海康测温报警接入：从事件订阅到飞书图文推送

import base64
import hashlib
import hmac
import json
import time
import uuid

from server import remote


def signed_headers(app_key, app_secret, path):
    headers = {
        "Accept": "application/json",
        "Content-Type": "application/json",
        "X-Ca-Key": app_key,
        "X-Ca-Nonce": str(uuid.uuid4()),
        "X-Ca-Timestamp": str(int(time.time() * 1000)),
    }
    signing = {k.lower(): v for k, v in headers.items()
               if k.startswith("X-Ca-")}
    names = sorted(signing)
    canonical = "POST\napplication/json\napplication/json\n"
    canonical += "".join(f"{k}:{signing[k]}\n" for k in names) + path
    signature = hmac.new(
        app_secret.encode(), canonical.encode(), hashlib.sha256
    ).digest()
    headers["X-Ca-Signature-Headers"] = ",".join(names)
    headers["X-Ca-Signature"] = base64.b64encode(signature).decode()
    return headers


def hik_post(base, app_key, app_secret, path, body):
    raw, _ = remote(
        base.rstrip("/") + path,
        json.dumps(body, ensure_ascii=False).encode(),
        signed_headers(app_key, app_secret, path),
    )
    result = json.loads(raw)
    if str(result.get("code")) != "0":
        raise ValueError(f"海康接口失败：{result.get('code')}")
    return result

{
  "name": "垃圾房",
  "pageNo": 1,
  "pageSize": 20
}

{
  "code": "0",
  "msg": "success",
  "data": {
    "total": 1,
    "list": [
      {
        "indexCode": "camera_thermal_01",
        "externalIndexCode": "<国标编码>",
        "name": "垃圾房防火监控（热成像）",
        "chanNum": 2
      }
    ]
  }
}

{
  "eventTypes": [192517],
  "eventDest": "http://10.20.0.40:8769/callback/demo-receiver",
  "subType": 0
}

{"code": "0", "msg": "success"}

{
  "code": "0",
  "msg": "OK",
  "data": {
    "detail": [
      {
        "eventDest": "http://10.20.0.40:8769/callback/demo-receiver",
        "eventTypes": [192517]
      }
    ]
  }
}

{"eventTypes": [192517]}

{"code": "0", "msg": "success"}

{
  "method": "OnEventNotify",
  "params": {
    "events": [
      {
        "eventId": "alarm-20261022-001",
        "eventType": 192517,
        "happenTime": "2026-10-22T08:32:37.723+08:00",
        "srcIndex": "camera_thermal_01",
        "srcName": "垃圾房防火监控（热成像）",
        "status": 0,
        "data": {
          "dataType": "thermalImaging",
          "thermometry": [
            {
              "ruleId": 0,
              "curTemperature": "76.3",
              "ruleTemperature": "70",
              "thermometryUnit": 0,
              "alarmLevel": 0,
              "imageUrl": "http://172.17.8.23:6120/pic?<热成像图片标识>",
              "visiblePicUrl": "http://172.17.8.23:6120/pic?<可见光图片标识>",
              "targetAttrs": {
                "cameraIndexCode": "camera_thermal_01",
                "imageServerCode": "image_server_01",
                "picServerIndexCode": "image_server_01"
              }
            }
          ]
        }
      }
    ]
  }
}

from datetime import datetime, timezone
from server import encode


def save_callback(store, payload):
    params = payload.get("params")
    if payload.get("method") != "OnEventNotify" or not isinstance(params, dict):
        raise ValueError("需要 OnEventNotify 和 params.events")
    events = params.get("events")
    if not isinstance(events, list) or not events:
        raise ValueError("events 必须为非空数组")
    if any(not isinstance(event, dict) for event in events):
        raise ValueError("events 中的元素必须为对象")

    received = datetime.now(timezone.utc).isoformat()
    with store.connect() as db:
        db.execute(
            "INSERT INTO messages(received,payload) VALUES (?,?)",
            (received, encode(payload).decode()),
        )
        store.ingest(db, payload, received)
    return {"code": "0", "msg": "success"}

sequenceDiagram
    participant H as 海康事件服务
    participant R as 回调接收器
    participant D as SQLite
    participant W as 后台任务
    participant P as 图片服务
    participant F as 飞书
    H->>R: POST OnEventNotify
    R->>D: 保存原文、归并报警、登记待下载图片
    D-->>R: 提交成功
    R-->>H: HTTP 200 + code=0
    W->>D: 读取待处理记录
    W->>P: GET 图片并跟随跳转
    P-->>W: JPEG / PNG 文件内容
    W->>D: 保存图片内容
    W->>F: 上传图片
    F-->>W: image_key
    W->>F: 发送图文卡片
    F-->>W: message_id
    W->>D: 保存发送状态与 message_id

