7x31/SOP
1
0
Fork 0
mirror of https://gitee.com/durcframework/SOP.git synced 2025-08-11 12:56:28 +08:00
Code Issues Packages Projects Releases Wiki Activity

init

Browse Source
This commit is contained in:
tanghc
2019-02-28 13:01:01 +08:00
parent c359bf2fb0
commit 88e9783a79
2 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
sop-gateway-common/src/main/java/com/gitee/sop/gatewaycommon/filter/PreValidateFilter.java
View File

@@ -39,7 +39,7 @@ public class PreValidateFilter extends BaseZuulFilter {
try { try {
validator.validate(param); validator.validate(param);
} catch (ApiException e) { } catch (ApiException e) {
log.error("签名验证失败，params:{}", param.toJSONString(), e); log.error("验证失败，params:{}", param.toJSONString(), e);
throw e; throw e;
} }
return null; return null;

9
sop-gateway-common/src/main/java/com/gitee/sop/gatewaycommon/validate/ApiValidator.java
View File

@@ -118,14 +118,17 @@ public class ApiValidator implements Validator {
protected void checkSign(ApiParam param) { protected void checkSign(ApiParam param) {
String clientSign = param.fetchSign(); String clientSign = param.fetchSign();
try { try {
if (StringUtils.isEmpty(param.fetchSign())) { if (StringUtils.isEmpty(clientSign)) {
throw ErrorEnum.ISV_MISSING_SIGNATURE.getErrorMeta().getException(param.fetchNameVersion(), ParamNames.SIGN_NAME); throw ErrorEnum.ISV_MISSING_SIGNATURE.getErrorMeta().getException(param.fetchNameVersion(), ParamNames.SIGN_NAME);
} }
String secret = ApiContext.getApiConfig().getAppSecretManager().getSecret(param.fetchAppKey()); ApiConfig apiConfig = ApiContext.getApiConfig();
AppSecretManager appSecretManager = apiConfig.getAppSecretManager();
// 根据appId获取秘钥
String secret = appSecretManager.getSecret(param.fetchAppKey());
if (StringUtils.isEmpty(secret)) { if (StringUtils.isEmpty(secret)) {
throw ErrorEnum.ISV_MISSING_SIGNATURE_CONFIG.getErrorMeta().getException(); throw ErrorEnum.ISV_MISSING_SIGNATURE_CONFIG.getErrorMeta().getException();
} }
Signer signer = ApiContext.getApiConfig().getSigner(); Signer signer = apiConfig.getSigner();
boolean isRightSign = signer.checkSign(ApiContext.getRequest(), secret); boolean isRightSign = signer.checkSign(ApiContext.getRequest(), secret);
// 错误的sign // 错误的sign
if (!isRightSign) { if (!isRightSign) {