84 lines
2.6 KiB
PHP
Executable File
84 lines
2.6 KiB
PHP
Executable File
<?php
|
||
|
||
// +----------------------------------------------------------------------
|
||
// | CRMEB [ CRMEB赋能开发者，助力企业发展 ]
|
||
// +----------------------------------------------------------------------
|
||
// | Copyright (c) 2016~2022 https://www.crmeb.com All rights reserved.
|
||
// +----------------------------------------------------------------------
|
||
// | Licensed CRMEB并不是自由软件，未经许可不能去掉CRMEB相关版权
|
||
// +----------------------------------------------------------------------
|
||
// | Author: CRMEB Team <admin@crmeb.com>
|
||
// +----------------------------------------------------------------------
|
||
|
||
|
||
namespace app\common\middleware;
|
||
|
||
use app\Request;
|
||
use crmeb\exceptions\AuthException;
|
||
use think\exception\ValidateException;
|
||
use think\Response;
|
||
use Throwable;
|
||
|
||
class SignMiddleware extends BaseMiddleware
|
||
{
|
||
|
||
/**
|
||
* @param Request $request
|
||
* @throws Throwable
|
||
* @author xaboy
|
||
* @day 2020-04-10
|
||
*/
|
||
public function before(Request $request)
|
||
{
|
||
try {
|
||
$appid = $request->header('appid');
|
||
$timestamp = $request->header('timestamp');
|
||
$sign = $request->header('sign');
|
||
// 中台系统secret
|
||
$appSecret = 'St@tF!8r@fgjCu88fJB9eo4PTRHxsntC';
|
||
$this->verifySign(['appid'=>$appid,'timestamp'=>$timestamp,'sign'=>$sign], $appSecret);
|
||
} catch (AuthException $e) {
|
||
$eArray = ($e->getResponse())->getData();
|
||
throw new AuthException($eArray['message'] ?? '非法签名');
|
||
return;
|
||
} catch (Throwable $e) {
|
||
throw new AuthException('非法请求');
|
||
return;
|
||
}
|
||
}
|
||
|
||
public function after(Response $response)
|
||
{
|
||
|
||
}
|
||
|
||
private function makeSign($data, $appSecret)
|
||
{
|
||
ksort($data);
|
||
$string = "";
|
||
foreach ($data as $k => $v) {
|
||
if ($k == "sign" || is_array($v)) {
|
||
continue;
|
||
}
|
||
$string .= $k . "=" . $v . "&";
|
||
}
|
||
$string = trim($string, "&");
|
||
$string = $string . "&key=" . $appSecret;
|
||
$string = md5(md5($string));
|
||
return strtolower($string);
|
||
}
|
||
|
||
private function verifySign($data, $appSecret)
|
||
{
|
||
// 验证请求， 10秒钟失效
|
||
if (time() - ($data['timestamp'] ?? 0) > 10) {
|
||
throw new AuthException('签名已失效');
|
||
}
|
||
// 比对签名
|
||
$clientSign = $data['sign'] ?? '';
|
||
$serverSign = $this->makeSign($data, $appSecret);
|
||
if ($clientSign != $serverSign) {
|
||
throw new AuthException('签名校验失败');
|
||
}
|
||
}
|
||
} |