|
|
<?php
|
|
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
|
|
use Closure;
|
|
|
use Illuminate\Http\Request;
|
|
|
use Illuminate\Support\Facades\DB;
|
|
|
use Illuminate\Support\Facades\Log;
|
|
|
|
|
|
class CheckSign
|
|
|
{
|
|
|
/**
|
|
|
* Handle an incoming request.
|
|
|
*
|
|
|
* @param \Illuminate\Http\Request $request
|
|
|
* @param \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse) $next
|
|
|
* @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
|
|
|
*/
|
|
|
public function handle(Request $request, Closure $next)
|
|
|
{ //验证接口调用签名。md5后转大写，time为时间戳
|
|
|
date_default_timezone_set('PRC');
|
|
|
$app_id=$request->input('app_id');
|
|
|
$time=$request->input('time'); //时间戳
|
|
|
$nonce=$request->input('nonce');
|
|
|
$sign=$request->input('sign');
|
|
|
$timeDiff = abs(time() - $time); // 获取时间差的绝对值
|
|
|
|
|
|
if ($timeDiff >= 600) {
|
|
|
Log::error('签名验证失败-时间异常', [
|
|
|
'app_id' => $app_id,
|
|
|
'time' => $time,
|
|
|
'current_time' => time(),
|
|
|
'time_diff' => $timeDiff,
|
|
|
'nonce' => $nonce,
|
|
|
'sign' => $sign,
|
|
|
'url' => $request->getPathInfo()
|
|
|
]);
|
|
|
return \Yz::echoError1('时间异常');
|
|
|
}
|
|
|
|
|
|
$cha_s=DB::table('outside_user')->where(['app_id'=>$app_id])->get();
|
|
|
if(!count($cha_s)==1) {
|
|
|
Log::error('签名验证失败-第三方用户不存在', [
|
|
|
'app_id' => $app_id,
|
|
|
'time' => $time,
|
|
|
'nonce' => $nonce,
|
|
|
'sign' => $sign,
|
|
|
'url' => $request->getPathInfo(),
|
|
|
'user_count' => count($cha_s)
|
|
|
]);
|
|
|
return \Yz::echoError1('第三方用户不存在');
|
|
|
}
|
|
|
|
|
|
$s_sign=strtoupper(md5($app_id.$time.$nonce.$cha_s[0]->app_secrect));
|
|
|
if($sign<>$s_sign) {
|
|
|
Log::error('签名验证失败-签名不匹配', [
|
|
|
'app_id' => $app_id,
|
|
|
'time' => $time,
|
|
|
'nonce' => $nonce,
|
|
|
'client_sign' => $sign,
|
|
|
'server_sign' => $s_sign,
|
|
|
'url' => $request->getPathInfo()
|
|
|
]);
|
|
|
return \Yz::echoError1('签名验证失败');
|
|
|
}
|
|
|
|
|
|
return $next($request);
|
|
|
}
|
|
|
}
|