HTTP/1.1 301 Moved Permanently
Location: http://172.17.8.26:6501/<实际图片地址>

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 183106

<JPEG 二进制内容>

from urllib.parse import urlsplit
from urllib.request import HTTPRedirectHandler, Request


class ImageRedirect(HTTPRedirectHandler):
    max_redirections = 3
    max_repeats = 2

    def redirect_request(self, req, fp, code, msg, headers, newurl):
        target = urlsplit(newurl)
        if req.get_method() != "GET":
            raise ValueError("只允许图片 GET 跟随跳转")
        if target.scheme not in ("http", "https") or not target.hostname:
            raise ValueError("无效的图片跳转地址")
        if target.username or target.password:
            raise ValueError("图片跳转地址不能包含账号密码")
        if req.full_url.startswith("https:") and target.scheme == "http":
            raise ValueError("图片跳转不能将 HTTPS 降为 HTTP")
        return Request(newurl, headers={"Accept": "image/*"}, method="GET")

from server import remote

image_bytes, mime = remote(
    image_url,
    headers={"Accept": "image/*"},
    follow_redirects=True,
    limit=10 * 1024 * 1024,
)

POST /artemis/api/video/v1/events/picture
Content-Type: application/json
X-Ca-Key: <APP_KEY>
X-Ca-Signature: <计算得到的签名>

{
  "svrIndexCode": "image_server_01",
  "picUri": "/pic?<图片标识>",
  "netProtocol": "http"
}

{
  "code": "0",
  "msg": "success",
  "data": {
    "picUrl": "http://172.17.8.23:6120/pic?<下载标识>"
  }
}

POST https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal
Content-Type: application/json

{"app_id": "cli_example", "app_secret": "<APP_SECRET>"}

{
  "code": 0,
  "msg": "ok",
  "tenant_access_token": "<TENANT_ACCESS_TOKEN>",
  "expire": 7200
}

POST https://open.feishu.cn/open-apis/im/v1/images
Authorization: Bearer <TENANT_ACCESS_TOKEN>
Content-Type: multipart/form-data; boundary=<BOUNDARY>

{
  "code": 0,
  "msg": "success",
  "data": {"image_key": "img_example"}
}

from feishu import Feishu
from server import remote

bot = Feishu(remote)
token = bot.tenant_token(feishu_config)
image_key = bot.upload(feishu_config, token, {
    "content": image_bytes,
    "mime": mime,
    "label": "热成像图",
})

import secrets

boundary = "----Thermal" + secrets.token_hex(16)
multipart = (
    f'--{boundary}\r\n'
    'Content-Disposition: form-data; name="image_type"\r\n\r\n'
    'message\r\n'
    f'--{boundary}\r\n'
    'Content-Disposition: form-data; name="image"; filename="alarm.jpg"\r\n'
    'Content-Type: image/jpeg\r\n\r\n'
).encode() + image_bytes + f'\r\n--{boundary}--\r\n'.encode()

POST https://open.feishu.cn/open-apis/im/v1/messages?receive_id_type=chat_id
Authorization: Bearer <TENANT_ACCESS_TOKEN>
Content-Type: application/json

import json
import uuid
from feishu import make_card

card = make_card(alarm, [
    ("热成像图", thermal_image_key),
    ("可见光图", visible_image_key),
])
body = {
    "receive_id": "oc_example",
    "msg_type": "interactive",
    "content": json.dumps(card, ensure_ascii=False),
    "uuid": str(uuid.uuid4()),
}

{
  "config": {"wide_screen_mode": true, "update_multi": true},
  "header": {
    "template": "grey",
    "title": {"tag": "plain_text", "content": "温度报警"}
  },
  "elements": [
    {
      "tag": "div",
      "text": {
        "tag": "plain_text",
        "content": "事件来源：垃圾房防火监控（热成像）\n发生时间：2026-10-22T08:32:37.723+08:00\n温度：76.3℃\n报警阈值：70℃"
      }
    },
    {
      "tag": "img",
      "img_key": "img_thermal_example",
      "alt": {"tag": "plain_text", "content": "热成像图"},
      "mode": "fit_horizontal",
      "preview": true
    }
  ]
}

{
  "code": 0,
  "msg": "success",
  "data": {"message_id": "om_example"}
}

PATCH https://open.feishu.cn/open-apis/im/v1/messages/om_example
Authorization: Bearer <TENANT_ACCESS_TOKEN>
Content-Type: application/json

flowchart LR
    A[回调入库] --> B{图片是否就绪}
    B -->|待下载| C[下载并保存图片]
    C --> B
    B -->|成功或达到重试上限| D{飞书是否开启且匹配相机}
    D -->|否| E[保留本地记录]
    D -->|是| F{是否已有 message_id}
    F -->|否| G[POST 发送新卡片]
    F -->|是| H[PATCH 更新原卡片]
    G --> I[保存结果]
    H --> I

172.17.8.26 dev br-a1b2c3d4e5f6 src 172.17.0.1

networks:
  default:
    ipam:
      config:
        - subnet: 10.250.10.0/24