Tencent / Tencent/WeChatReading
标题：[Bug] App 内生成的 API Key 调用网关始终返回
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 233
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
标题：[Bug] App 内生成的 API Key 调用网关始终返回 -2010 用户不存在现象：微信读书 App 内生成 API Key 后，调用任意接口（/_list、/store/search）均返回 {"errcode":-2010,"errmsg":"用户不存在"}。重新生成 5 个 Key 结果相同。交叉验证：伪造 Key 返回 -2013 鉴权失败，说明我的 Key 通过了签名校验；去掉 Authorization 头也是 -2010。请求格式按 SKILL.md v1.0.4 规范（POST https://i.weread.qq.com/api/agent/gateway，Bearer 鉴权，参数平铺）。errlog 追踪 ID（2026-09-16 04:00 前后）：CFXn6Sd、C9F73i7、CE634AI疑问：该功能是否有用户白名单/灰度？账号需要满足什么条件才能被网关识别？
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with SKILL.md v1.0.4 and the gateway endpoint POST /api/agent/gateway, then compare the listed requests and errlog trace IDs. Determine whether the repeated -2010 response is controlled by a whitelist, rollout condition, or account prerequisite, and document the expected condition or confirmed defect.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, authentication, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100