127 lines
3.5 KiB
Go
127 lines
3.5 KiB
Go
package auth
|
|
|
|
import (
|
|
"bytes"
|
|
"errors"
|
|
"fmt"
|
|
"golib.gaore.com/GaoreGo/gaore-common-sdk-go/sdk/requests"
|
|
"golib.gaore.com/GaoreGo/gaore-common-sdk-go/sdk/utils"
|
|
"net/http"
|
|
"net/url"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
func signRpcRequest(request requests.AcsRequest, signer Signer) (err error) {
|
|
err = completeRpcSignParams(request, signer)
|
|
if err != nil {
|
|
return
|
|
}
|
|
if _, isContainsSign := request.GetQueryParams()["sign"]; isContainsSign {
|
|
delete(request.GetQueryParams(), "sign")
|
|
}
|
|
|
|
stringToSign := buildRpcStringToSign(request)
|
|
request.SetStringToSign(stringToSign)
|
|
signature := signer.Sign(stringToSign, "&")
|
|
request.GetQueryParams()["sign"] = signature
|
|
debug("GrSdk sign: %s", signature)
|
|
debug("GrSdk sign string: %s", stringToSign)
|
|
debug("GrSdk sign: \r\n")
|
|
return
|
|
}
|
|
|
|
func completeRpcSignParams(request requests.AcsRequest, signer Signer) (err error) {
|
|
|
|
var accessKeyFrom string
|
|
if accessKeyFrom, err = signer.GetAccessKeyFrom(); err != nil {
|
|
return
|
|
}
|
|
|
|
queryParams := request.GetQueryParams()
|
|
queryParams["access_time"] = fmt.Sprintf("%d", time.Now().Unix())
|
|
queryParams["access_key"], err = signer.GetAccessKeyId()
|
|
queryParams["access_from"] = accessKeyFrom
|
|
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
request.GetHeaders()["Content-type"] = requests.Form
|
|
request.GetHeaders()["Gr-Sdk-From"] = accessKeyFrom
|
|
formString := utils.GetUrlFormedMap(request.GetFormParams())
|
|
request.SetContent(bytes.NewBufferString(formString).Bytes())
|
|
return
|
|
}
|
|
|
|
func buildRpcStringToSign(request requests.AcsRequest) (stringToSign string) {
|
|
signParams := make(map[string]string)
|
|
for key, value := range request.GetQueryParams() {
|
|
signParams[key] = value
|
|
}
|
|
|
|
if strings.ToUpper(request.GetMethod()) == requests.POST {
|
|
for key, value := range request.GetFormParams() {
|
|
signParams[key] = value
|
|
}
|
|
}
|
|
|
|
stringToSign = utils.GetUrlFormedMap(signParams)
|
|
stringToSign = strings.Replace(stringToSign, "+", "%20", -1)
|
|
stringToSign = strings.Replace(stringToSign, "*", "%2A", -1)
|
|
stringToSign = strings.Replace(stringToSign, "%7E", "~", -1)
|
|
stringToSign = url.QueryEscape(stringToSign)
|
|
stringToSign = request.GetMethod() + "&%2F&" + stringToSign
|
|
return
|
|
}
|
|
|
|
func unsignRpcRequest(request *http.Request, signer Signer) (err error) {
|
|
signParams := make(map[string]string)
|
|
for key, value := range request.URL.Query() {
|
|
signParams[key] = value[0]
|
|
}
|
|
|
|
if strings.ToUpper(request.Method) == requests.POST {
|
|
for key, value := range request.Form {
|
|
signParams[key] = value[0]
|
|
}
|
|
}
|
|
|
|
if accessKey, err := signer.GetAccessKeyId(); err != nil {
|
|
return err
|
|
} else if accessKey == "" {
|
|
return errors.New("access key is not allow empty")
|
|
} else if accessKey != signParams["access_key"] {
|
|
return errors.New("illegal access key")
|
|
}
|
|
|
|
signValue, ok := signParams["sign"]
|
|
if !ok {
|
|
return errors.New("sign value is not exists")
|
|
} else {
|
|
delete(signParams, "sign")
|
|
}
|
|
|
|
stringToSign := utils.GetUrlFormedMap(signParams)
|
|
stringToSign = strings.Replace(stringToSign, "+", "%20", -1)
|
|
stringToSign = strings.Replace(stringToSign, "*", "%2A", -1)
|
|
stringToSign = strings.Replace(stringToSign, "%7E", "~", -1)
|
|
stringToSign = url.QueryEscape(stringToSign)
|
|
stringToSign = request.Method + "&%2F&" + stringToSign
|
|
debug("GrSdk sign: %s", stringToSign)
|
|
|
|
if timestamp, err := strconv.ParseInt(signParams["access_time"], 10, 64); err != nil {
|
|
return err
|
|
} else {
|
|
if time.Unix(timestamp, 0).Before(time.Now().Add(-5 * time.Minute)) {
|
|
err = errors.New("sign timeout 5 minute")
|
|
}
|
|
}
|
|
|
|
if signer.Sign(stringToSign, "&") != signValue {
|
|
return errors.New("sign string is not correct")
|
|
}
|
|
return
|
|
}
|