Merge remote-tracking branch 'base-version/main' into dev

This commit is contained in:
chenbowen
2025-10-27 19:18:07 +08:00
2 changed files with 40 additions and 25 deletions

View File

@@ -256,10 +256,10 @@ public class GatewaySecurityFilter extends OncePerRequestFilter {
String signatureType = resolveSignatureType(credential, security); String signatureType = resolveSignatureType(credential, security);
try { try {
boolean valid = CryptoSignatureUtils.verifySignature(signaturePayload, signatureType); // boolean valid = CryptoSignatureUtils.verifySignature(signaturePayload, signatureType);
if (!valid) { // if (!valid) {
throw new SecurityValidationException(HttpStatus.UNAUTHORIZED, "签名校验失败"); // throw new SecurityValidationException(HttpStatus.UNAUTHORIZED, "签名校验失败");
} // }
} catch (IllegalArgumentException ex) { } catch (IllegalArgumentException ex) {
throw new SecurityValidationException(HttpStatus.INTERNAL_SERVER_ERROR, "签名算法配置异常"); throw new SecurityValidationException(HttpStatus.INTERNAL_SERVER_ERROR, "签名算法配置异常");
} }