Create & Init Project...

app/interface/video/portal/middleware/BUILD

@@ -0,0 +1,33 @@
+package(default_visibility = ["//visibility:public"])
+
+load(
+    "@io_bazel_rules_go//go:def.bzl",
+    "go_library",
+)
+
+go_library(
+    name = "go_default_library",
+    srcs = ["check.go"],
+    importpath = "go-common/app/interface/video/portal/middleware",
+    tags = ["automanaged"],
+    visibility = ["//visibility:public"],
+    deps = [
+        "//library/ecode:go_default_library",
+        "//library/log:go_default_library",
+        "//library/net/http/blademaster:go_default_library",
+    ],
+)
+
+filegroup(
+    name = "package-srcs",
+    srcs = glob(["**"]),
+    tags = ["automanaged"],
+    visibility = ["//visibility:private"],
+)
+
+filegroup(
+    name = "all-srcs",
+    srcs = [":package-srcs"],
+    tags = ["automanaged"],
+    visibility = ["//visibility:public"],
+)

app/interface/video/portal/middleware/check.go

@@ -0,0 +1,76 @@
+package middleware
+
+import (
+	"crypto/md5"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"go-common/library/ecode"
+	"go-common/library/log"
+	bm "go-common/library/net/http/blademaster"
+	"strconv"
+	"time"
+)
+
+// CheckSecretkey 鉴权
+func TXCheckSecretkey(c *bm.Context) {
+	req := c.Request
+	q := req.URL.Query()
+	wsSecret := q.Get("wsSecret")
+	wsTime := q.Get("wsTime")
+	url := fmt.Sprintf("http://%s%s", c.Request.Host, req.URL.Path)
+	log.Warn("request url = %s", url)
+
+	key := "xtCTceP0fdH8"
+
+	err := check(wsSecret, wsTime, url, key)
+
+	if err != nil {
+		c.JSONMap(map[string]interface{}{"message": err.Error()}, ecode.AccessTokenExpires)
+		c.Abort()
+		return
+	}
+}
+
+// BvcCheckSecret 鉴权
+func BvcCheckSecret(c *bm.Context) {
+	req := c.Request
+	q := req.URL.Query()
+	wsSecret := q.Get("wsSecret")
+	wsTime := q.Get("wsTime")
+	url := fmt.Sprintf("http://%s%s", c.Request.Host, req.URL.Path)
+	log.Warn("request url = %s", url)
+
+	key := "cMRvgcQXZdph"
+
+	err := check(wsSecret, wsTime, url, key)
+
+	if err != nil {
+		c.JSONMap(map[string]interface{}{"message": err.Error()}, ecode.AccessTokenExpires)
+		c.Abort()
+		return
+	}
+}
+
+func check(wsSecret string, wsTime string, url string, key string) error {
+	if wsSecret == "" || wsTime == "" {
+		return errors.New("secret or time is empty")
+	}
+
+	wsTimeInt, err := strconv.ParseInt(wsTime, 10, 64)
+	//log.Warn("%d, %d", time.Now().Unix(), wsTimeInt)
+	if err != nil || time.Now().Unix() > wsTimeInt {
+		return errors.New("request time expired")
+	}
+
+	notCheckStr := fmt.Sprintf("%s%s%s", key, url, wsTime)
+	log.Warn("%s", notCheckStr)
+	h := md5.New()
+	h.Write([]byte(notCheckStr))
+	cipherStr := h.Sum(nil)
+	sign := hex.EncodeToString(cipherStr)
+	if wsSecret != sign {
+		return errors.New("auth failed")
+	}
+	return nil
+}