记得上下班打卡 | git大法好,push需谨慎

Commit 10f97724 authored by jiangxiulong's avatar jiangxiulong

快递 test

parent 2e700756
...@@ -59,38 +59,45 @@ public class ShunfengSignUtils { ...@@ -59,38 +59,45 @@ public class ShunfengSignUtils {
* @return * @return
*/ */
public boolean receiveRequestAndCheckSign(String params, HttpServletRequest request) { public boolean receiveRequestAndCheckSign(String params, HttpServletRequest request) {
log.error("params {}", params);
log.debug("params {}", params);
log.info("params {}", params);
// 请求方APPID // 请求方APPID
String sendAppId = request.getHeader("sendAppId"); String sendAppId = request.getHeader("sendAppId");
log.error("sendAppId {}", sendAppId);
// 请求方时间戳 // 请求方时间戳
String timestamp = request.getHeader("timestamp"); String timestamp = request.getHeader("timestamp");
log.error("timestamp {}", timestamp);
// 请求方签名 // 请求方签名
String sign = request.getHeader("sign"); String sign = request.getHeader("sign");
log.error("sign {}", sign);
if (StringUtils.isBlank(sendAppId)) { if (StringUtils.isBlank(sendAppId)) {
System.out.println("参数sendAppId不能为空"); log.error("参数sendAppId不能为空");
return false; return false;
} }
if (StringUtils.isBlank(timestamp)) { if (StringUtils.isBlank(timestamp)) {
log.error("参数timestamp不能为空 {}", "");
System.out.println("参数timestamp不能为空"); System.out.println("参数timestamp不能为空");
return false; return false;
} }
if (StringUtils.isBlank(sign)) { if (StringUtils.isBlank(sign)) {
System.out.println("参数sign不能为空"); log.error("参数sign不能为空");
return false; return false;
} }
// 校验签名是否过期 // 校验签名是否过期
long requestTime = Long.parseLong(timestamp); long requestTime = Long.parseLong(timestamp);
long now = System.currentTimeMillis(); long now = System.currentTimeMillis();
if (Math.abs(now - requestTime) > CHECK_TIME) { if (Math.abs(now - requestTime) > CHECK_TIME) {
System.out.println("签名过期!"); log.error("签名过期");
return false; return false;
} }
// 请求方参数+请求方时间戳+SK 生成签名 // 请求方参数+请求方时间戳+SK 生成签名
String thisSign = genSign(timestamp, params); String thisSign = genSign(timestamp, params);
System.out.println(params); log.error("thisSign {}", thisSign);
System.out.println(thisSign);
// 获取的签名和请求方签名比较是否一致 // 获取的签名和请求方签名比较是否一致
if (!thisSign.equals(sign)) { if (!thisSign.equals(sign)) {
System.out.println("签名错误"); log.error("签名错误");
return false; return false;
} }
return true; return true;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment