前言

http://code.taobao.org/p/mpaa...

查找AlipayWallet相关的代码

1、alipaywalletchatvoicesaver
iOS支付宝蚂蚁森林能量收取助手

diff
ALISJSBridgeKit

刚开源不久的
https://github.com/davidxwwan... 目前支付宝使用的JsBridge，9 天之前 有人以静态库的形式 共享到GitHub

//JsBridge类，用来处理Native和Js的相互调用

//JsBridge类，用来处理Native和Js的相互调用
+@interface PSDJsBridge : NSObject<UIWebViewDelegate>
+
+/**
+ *  @brief 创建一个JsBridge对象
+ *
+ *  @date 2014-08-20
+ *
+ *  @param page     关联的PSDPage对象
+ *  @param webView  关联的webView对象
+ *  @param delegate webView的代理
+ *
+ *  @return 返回一个JsBridge对象
+ */
++ (instancetype)bridge4Page:(PSDPage *)page webView:(UIWebView *)webView webViewDelegate:(id<UIWebViewDelegate>)delegate;
+
+/**

#import "PSDKernel.h"@class NSString, PSDJsBridge, PSDPageParam;@interface PSDPage : PSDKernel
{PSDJsBridge *_bridge;NSString *_pageUUID;PSDPageParam *_pageParam;
}+ (id)pageWithPageParam:(id)arg1 parentObject:(id)arg2;
@property(retain, nonatomic) PSDPageParam *pageParam; // @synthesize pageParam=_pageParam;
@property(retain, nonatomic) NSString *pageUUID; // @synthesize pageUUID=_pageUUID;
@property(readonly, nonatomic) PSDJsBridge *bridge; // @synthesize bridge=_bridge;
- (void).cxx_destruct;
- (id)createParam;
- (id)initWithPageParam:(id)arg1 parentObject:(id)arg2;
- (void)triggerRecord;
- (id)getH5PageHAR;@end

\t_jsApiManager (PSDJsApiManager*): <PSDJsApiManager: 0x8ce3fa0>
\t_pluginManager (PSDPluginManager*): <PSDPluginManager: 0x8cd48a0>

cy# [#0x10b689e0 _ivarDescription].toString()
`<PSDJsBridge: 0x10b689e0>:
in PSDJsBridge:
\t_isBridgeReady (BOOL): 1
\t_isFailToLoad (BOOL): 0
\t_isTimeout (BOOL): 0
\t_uniqueId (int): 0
\t_page (PSDPage*): <PSDPage: 0x10b67e00>
\t_responseCallbacks (NSMutableDictionary*): <__NSDictionaryM: 0x10b68a40>
\t_startupMessageQueue (NSMutableArray*): nil
\t_contentView (PSDContentView*): <H5WebView: 0x1028ff00>
\t_webViewDelegate (<UIWebViewDelegate>*): <PSDView: 0x1028fec0>
\t_webViewUIDelegate (<WKUIDelegate>*): <PSDView: 0x1028fec0>
\t_webViewNavigationDelegate (<WKNavigationDelegate>*): <PSDView: 0x1028fec0>
\t_loadFinishedDate (NSDate*): <__NSDate: 0x10185770>
in NSObject:
\tisa (Class): NSKVONotifying_PSDJsBridge`

关键代码模拟请求

+(void)collectBubbles:(id)mbrige bubbleId:(NSString*)bID userId :(NSString*)userID
{long timems=[[NSDate  date] timeIntervalSince1970]*1000;NSString *timeStamp = [NSString stringWithFormat:@"%ld", timems];NSString *randNum=[H5WebViewController getNumberRandom:16];NSString *arg1=[NSString stringWithFormat:@"[{\"handlerName\":\"remoteLog\",\"data\":{\"seedId\":\"ANTFOREST-BEHAVIOR-CLICK-COLLECT\",\"param1\":\"shareBiz=none^bubbleId=%@^actionUserId=%@^type=behavior^currentTimestamp=%@\",\"param2\":\"monitor_type=clicked^remoteType=info^pageName=home.html^pageState=friend%@_enterhomeOff\",\"bizType\":\"antForest\"},\"callbackId\":\"remoteLog_15105601282940.%@\"},{\"handlerName\":\"rpc\",\"data\":{\"operationType\":\"alipay.antmember.forest.h5.collectEnergy\",\"requestData\":[{\"userId\":%@,\"bubbleIds\":[%@],\"av\":\"5\",\"ct\":\"ios\"}],\"disableLimitView\":true},\"callbackId\":\"rpc_15105601282960.%@\"}] ",bID,userID,timeStamp,userID,randNum,userID,bID,randNum];NSString *arg2=[NSString stringWithFormat:@"https://60000002.h5app.alipay.com/app/src/home.html?userId=%@",userID];PSDJsBridge *jsB=mbrige;[jsB _doFlushMessageQueue:arg1 url:arg2];
}

install.exec "killall -9 AlipayWallet"

