This commit is contained in:
tanghc
2019-02-28 13:01:01 +08:00
parent c359bf2fb0
commit 88e9783a79
2 changed files with 7 additions and 4 deletions

View File

@@ -39,7 +39,7 @@ public class PreValidateFilter extends BaseZuulFilter {
try {
validator.validate(param);
} catch (ApiException e) {
log.error("签名验证失败params:{}", param.toJSONString(), e);
log.error("验证失败params:{}", param.toJSONString(), e);
throw e;
}
return null;

View File

@@ -118,14 +118,17 @@ public class ApiValidator implements Validator {
protected void checkSign(ApiParam param) {
String clientSign = param.fetchSign();
try {
if (StringUtils.isEmpty(param.fetchSign())) {
if (StringUtils.isEmpty(clientSign)) {
throw ErrorEnum.ISV_MISSING_SIGNATURE.getErrorMeta().getException(param.fetchNameVersion(), ParamNames.SIGN_NAME);
}
String secret = ApiContext.getApiConfig().getAppSecretManager().getSecret(param.fetchAppKey());
ApiConfig apiConfig = ApiContext.getApiConfig();
AppSecretManager appSecretManager = apiConfig.getAppSecretManager();
// 根据appId获取秘钥
String secret = appSecretManager.getSecret(param.fetchAppKey());
if (StringUtils.isEmpty(secret)) {
throw ErrorEnum.ISV_MISSING_SIGNATURE_CONFIG.getErrorMeta().getException();
}
Signer signer = ApiContext.getApiConfig().getSigner();
Signer signer = apiConfig.getSigner();
boolean isRightSign = signer.checkSign(ApiContext.getRequest(), secret);
// 错误的sign
if (!isRightSign) {