临时去除统一 api 签名校验
This commit is contained in:
@@ -256,10 +256,10 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
|
||||
|
||||
String signatureType = resolveSignatureType(credential, security);
|
||||
try {
|
||||
boolean valid = CryptoSignatureUtils.verifySignature(signaturePayload, signatureType);
|
||||
if (!valid) {
|
||||
throw new SecurityValidationException(HttpStatus.UNAUTHORIZED, "签名校验失败");
|
||||
}
|
||||
// boolean valid = CryptoSignatureUtils.verifySignature(signaturePayload, signatureType);
|
||||
// if (!valid) {
|
||||
// throw new SecurityValidationException(HttpStatus.UNAUTHORIZED, "签名校验失败");
|
||||
// }
|
||||
} catch (IllegalArgumentException ex) {
|
||||
throw new SecurityValidationException(HttpStatus.INTERNAL_SERVER_ERROR, "签名算法配置异常");
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user