f

internal/infrastructure/external/nuoer/crypto.go

@@ -36,3 +36,24 @@ func genMD5(s string) string {
 	sum := md5.Sum([]byte(s))
 	return hex.EncodeToString(sum[:])
 }
+
+// MD5Encrypt 对业务入参做 MD5 加密（小写十六进制），用于 encryptionType=2。
+func MD5Encrypt(plaintext string) string {
+	return genMD5(plaintext)
+}
+
+// encryptBodyMD5 将 body 中各非空字段值转为 MD5 密文。
+func encryptBodyMD5(body map[string]string) map[string]string {
+	if len(body) == 0 {
+		return body
+	}
+	encrypted := make(map[string]string, len(body))
+	for k, v := range body {
+		if strings.TrimSpace(v) == "" {
+			encrypted[k] = v
+			continue
+		}
+		encrypted[k] = MD5Encrypt(v)
+	}
+	return encrypted
+}

internal/infrastructure/external/nuoer/crypto_test.go

@@ -2,6 +2,28 @@ package nuoer
 
 import "testing"
 
+func TestMD5Encrypt(t *testing.T) {
+	got := MD5Encrypt("13290879000")
+	want := genMD5("13290879000")
+	if got != want {
+		t.Fatalf("MD5Encrypt mismatch: got %s want %s", got, want)
+	}
+}
+
+func TestEncryptBodyMD5(t *testing.T) {
+	body := map[string]string{
+		"idCard": "330129199511153412",
+		"mobile": "13290879000",
+	}
+	got := encryptBodyMD5(body)
+	if got["idCard"] != MD5Encrypt("330129199511153412") {
+		t.Fatalf("idCard not encrypted: got %s", got["idCard"])
+	}
+	if got["mobile"] != MD5Encrypt("13290879000") {
+		t.Fatalf("mobile not encrypted: got %s", got["mobile"])
+	}
+}
+
 func TestSign(t *testing.T) {
 	body := map[string]string{
 		"name":   "张三",

internal/infrastructure/external/nuoer/nuoer_service.go

@@ -90,7 +90,7 @@ func (s *NuoerService) logError(transactionID, apiKey, seqNo string, err error,
 	s.logger.LogError(seqNo, transactionID, apiKey, err, payload)
 }
 
-func (s *NuoerService) CallAPI(ctx context.Context, apiKey, apiPath string, body map[string]string) (*nuoerResponse, error) {
+func (s *NuoerService) CallAPI(ctx context.Context, apiKey, apiPath string, body map[string]string, encryptionType ...int) (*nuoerResponse, error) {
 	requestURL := strings.TrimSuffix(s.config.URL, "/")
 	if apiPath != "" {
 		if !strings.HasPrefix(apiPath, "/") {
@@ -106,14 +106,27 @@ func (s *NuoerService) CallAPI(ctx context.Context, apiKey, apiPath string, body
 		transactionID = id
 	}
 
-	// 对调用方传入的 body 全量参与加签（排除空值，按 key 升序，见 Sign）
-	sign := Sign(body, s.config.AppSecret)
+	var encType int
+	if len(encryptionType) > 0 {
+		encType = encryptionType[0]
+	}
+
+	requestBody := body
+	if encType == 2 {
+		requestBody = encryptBodyMD5(body)
+	}
+
+	// 对请求 body 全量参与加签（排除空值，按 key 升序，见 Sign）
+	sign := Sign(requestBody, s.config.AppSecret)
 
 	requestPayload := map[string]interface{}{
 		"appId":  s.config.AppID,
 		"sign":   sign,
 		"apiKey": apiKey,
-		"body":   body,
+		"body":   requestBody,
+	}
+	if encType > 0 {
+		requestPayload["encryptionType"] = encType
 	}
 
 	if s.logger != nil {