fix: 权限校验

controllers/base_auth.go

@@ -24,7 +24,7 @@ func (this *BaseAuthController) Prepare() {
 		nonce := this.Ctx.Input.Header("nonce")
 		timestamp := this.Ctx.Input.Header("timestamp")
 		appid := this.Ctx.Input.Header("appid")
-		//signature := this.Ctx.Input.Header("signature")
+		signature := this.Ctx.Input.Header("signature")
 
 		if nonce == "" {
 			errMsg := "随机字符串不能为空"
@@ -47,13 +47,13 @@ func (this *BaseAuthController) Prepare() {
 			return
 		}
 
-		//checkSign := utils.GetSign(nonce, timestamp)
-		//if signature != checkSign {
-		//	errMsg := "签名错误"
-		//	this.JSON(models.BaseResponse{Ret: 401, Msg: "", ErrMsg: errMsg}, false, false)
-		//	this.StopRun()
-		//	return
-		//}
+		checkSign := utils.GetSign(nonce, timestamp)
+		if signature != checkSign {
+			errMsg := "签名错误"
+			this.JSON(models.BaseResponse{Ret: 401, Msg: "", ErrMsg: errMsg}, false, false)
+			this.StopRun()
+			return
+		}
 		if method != "GET" && method != "POST" {
 			errMsg := "无效的请求方式"
 			this.JSON(models.BaseResponse{Ret: 501, Msg: "", ErrMsg: errMsg}, false, false)