增加检查 sign 开关
diff --git a/config/application-devel-pg-local.properties b/config/application-devel-pg-local.properties
index e976303..ef591a9 100644
--- a/config/application-devel-pg-local.properties
+++ b/config/application-devel-pg-local.properties
@@ -21,6 +21,7 @@
# user password
auth.password.bcrypt.seed=
+security.request.sign=false
##################################################
## quartz task scheduler
shopbalance.updater.cron = -
\ No newline at end of file
diff --git a/config/application-devel-pg.properties b/config/application-devel-pg.properties
index ada087d..5ea16f5 100644
--- a/config/application-devel-pg.properties
+++ b/config/application-devel-pg.properties
@@ -21,8 +21,7 @@
auth.password.bcrypt.seed=
spring.jackson.serialization.fail-on-empty-beans=false
logging.level.org.springframework.web=DEBUG
-
-
+security.request.sign=false
##################################################
## quartz task scheduler
-shopbalance.updater.cron = -
\ No newline at end of file
+shopbalance.updater.cron=-
\ No newline at end of file
diff --git a/src/main/kotlin/com/supwisdom/dlpay/api/advices.kt b/src/main/kotlin/com/supwisdom/dlpay/api/advices.kt
index d19f656..0f9f314 100644
--- a/src/main/kotlin/com/supwisdom/dlpay/api/advices.kt
+++ b/src/main/kotlin/com/supwisdom/dlpay/api/advices.kt
@@ -13,6 +13,7 @@
import org.aspectj.lang.annotation.Aspect
import org.aspectj.lang.annotation.Pointcut
import org.springframework.beans.factory.annotation.Autowired
+import org.springframework.beans.factory.annotation.Value
import org.springframework.http.ResponseEntity
import org.springframework.security.core.Authentication
import org.springframework.stereotype.Component
@@ -49,6 +50,9 @@
@Autowired
lateinit var commonService: CommonService
+ @Value("\${security.request.sign: true}")
+ private var requestSignCheck: Boolean = true
+
private val logger = KotlinLogging.logger { }
@Pointcut("@within(org.springframework.web.bind.annotation.RestController)")
@@ -65,7 +69,7 @@
return try {
if (body is APIRequestParam) {
body.checkParam()
- if (!body.checkSign(commonService.getSecretByAppid(auth.name))) {
+ if (requestSignCheck && !body.checkSign(commonService.getSecretByAppid(auth.name))) {
throw RequestParamCheckException(TradeErrorCode.REQUEST_SIGN_ERROR, "参数签名错误")
}
} else {