模拟获取通讯录信息的请求

Nov 30 09:57:52 iPhone AlipayWallet[1494] <Warning>: KNHooklog :-(void)_doFlushMessageQueue:url:(have 2 value)return:(null)value1:__NSCFString-->[{"handlerName":"remoteLog","data":{"type":"monitor","bizType":"ALIPAYJSAPI","logLevel":1,"actionId":"MonitorReport","seedId":"ALIPAYJSAPI_INVOKE_COUNTER","param1":"hideOptionButton|getAllContacts|rpc"},"callbackId":"remoteLog_15120070727620.6753028354141861"}]value2:__NSCFString-->*https://render.alipay.com/p/f/fd-j6lzqrgm/addressbook.html?__webview_options__=canPullDown%3DNO%26showOptionMenu%3DNO%26transparent%3DNO%26networkIndicator%3DYES*object:<PSDJsBridge: 0x18f0ee40>##########################################

• _doFlushMessageQueue

{"handlerName":"remoteLog","data":{"type":"monitor","bizType":"ALIPAYJSAPI","logLevel":1,"actionId":"MonitorReport","seedId":"ALIPAYJSAPI_INVOKE_COUNTER","param1":"hideOptionButton|getAllContacts|rpc"},"callbackId":"remoteLog_15120070727620.6753028354141861"}

• url

"https://render.alipay.com/p/f/fd-j6lzqrgm/addressbook.html?__webview_options__=canPullDown=NO&showOptionMenu=NO&transparent=NO&networkIndicator=YES"

Nov 30 13:00:04 iPhone AlipayWallet[1935] <Warning>: KNHooklog :-(void)setRequest:(have 1 value)return:(null)value1:NSMutableURLRequest--><NSMutableURLRequest: 0xdd02880> { URL: https://render.alipay.com/p/f/fd-j6lzqrgm/addressbook.html?__webview_options__=canPullDown%3DNO%26showOptionMenu%3DNO%26transparent%3DNO%26networkIndicator%3DYES }object:PSDProxyEvent-proxy.request.start.handle##########################################

transformResponseData 获取数据

Nov 30 09:57:48 iPhone AlipayWallet[1494] <Warning>: KNHooklog :-(id)transformResponseData:(have 1 value)

Nov 29 18:59:41 iPhone AlipayWallet[1298] <Warning>: KNHooklog :-(void)addExposureChatMessage:(have 1 value)
CTDataFactoryViewController

Nov 29 18:59:39 iPhone AlipayWallet[1298] <Warning>: KNHooklog :-(void)mergeLoaclDataWithNewMessages:animation:cellDataItems:(have 3 value)

发送消息

Nov 29 19:05:35 iPhone AlipayWallet[1298] <Warning>: KNHooklog :-(void)addExposureChatMessage:(have 1 value)return:(null)value1:__NSDictionaryM-->{alignmentType = 2;data =     {HeadIcon = "http://tfs.alipayocts.com/images/partner/T11HbXXXXXXXX";action = 0;bizImage = "Local_Image_(null).right";bizMemo = The;cellSelected = 0;clientMsgID = "2088622058395905@151195353329254";fromUId = 20886058395905;localId = 10;m = "The ";msgID = 171129190533903721;seed = "2088622058395905@151195353329254";sessionId = 2088312287547988;sessionType = 1;timeLine = "2017-11-29 11:05:33 +0000";toUId = 20883127547988;userID = 20883187547988;userType = 1;};id = 11;msgType = 0;originId = 11;state = 2;templateData =     {m = "The ";};}object:<CTDataFactoryViewController: 0x5af3600>

Nov 30 10:08:02 iPhone AlipayWallet[1494] <Warning>: KNHooklog :-(void)_log:json:(have 2 value)return:(null)value1:__NSCFConstantString-->RCVDvalue2:__NSCFDictionary-->{callbackId = "rpc_15120076820390.505001102341339";data =     {headers =         {};operationType = "com.alipay.antmember.biz.rpc.invite.h5.InviteFriend";requestData =         ({friends =                 ({mobile = 15576235981;name = 155;scope = "NOT_RELATED_ALIPAY_ACCOUNT";userId = "";});scene = "C2C_OFFLINE_PAY";});};handlerName = rpc;}object:<PSDJsBridge: 0x18f0ee40>

