golang gin接口签名sign
gin.Default().Group("").Use(xxx.CheckSign())
{
//注册需要签名的路由
gin.Default().Group("testrouter").POST("dotest", func(ctx *gin.Context) {
response.Result(401, gin.H{}, "hello", ctx)
})
}
sign.go 签名 验签
package xxx
import (
"crypto/sha256"
"encoding/hex"
"fmt"
"github.com/flipped-aurora/gin-vue-admin/server/model/common/response"
"github.com/gin-gonic/gin"
)
var (
SignWrong = "sign wrong"
SignNull = "sign null"
ApiKeyNull = "sign null"
UserWrong = "username wrong"
)
func CheckSign() gin.HandlerFunc {
return func(c *gin.Context) {
reqData := &RequestHttp{
Ctx: c,
Params: map[string]interface{}{},
}
apiKey := c.Request.FormValue("api_key")
if apiKey == "" {
response.Result(401, gin.H{}, ApiKeyNull, c)
c.Abort()
return
}
apiSecret := ""
signReq := c.Request.FormValue("sign")
if signReq == "" {
response.Result(401, gin.H{}, SignNull, c)
c.Abort()
return
}
signStr := reqData.RequestParams("sign") + apiSecret
fmt.Println(signStr, "signStr")
signReal := SignEncode(signStr)
if signReq != signReal {
response.Result(401, gin.H{}, SignWrong, c)
c.Abort()
return
}
c.Next()
}
}
//@function: SignEncode
//@description: 生成sign
//@param: message string
//@return: sign string
func SignEncode(message string) string {
return GetSHA256HashCode(message)
}
//@function: GetSHA256HashCode
//@description: SHA256生成哈希值
//@param: message string
//@return: hashCode string
func GetSHA256HashCode(message string) string {
messageArr := []byte(message)
//创建一个基于SHA256算法的hash.Hash接口的对象
hash := sha256.New()
//输入数据
hash.Write(messageArr)
//计算哈希值
bytes := hash.Sum(nil)
//将字符串编码为16进制格式,返回字符串
hashCode := hex.EncodeToString(bytes)
//返回哈希值
return hashCode
}
get_request.go 获取请求参数,转换请求参数为string,参数key排序
package xxx
import (
"fmt"
"sort"
"strings"
"sync"
"github.com/gin-gonic/gin"
"github.com/gin-gonic/gin/binding"
)
type RequestHttp struct {
Ctx *gin.Context
Params map[string]interface{}
lock sync.Mutex
}
//@function: JoinParamsStr
//@description: 请求参数转换字符串
//@param: message string
//@return: a=1&b=2 string
func (r *RequestHttp) JoinParamsStr() string {
//先按key 排序 升序 ASCII 升序
keys := make([]string, 0, len(r.Params))
for k := range r.Params {
keys = append(keys, k)
}
sort.Strings(keys)
var params []string
if len(r.Params) > 0 {
for _, k := range keys {
params = append(params, fmt.Sprintf("%s=%v", k, r.Params[k]))
}
}
return strings.Join(params, "&")
}
//@function: RequestParams
//@description: 获取参数集合
//@param: exclude string 排除key
//@return: hashCode string
func (r *RequestHttp) RequestParams(exclude string) string {
ctx := r.Ctx
bindParams := map[string]interface{}{}
if ctx.Request.Method == "POST" {
contextType := ctx.Request.Header.Get("Content-Type")
if contextType == "application/json" {
err := ctx.ShouldBindBodyWith(&bindParams, binding.JSON)
if err != nil { //报错
fmt.Printf("nyx_request_mid_error %v,err: %v \n", bindParams, err)
return ""
}
if len(bindParams) > 0 {
for k, v := range bindParams {
r.Add(k, v)
}
}
} else {
_ = ctx.Request.ParseMultipartForm(32 << 20)
if len(ctx.Request.PostForm) > 0 {
for k, v := range ctx.Request.PostForm {
r.Add(k, v[0])
}
}
}
} else {
var tmpParams = make(map[string]string)
err2 := ctx.ShouldBind(&tmpParams)
if err2 != nil {
fmt.Printf("nyx_request_mid_error %v,err: %v \n", bindParams, err2)
return ""
}
for k, v := range tmpParams {
r.Add(k, v)
}
}
r.Delete(exclude)
return r.JoinParamsStr()
}
//添加参数
func (r *RequestHttp) Add(key string, value interface{}) {
r.lock.Lock()
r.Params[key] = value
r.lock.Unlock()
}
//删除参数
func (r *RequestHttp) Delete(key string) {
r.lock.Lock()
if _, ok := r.Params[key]; ok {
delete(r.Params, key)
}
r.lock.Unlock()
}