/notSupport?type=isRoot"
                });
                break;
              default:
                c.commonModal({
                  confirmText: "重试",
                  retcode: resp_data.retcode,
                  success: function(e) {
                    e.confirm && o.render();
                  }
                });
            }
        },
        fail: function(e) {
          wx.showModal({
            title: "提示",
            content: "系统繁忙，请重试",
            confirmText: "重试",
            success: function(e) {
              e.confirm && o.render();
            }
          });
        }
      });
    }
  });
}

节选自 common/request.js

function request(user_query) {
  function isLoginUrl() {
    return real_query.url === n.LOGIN_CGI;
  }
  var real_query = Object.assign(
    {
      retry: !0,
      method: "POST",
      header: { "content-type": "application/x-www-form-urlencoded" },
      isReport: !0
    },
    user_query
  );
  real_query.data || (real_query.data = {}),
    (real_query.data.s_tk = token.getSysInfoToken()),
    (real_query.data.g_tk = token.getACSRFToken()),
    (real_query.data.version = n.APP_VERSION);
  var l = new Date().getTime().toString();
  (real_query.data.timestamp = l.substr(0, 10)),
    real_query.showLoading && wx.showLoading({ title: "加载中..." });
  var login_data = logic_login.getLoginData();
  if (login_data && "POST" == real_query.method)
    for (var d in login_data)
      ("wlx_app_id" !== d &&
        "wlx_open_id" !== d &&
        "wlx_skey" !== d &&
        "wlx_skey_type" !== d) ||
        (real_query.data[d] = login_data[d]);
  real_query.success = function(resp) {
    console.log(resp);
    var a = resp.data || {};
    200 == resp.statusCode
      ? !1 === isLoginUrl() &&
        real_query.retry &&
        "object" == (void 0 === a ? "undefined" : t(a)) &&
        logic_login.needAutoLogin(a.retcode)
        ? !0 !== request.retryMap[user_query.url]
          ? ((request.retryMap[user_query.url] = !0),
            o({
              fromCache: !1,
              showLoading: user_query.showLoading,
              success: function(o) {
                request(user_query);
              }
            }))
          : wx.showModal({
              title: "提示",
              content: "登录失效，请重新登录?",
              showCancel: !0,
              success: function(t) {
                t.confirm
                  ? o({
                      fromCache: !1,
                      success: function(o) {
                        request(user_query);
                      }
                    })
                  : wx.navigateBack({ delta: 5 });
              }
            })
        : (!1 === isLoginUrl() &&
            !0 === request.retryMap[user_query.url] &&
            (request.retryMap[user_query.url] = !1),
          user_query.success(resp))
      : user_query.fail && user_query.fail();
  };
  (real_query.complete = function(e) {
    real_query.showLoading && wx.hideLoading(),
      user_query.complete && user_query.complete(e);
  }),
    console.log(real_query),
    wx.request(real_query);
}

节选自 logic/login.js

function getLoginData() {
  try {
    var e = wx.getStorageSync(r.LOGIN_DATA_KEY);
    if (
      "" !== e.wlx_app_id &&
      "" !== e.wlx_open_id &&
      "" !== e.wlx_skey &&
      "" !== e.wlx_skey_type
    ) {
      var n = getApp();
      return n && n.globalData && (n.globalData.wlx_open_id = e.wlx_open_id), e;
    }
    return null;
  } catch (e) {
    return null;
  }
}

节选自 common/token.js

{
  function e() {
    try {
      var e = wx.getSystemInfoSync(),
        t = {
          model: e.model,
          pixelRatio: e.pixelRatio,
          screenWidth: e.screenWidth,
          screenHeight: e.screenHeight
        };
      return r(JSON.stringify(t));
    } catch (e) {
      console.log("getSysInfoMd5Old");
    }
  }
  function t() {
    var e = o.getOpenIdFromStorage();
    return e ? r(e + n.SYSINFO_SALT) : (console.log("getSysInfoMd5"), "");
  }
  var r = require("../utils/thirdparty/md5.js"),
    n = require("../utils/config.js"),
    o = require("../logic/login.js");
  module.exports = {
    getSysInfoToken: function() {
      return e().substr(-4);
    },
    getACSRFToken: function() {
      try {
        var e = wx.getStorageSync(n.LOGIN_DATA_KEY);
        if (e) {
          for (var t = 5381, r = e.wlx_skey, o = 0, i = r.length; o < i; ++o)
            t += (t << 5) + r.charAt(o).charCodeAt();
          return 2147483647 & t;
        }
      } catch (e) {
        return "";
      }
      return "";
    },
    getSysInfoMd5: t,
    getGuidMd5: function() {
      return t();
    },
    md5: r
  };
}

这判断很有趣，清空数据后第一次打开就能用，再次打开就不行了。