智云MES后端API代码
blame | 历史 | 补丁 | 提交 | 提交对比 | ignore whitespace
chenhaozhe
4 天以前 da84e4e72c9d9cc7e2bd40dc4bb7b3222ca3519a 
 WebAPI/Service/SignatureVerifyAttribute.cs


@@ -6,6 +6,7 @@


using System.Web.Http;


using System.Web.Http.Controllers;


using System.Web.Http.Filters;


using WebAPI;


using WebAPI.Service;




namespace project.Filter


@@ -53,7 +54,6 @@


            }


            var currentTs = (DateTime.UtcNow - new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc)).TotalSeconds;


            var diff = Math.Abs(currentTs - ts);




            if (diff > 300) // 300秒 = 5分钟


            {


                actionContext.Response = actionContext.Request.CreateResponse(System.Net.HttpStatusCode.BadRequest,


@@ -87,10 +87,9 @@


            }


            rawData = rawData.Replace("'", "%27");


            var signStr = rawData + "&timestamp=" + timestamp + "&nonce=" + nonce + "&key=" + SecretKey;




            var serverSign = ComputeHmacSha256(signStr, SecretKey);






            


            if (serverSign != clientSign.ToUpper())


            {


                actionContext.Response = actionContext.Request.CreateResponse(System.Net.HttpStatusCode.Unauthorized,