分析H5WebViewController的请求逻辑

%hook DFClientDelegate
- (BOOL)application:(UIApplication *)application didFinishLaunchingWithOptions:(NSDictionary *)launchOptions {%log();// 打印某个类的所有方法的，查看所有方法的执行顺序[KNHook hookClass:@"H5Configs"];//H5WebViewController[KNHook hookClass:@"PSDJsBridge"];//[KNHook hookClass:@"H5ExternNativeApiManager"];//getUaPageName    aluMTopService _tokenLoginInvoker[KNHook hookClass:@"TBSDKMTOPServer"];//getUaPageName    aluMTopService _tokenLoginInvokerreturn %orig;
}
%end

     ##########################################
Nov 29 14:42:50 iPhone AlipayWallet[2539] <Warning>: KNHooklog :-(void)_doFlushMessageQueue:url:(have 2 value)return:(null)value1:__NSCFString-->[{"handlerName":"hideOptionMenu","data":{},"callbackId":"hideOptionMenu_15119377706460.3834035850595683"},{"handlerName":"getAllContacts","data":{},"callbackId":"getAllContacts_15119377706480.0362124708481133"},{"handlerName":"reportData","data":{"spm":{"url":"https://render.alipay.com/p/f/fd-j6lzqrgm/addressbook.html","bizType":"H5behavior","isSPM":true,"cityid":"","spmId":"a284.b3011"},"spmDetail":{"url":"https://render.alipay.com/p/f/fd-j6lzqrgm/addressbook.html","fullUrl":"https://render.alipay.com/p/f/fd-j6lzqrgm/addressbook.html?__webview_options__=canPullDown%3DNO%26showOptionMenu%3DNO%26transparent%3DNO%26networkIndicator%3DYES","mPageState":"","bizScenario":"","mBizScenario":"","appId":"20000067"}},"callbackId":"reportData_15119377706540.555558682186529"},{"handlerName":"remoteLog","data":{"seedId":"H5_TRACERT_USE_LOG","actionId":"clicked","logLevel":3,"param4":"tracert-version=1.1.0^mBizScenario=^mPageState=^mPageName=^fullURL=https://render.alipay.com/p/f/fd-j6lzqrgm/addressbook.html?__webview_options__=canPullDown%3DNO%26showOptionMenu%3DNO%26transparent%3DNO%26networkIndicator%3DYES","type":"monitor","bizType":"H5behavior"},"callbackId":"remoteLog_15119377706550.984431563410908"}]value2:__NSCFString-->https://render.alipay.com/p/f/fd-j6lzqrgm/addressbook.html?__webview_options__=canPullDown%3DNO%26showOptionMenu%3DNO%26transparent%3DNO%26networkIndicator%3DYESobject:<PSDJsBridge: 0xc4a0f50>

重点关注handlerName

关注url 参数的如何组装

Nov 29 14:42:50 iPhone AlipayWallet[2539] <Warning>: KNHooklog :-(void)_log:json:(have 2 value)

PSDConnectionMonitor

• PSDURLProtocolProcessor:didReceiveResponse

Nov 29 15:05:58 iPhone AlipayWallet[2579] <Warning>: KNHooklog :-(void)PSDURLProtocolProcessor:didReceiveResponse:(have 2 value)return:(null)value1:PSDURLProtocolProcessor--><PSDURLProtocolProcessor: 0x10ec60e0>value2:NSHTTPURLResponse--><NSHTTPURLResponse: 0xf93cf80> { URL: https://oalipay-dl-django.alicdn.com/rest/1.0/image?fileIds=5a6g8mQHRGidDFZ_6ftluAAAACMAAQQD&zoom=140w_140h } { status code: 200, headers {Age = 1096027;"Cache-Control" = "max-age=2592000";Connection = "keep-alive";"Content-Length" = 4181;"Content-Type" = "image/jpeg";Date = "Thu, 16 Nov 2017 14:38:51 GMT";EagleId = 776186cf15119391584854726e;Expires = "Sat, 16 Dec 2017 14:38:51 GMT";"Keep-Alive" = "timeout=120";"Last-Modified" = "Wed, 15 Apr 2015 07:03:44 GMT";Server = Tengine;"Timing-Allow-Origin" = "*";Via = "cache23.l2cn8[32,304-0,H], cache28.l2cn8[33,0], cache7.cn6[0,200-0,H], cache7.cn6[3,0]";"X-Cache" = "HIT TCP_MEM_HIT dirn:8:549551215 mlen:-1";"X-Swift-CacheTime" = 2592000;"X-Swift-SaveTime" = "Thu, 16 Nov 2017 14:38:51 GMT";auth = "1, serverlist, dl.django.t.taobao.com";} }object:<PSDConnectionMonitor: 0xd913e50>##########################################

Nov 29 15:05:58 iPhone AlipayWallet[2579] <Warning>: KNHooklog :-(void)setCurrentResponse:(have 1 value)

Nov 29 15:05:58 iPhone AlipayWallet[2579] <Warning>: KNHooklog :-(void)startStatistics:receiveDataLength:error:(have 3 value)