<?php
declare (strict_types=1);

namespace app\api\http\middleware;

use app\api\service\ApiSignService;
use app\common\model\systems\System;
use app\common\service\JsonService;

class VerifySignMiddleware
{
    public function handle($request, \Closure $next)
    {
//        //获取header参数
//        $appid = $request->header('appid');
//        $url = $request->header('url');
//        $timestamp = $request->header('timestamp');
//        $sign = $request->header('sign');
//        //验证参数
//        if(empty($appid) || empty($url) || empty($timestamp) || empty($sign)){
//            return JsonService::fail('缺少请求头参数', [], 0);
//        }
//        //获取子系统信息
//        $system = System::field('app_id,app_key,url,status')->where('app_id',$appid)->where('url',$url)->findOrEmpty();
//        if($system->isEmpty()){
//            return JsonService::fail('应用ID无效', [], 0);
//        }
//        if($url != $system['url']){
//            return JsonService::fail('请求来源异常', [], 0);
//        }
//        if($system['status'] != 0){
//            return JsonService::fail('应用已被禁用或注销', [], 0);
//        }
//        //验证签名
//        $checkSign = ApiSignService::verifySign(['appid'=>$appid,'url'=>$url,'timestamp'=>$timestamp,'sign'=>$sign],$system['app_key']);
//        if($checkSign['code'] == 0){
//            return JsonService::fail($checkSign['msg'],[],0);
//        }
        return $next($request);
    }
}