1

src/main/resources/application.yml

@@ -72,6 +72,8 @@ jarvis:
         shared-secret: jarvis_wecom_bridge_change_me
         # Jarvis 调 POST /wecom/active-push 时的 Header，须与 ruoyi jarvis.wecom.push-secret 一致
         push-secret: jarvis_wecom_push_change_me
+        # 本地/ruoyi 调 POST /wecom/goofish-active-push 时 Header: X-WxSend-Goofish-Push-Secret
+        goofish-push-secret: jarvis_wecom_goofish_push_change_me
 
 qywx:
     webhook:
@@ -84,5 +86,9 @@ qywx:
         agentId: "1000012"
         # 与 agentId 对应的应用 Secret（企微后台应用管理），用于 access_token + message/send
         secret: ""
+        # 闲鱼订单通知自建应用：POST /wecom/goofish-active-push（corpid 仍用上面 corpId）
+        # 生产建议仅通过环境变量注入，勿将真实 Secret 提交仓库
+        goofishAgentId: "1000013"
+        goofishSecret: "${QYWX_GOOFISH_SECRET:hINY8boNFjY3lypOKbcukE8wYnNS9wnXeonB4iTO1rA}"
         token: "34NXCtEjkl"
         encodingAESKey: "bNlE8IhjU34CfXflcBhW3gXPwr8xaEDEhnpUvChvw5i"