<?php
declare (strict_types=1);

namespace app\api\http\middleware;

use app\api\service\ApiSignService;
use app\common\model\systems\System;
use app\common\service\JsonService;

class VerifySignMiddleware
{
    public function handle($request, \Closure $next)
    {
        //获取header参数
        $appid = $request->header('appid');
        $url = $request->header('url');
        $timestamp = $request->header('timestamp');
        $sign = $request->header('sign');
        //验证参数
        if(empty($appid) || empty($url) || empty($timestamp) || empty($sign)){
            return JsonService::fail('缺少请求头参数', [], 0);
        }
        //获取子系统信息
        $system = System::field('app_id,app_key,url,status')->where('app_id',$appid)->where('url',$url)->findOrEmpty();
        if($system->isEmpty()){
            return JsonService::fail('应用ID无效', [], 0);
        }
        if($url != $system['url']){
            return JsonService::fail('请求来源异常', [], 0);
        }
        if($system['status'] != 0){
            return JsonService::fail('应用已被禁用或注销', [], 0);
        }
        //验证签名
        $checkSign = ApiSignService::verifySign(['appid'=>$appid,'url'=>$url,'timestamp'=>$timestamp,'sign'=>$sign],$system['app_key']);
        if($checkSign['code'] == 0){
            return JsonService::fail($checkSign['msg'],[],0);
        }
        return $next($request);
    }
}