41 lines
1.4 KiB
PHP
41 lines
1.4 KiB
PHP
<?php
|
|
declare (strict_types=1);
|
|
|
|
namespace app\api\http\middleware;
|
|
|
|
use app\api\service\ApiSignService;
|
|
use app\common\model\systems\System;
|
|
use app\common\service\JsonService;
|
|
|
|
class VerifySignMiddleware
|
|
{
|
|
public function handle($request, \Closure $next)
|
|
{
|
|
//获取header参数
|
|
$appid = $request->header('appid');
|
|
$url = $request->header('url');
|
|
$timestamp = $request->header('timestamp');
|
|
$sign = $request->header('sign');
|
|
//验证参数
|
|
if(empty($appid) || empty($url) || empty($timestamp) || empty($sign)){
|
|
return JsonService::fail('缺少请求头参数', [], 0);
|
|
}
|
|
//获取子系统信息
|
|
$system = System::field('app_id,app_key,url,status')->where('app_id',$appid)->where('url',$url)->findOrEmpty();
|
|
if($system->isEmpty()){
|
|
return JsonService::fail('应用ID无效', [], 0);
|
|
}
|
|
if($url != $system['url']){
|
|
return JsonService::fail('请求来源异常', [], 0);
|
|
}
|
|
if($system['status'] != 0){
|
|
return JsonService::fail('应用已被禁用或注销', [], 0);
|
|
}
|
|
//验证签名
|
|
$checkSign = ApiSignService::verifySign(['appid'=>$appid,'url'=>$url,'timestamp'=>$timestamp,'sign'=>$sign],$system['app_key']);
|
|
if($checkSign['code'] == 0){
|
|
return JsonService::fail($checkSign['msg'],[],0);
|
|
}
|
|
return $next($request);
|
|
}
|
|
} |