zeromicro/go-zero
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chose: cancel the assignment and judge later (#1359)

Browse Source 
Co-authored-by: charliecen <chq@abierr.com>
This commit is contained in:
charliecen
2021-12-22 20:05:35 +08:00
committed by GitHub
parent 6f1d27354a
commit d5e493383a
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
rest/internal/security/contentsecurity.go
View File

@@ -119,7 +119,7 @@ func VerifySignature(r *http.Request, securityHeader *ContentSecurityHeader, tol
}, "\n") }, "\n")
actualSignature := codec.HmacBase64(securityHeader.Key, signContent) actualSignature := codec.HmacBase64(securityHeader.Key, signContent)
passed := securityHeader.Signature == actualSignature /*passed := securityHeader.Signature == actualSignature
if !passed { if !passed {
logx.Infof("signature different, expect: %s, actual: %s", logx.Infof("signature different, expect: %s, actual: %s",
securityHeader.Signature, actualSignature) securityHeader.Signature, actualSignature)
@@ -127,7 +127,12 @@ func VerifySignature(r *http.Request, securityHeader *ContentSecurityHeader, tol
if passed { if passed {
return httpx.CodeSignaturePass return httpx.CodeSignaturePass
}*/
if securityHeader.Signature == actualSignature {
return httpx.CodeSignaturePass
} }
logx.Infof("signature different, expect: %s, actual: %s",
securityHeader.Signature, actualSignature)
return httpx.CodeSignatureInvalidToken return httpx.CodeSignatureInvalidToken
} }