bakery/app/utils/sign_check.go

package utils

import (
	"applet/app/utils/logx"
	"fmt"
	"github.com/forgoer/openssl"
	"github.com/gin-gonic/gin"
	"github.com/syyongx/php2go"
	"strings"
)

var publicKey = []byte(`-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCFQD7RL2tDNuwdg0jTfV0zjAzh
WoCWfGrcNiucy2XUHZZU2oGhHv1N10qu3XayTDD4pu4sJ73biKwqR6ZN7IS4Sfon
vrzaXGvrTG4kmdo3XrbrkzmyBHDLTsJvv6pyS2HPl9QPSvKDN0iJ66+KN8QjBpw1
FNIGe7xbDaJPY733/QIDAQAB
-----END PUBLIC KEY-----`)

var privateKey = []byte(`-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----`)

func GetApiVersion(c *gin.Context) int {
	var apiVersion = c.GetHeader("apiVersion")
	if StrToInt(apiVersion) == 0 { //没有版本号先不校验
		apiVersion = c.GetHeader("Apiversion")
	}
	if StrToInt(apiVersion) == 0 { //没有版本号先不校验
		apiVersion = c.GetHeader("api_version")
	}
	return StrToInt(apiVersion)
}

//签名校验
func SignCheck(c *gin.Context) bool {
	var apiVersion = GetApiVersion(c)
	if apiVersion == 0 { //没有版本号先不校验
		return true
	}
	//1.通过rsa 解析出 aes
	var key = c.GetHeader("key")

	//拼接对应参数
	var uri = c.Request.RequestURI
	var query = GetQueryParam(uri)
	fmt.Println(query)
	query["timestamp"] = c.GetHeader("timestamp")
	query["nonce"] = c.GetHeader("nonce")
	query["key"] = key
	token := c.GetHeader("Authorization")
	if token != "" {
		// 按空格分割
		parts := strings.SplitN(token, " ", 2)
		if len(parts) == 2 && parts[0] == "Bearer" {
			token = parts[1]
		}
	}
	query["token"] = token
	//2.query参数按照 ASCII 码从小到大排序
	str := JoinStringsInASCII(query, "&", false, false, "")
	//3.拼上密钥
	secret := ""
	if InArr(c.GetHeader("platform"), []string{"android", "ios"}) {
		secret = c.GetString("app_api_secret_key")
	} else if c.GetHeader("platform") == "wap" {
		secret = c.GetString("h5_api_secret_key")
	} else {
		secret = c.GetString("applet_api_secret_key")
	}
	str = fmt.Sprintf("%s&secret=%s", str, secret)
	fmt.Println(str)
	//4.md5加密 转小写
	sign := strings.ToLower(Md5(str))
	//5.判断跟前端传来的sign是否一致
	if sign != c.GetHeader("sign") {
		return false
	}
	return true
}

func ResultAes(c *gin.Context, raw []byte) string {
	var key = c.GetHeader("key")
	base, _ := php2go.Base64Decode(key)
	aes, err := RsaDecrypt([]byte(base), privateKey)
	if err != nil {
		logx.Info(err)
		return ""
	}

	str, _ := openssl.AesECBEncrypt(raw, aes, openssl.PKCS7_PADDING)
	value := php2go.Base64Encode(string(str))
	fmt.Println(value)

	return value
}

func ResultAesDecrypt(c *gin.Context, raw string) string {
	var key = c.GetHeader("key")
	base, _ := php2go.Base64Decode(key)
	aes, err := RsaDecrypt([]byte(base), privateKey)
	if err != nil {
		logx.Info(err)
		return ""
	}
	fmt.Println(raw)
	value1, _ := php2go.Base64Decode(raw)
	if value1 == "" {
		return ""
	}
	str1, _ := openssl.AesECBDecrypt([]byte(value1), aes, openssl.PKCS7_PADDING)

	return string(str1)
}