lsm/sa-token
1
0
Fork 0
mirror of https://gitee.com/dromara/sa-token.git synced 2025-07-17 19:37:40 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

修复 API接口签名校验参数接口NPE问题，增加必须参数的非空校验处理。

Browse Source
This commit is contained in:
konbai 2023-07-11 23:08:47 +08:00
parent 072a76132a
commit f832c63a8c
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sa-token-core/src/main/java/cn/dev33/satoken/sign/SaSignTemplate.java
View File

@ -315,6 +315,11 @@ public class SaSignTemplate {
String nonceValue = paramMap.get(nonce); String nonceValue = paramMap.get(nonce);
String signValue = paramMap.get(sign); String signValue = paramMap.get(sign);
// 三个参数必须全部非空
SaSignException.throwByNull(timestampValue, "缺少 timestamp 字段");
SaSignException.throwByNull(nonceValue, "缺少 nonce 字段");
SaSignException.throwByNull(signValue, "缺少 sign 字段");
// 依次校验三个参数 // 依次校验三个参数
checkTimestamp(Long.parseLong(timestampValue)); checkTimestamp(Long.parseLong(timestampValue));
if(getSignConfigOrGlobal().getIsCheckNonce()) { if(getSignConfigOrGlobal().getIsCheckNonce()) {