We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
http://127.0.0.1:9999/helper/sign 看功能是可以直接让指定账户在线签名,会不会有疏忽的,把服务对外访问,导致这个接口被恶意使用?
The text was updated successfully, but these errors were encountered:
@xinliangnote
Sorry, something went wrong.
咱们不是有 swagger 接口文档嘛,如果接口开启了签名验证,在 swagger 接口文档中请求接口时,会提示 “签名错误”,为了解决这个问题,增加了一个接口用于生成某个请求的签名。
不过后来调试起来太麻烦... 我就调整为测试环境不进行签名验证了。
另外,这个接口是帮助生成签名的,如果是随意生成的签名也是无效的,请求你的程序也无法验证通过,如果有这个顾虑,可以删掉这个路由。
当然如果“有心人”想破解你的签名验证规则,通过其他方式也可以的,在这我就不说了...
就算是签名验证被破解了,那也无妨,因为一些接口咱们还是需要登录验证的。
No branches or pull requests
http://127.0.0.1:9999/helper/sign
看功能是可以直接让指定账户在线签名,会不会有疏忽的,把服务对外访问,导致这个接口被恶意使用?
The text was updated successfully, but these errors were encountered: