Wechat for security reasons, calling methods in JS-SDK must meet the following conditions:
(1) Specify an official WeChat account through appId;
② The domain name of the current page must be "Addondomain" of the official WeChat account above;
(3) And the signature is obtained through the appId, APPSecret, token, nonceStr, timestamp (the above name will be explained below) * * and encryption operation of the official WeChat account;
Maybe you can find the appId of an official WeChat account, but no one in appSecret will be exposed.
reference data
Bbs.bbs[ reference time 20 18- 1-8]