ajax 提交数据防止篡改,关于vue.js:spingbootvue防止多次请求参数篡改数据完整

1、vue申请传值为：工夫戳(timeStamp)、随机数(nonce)、sign(url+params参数排序并进行加密)

2、后盾获取申请内容，

a、先验证拜访工夫戳是否超出申请范畴

b、验证随机数(nonce)是否曾经应用过

c、后盾对获取的参数进行排序并加密，验证获取的标签是否与sign是否同一值

注：传参模式vue传参模式为params

@PostMapping(“/add”)

public AjaxResult add(ServletRequest req) throws IOException, ParseException {

HttpServletRequest request = (HttpServletRequest)req;

HttpServletRequest requestWrapper = new BodyReaderHttpServletRequestWrapper(request);

SortedMap allParams = HttpUtils.getAllParams(requestWrapper);

String timeStamp = StringUtils.getString(allParams, "timeStamp");

String nonce = StringUtils.getString(allParams, "nonce");

Long validateTime = DateUtil.stampToDate(timeStamp);

if (validateTime < StringConstants.BALIDATETIME) {

Object obj = redisService.getCacheObject(nonce);

if (StringUtils.isNull(obj)) {

redisService.setCacheObject(nonce, nonce);

boolean isSigned = SignUtil.verifySign(allParams);

if (isSigned) {

return toAjax(countService.insertAccount(allParams));

} else {

return AjaxResult.error();

}

} else {

return AjaxResult.error();

}

} else {

return AjaxResult.error();

}

}