feat: 添加钉钉机器人加签验证支持与数据库字段迁移

1. 新增数据库迁移逻辑，为notification_settings表添加dingtalk_secret字段
2. 完善钉钉通知发送逻辑，支持加签安全验证
3. 调整UI布局，新增钉钉加签密钥输入框
4. 更新通知设置的读取、存储逻辑适配新字段

Author: leafcoder

models/database.py

@@ -130,6 +130,11 @@ def _init_database(self):
                 )
             ''')
 
+            columns = [info[1] for info in cursor.execute("PRAGMA table_info(notification_settings)").fetchall()]
+            if 'dingtalk_secret' not in columns:
+                logger.info("数据库迁移：添加dingtalk_secret字段")
+                cursor.execute('ALTER TABLE notification_settings ADD COLUMN dingtalk_secret TEXT')
+
             cursor.execute('SELECT COUNT(*) FROM notification_settings')
             if cursor.fetchone()[0] == 0:
                 cursor.execute(

services/notification.py

@@ -32,6 +32,7 @@ def get_notification_settings(self) -> Dict[str, Any]:
                         'popup_enabled': bool(result[1]),
                         'dingtalk_enabled': bool(result[2]),
                         'dingtalk_webhook': result[3] or '',
+                        'dingtalk_secret': result[13] if len(result) > 13 else '',
                         'email_enabled': bool(result[4]),
                         'email_smtp_server': result[5] or '',
                         'email_sender': result[6] or '',
@@ -49,6 +50,7 @@ def get_notification_settings(self) -> Dict[str, Any]:
             'popup_enabled': True,
             'dingtalk_enabled': False,
             'dingtalk_webhook': '',
+            'dingtalk_secret': '',
             'email_enabled': False,
             'email_smtp_server': '',
             'email_sender': '',
@@ -88,20 +90,29 @@ def send_popup_notification(self, title: str, message: str):
             logger.error(f"发送弹窗通知失败: {e}")
 
     def send_dingtalk_notification(self, title: str, message: str):
-        """发送钉钉通知"""
+        """发送钉钉通知（支持加签验证）"""
         settings = self.get_notification_settings()
         if not settings['dingtalk_enabled']:
             return
 
-        if not settings['dingtalk_webhook']:
+        webhook = settings['dingtalk_webhook']
+        secret = settings['dingtalk_secret']
+
+        if not webhook:
             logger.warning("钉钉Webhook未配置")
             return
 
         if not self.can_notify('dingtalk'):
             return
 
         try:
+            import base64
+            import hashlib
+            import hmac
+            import urllib.parse
             from datetime import datetime
+            from urllib.parse import parse_qs, urlparse
+
             data = {
                 "msgtype": "markdown",
                 "markdown": {
@@ -110,18 +121,51 @@ def send_dingtalk_notification(self, title: str, message: str):
                 }
             }
 
+            final_url = webhook
+
+            if secret:
+                timestamp = str(round(time.time() * 1000))
+                string_to_sign = f'{timestamp}\n{secret}'.encode('utf-8')
+                hmac_code = hmac.new(
+                    secret.encode('utf-8'),
+                    string_to_sign,
+                    digestmod=hashlib.sha256
+                ).digest()
+                sign = urllib.parse.quote_plus(base64.b64encode(hmac_code))
+
+                parsed_url = urlparse(webhook)
+                query_params = parse_qs(parsed_url.query)
+                access_token = query_params.get('access_token', [''])[0]
+
+                new_query = f"access_token={access_token}&timestamp={timestamp}&sign={sign}"
+                final_url = f"{parsed_url.scheme}://{parsed_url.netloc}{parsed_url.path}?{new_query}"
+                logger.info(f"使用加签模式发送钉钉通知")
+
             response = requests.post(
-                settings['dingtalk_webhook'],
+                final_url,
                 json=data,
+                headers={'Content-Type': 'application/json'},
                 timeout=10
             )
 
             if response.status_code == 200:
-                logger.info(f"钉钉通知发送成功: {title}")
+                resp_json = response.json()
+                if resp_json.get('errcode') == 0:
+                    logger.info(f"✅ 钉钉通知发送成功: {title}")
+                else:
+                    errcode = resp_json.get('errcode', 'unknown')
+                    errmsg = resp_json.get('errmsg', '未知错误')
+                    logger.error(f"❌ 钉钉API错误 [{errcode}]: {errmsg}")
+                    if errcode == 310000:
+                        logger.error("⚠️ 签名验证失败！请检查：")
+                        logger.error("   1. 加签密钥是否正确复制（无多余空格）")
+                        logger.error("   2. 密钥是否与钉钉机器人设置页面一致")
+                        logger.error("   3. 系统时间是否准确")
             else:
-                logger.error(f"钉钉通知发送失败: {response.text}")
+                logger.error(f"❌ 钉钉请求失败: HTTP {response.status_code}, 响应: {response.text}")
+
         except Exception as e:
-            logger.error(f"发送钉钉通知失败: {e}")
+            logger.error(f"❌ 发送钉钉通知异常: {e}")
 
     def check_and_notify(self, fund_data: Dict,
                          total_profit: float, daily_profit: float):

ui/main_window.py

@@ -19,24 +19,23 @@
 import matplotlib.style as style
 from matplotlib.backends.backend_qtagg import FigureCanvasQTAgg as FigureCanvas
 from matplotlib.figure import Figure
-
-from PySide6.QtCore import QThread, QTimer, Signal, Qt
+from PySide6.QtCore import Qt, QThread, QTimer, Signal
 from PySide6.QtGui import QColor, QFont, QIcon, QPixmap
 from PySide6.QtWidgets import (QApplication, QCheckBox, QDialog,
                                QDoubleSpinBox, QGridLayout, QGroupBox,
                                QHBoxLayout, QInputDialog, QLabel, QLineEdit,
                                QMainWindow, QMenu, QMessageBox, QPushButton,
-                               QStyle, QSystemTrayIcon, QTabWidget,
-                               QTableWidgetItem, QVBoxLayout, QWidget)
+                               QStyle, QSystemTrayIcon, QTableWidgetItem,
+                               QTabWidget, QVBoxLayout, QWidget)
 
 from config import config
 from models.database import DatabaseManager
 from services.data_fetcher import FundDataFetcher
 from services.notification import NotificationManager
-from ui.widgets.table_widget import FundTableWidget
-from ui.widgets.search_widget import FundSearchWidget
-from ui.widgets.portfolio_dashboard import PortfolioDashboard
 from ui.widgets.investment_calculator_dialog import InvestmentCalculatorDialog
+from ui.widgets.portfolio_dashboard import PortfolioDashboard
+from ui.widgets.search_widget import FundSearchWidget
+from ui.widgets.table_widget import FundTableWidget
 from utils.logger import logger
 
 matplotlib.use('Agg')
@@ -1737,8 +1736,8 @@ def load_history_data(self):
 
     def generate_mock_data(self):
         """生成模拟历史数据"""
-        from datetime import timedelta
         import random
+        from datetime import timedelta
 
         dates = []
         values = []
@@ -1812,7 +1811,7 @@ class NotificationSettingsDialog(QDialog):
     def __init__(self, parent=None):
         super().__init__(parent)
         self.setWindowTitle("通知设置")
-        self.setFixedSize(600, 500)
+        self.setFixedSize(600, 560)
         self.setStyleSheet("""
             QDialog {
                 background: white;
@@ -1860,6 +1859,14 @@ def init_ui(self):
         webhook_layout.addWidget(self.dingtalk_webhook)
         dingtalk_layout.addLayout(webhook_layout)
 
+        secret_layout = QHBoxLayout()
+        secret_layout.addWidget(QLabel("加签密钥:"))
+        self.dingtalk_secret = QLineEdit()
+        self.dingtalk_secret.setPlaceholderText("SEC开头的密钥（选填，机器人安全设置中的加签密钥）")
+        self.dingtalk_secret.setEchoMode(QLineEdit.Password)
+        secret_layout.addWidget(self.dingtalk_secret)
+        dingtalk_layout.addLayout(secret_layout)
+
         dingtalk_group.setLayout(dingtalk_layout)
         layout.addWidget(dingtalk_group)
 
@@ -1946,6 +1953,7 @@ def load_settings(self):
             self.popup_enabled.setChecked(settings['popup_enabled'])
             self.dingtalk_enabled.setChecked(settings['dingtalk_enabled'])
             self.dingtalk_webhook.setText(settings['dingtalk_webhook'])
+            self.dingtalk_secret.setText(settings['dingtalk_secret'])
             self.rise_threshold.setValue(settings['rise_threshold'])
             self.fall_threshold.setValue(settings['fall_threshold'])
             self.profit_threshold.setValue(settings['profit_threshold'])
@@ -1962,6 +1970,7 @@ def save_settings(self):
                         SET popup_enabled = ?,
                             dingtalk_enabled = ?,
                             dingtalk_webhook = ?,
+                            dingtalk_secret = ?,
                             rise_threshold = ?,
                             fall_threshold = ?,
                             profit_threshold = ?,
@@ -1972,6 +1981,7 @@ def save_settings(self):
                         self.popup_enabled.isChecked(),
                         self.dingtalk_enabled.isChecked(),
                         self.dingtalk_webhook.text(),
+                        self.dingtalk_secret.text(),
                         self.rise_threshold.value(),
                         self.fall_threshold.value(),
                         self.profit_threshold.value(),