This article is a mirror article of machine translation, please click here to jump to the original article.

View: 288440|Reply: 102

[WebAPI] Verification of WebAPI Universal Signatures (2)

  [Copy link]
Posted on 6/26/2017 3:49:16 PM | | |
Encapsulation of Web API signatures, verification timestamped random number keys, etc
http://www.itsvse.com/thread-3274-1-1.html
(Source: Architect)
The above is written before, a bit buggy, and below is the new version of the universal verification scheme


Returned model model:




In the requested interface, the client must carry the timestamp, random number, and signature in the URL parameter

The signature judgment method is as follows:

Tourists, if you want to see the hidden content of this post, pleaseReply






Previous:webapi ModelState.IsValid model validation
Next:C# task.waitall will freeze the interface
Posted on 2/26/2018 5:33:35 PM |
Prompt:Authors are banned or removed content is automatically blocked
 Landlord| Posted on 6/26/2017 4:18:58 PM |
Interface address: http://ip:port/api/XXX/XXX

Request method: POST

Signature method: URL parameters must contain nonce, timestamp, and signature

Signature value: URL parameter A-Z sorting (excluding signature) splice the value value, finally add secretkey, and then md5
secretkey is 123456


Successfully returned:
{
    "result": true,
    "message": "ok",
    "code": 200
}

Error returns:
{
    "result": false,
    "message": "XXX attribute is required." ,
    "code": 200
}

Posted on 7/26/2018 1:39:35 PM |
GetDateTimeFrom1970Ticks has a bit of a problem: return dtStart.AddMilliseconds(curSeconds); It turns out to be return dtStart.Addseconds(curSeconds); After verification, curSeconds should be milliseconds, so it is correct to change it to add milliseconds.
Posted on 6/27/2017 11:15:33 AM |
I want to see hidden content~!!!
Posted on 7/12/2017 4:56:42 PM |
Beginners, learn to learn safety verification
Posted on 7/16/2017 11:52:03 PM |

I'm going to look at the hidden code
Posted on 7/17/2017 4:28:45 PM |
I want to see how to sign it
Posted on 7/24/2017 10:38:57 AM |
Aston Villa sent a letter to the Afghan government
Posted on 8/11/2017 11:17:20 PM |
Yes, yes, I learned
Posted on 8/19/2017 8:02:20 AM |
In worship, we have been working on webapi interface security certification recently
Posted on 9/1/2017 1:13:21 PM |
Reply and see!
- This article is from the architect, the original address: https://www.itsvse.com/thread-3653-1-1.html
Disclaimer:
All software, programming materials or articles published by Code Farmer Network are only for learning and research purposes; The above content shall not be used for commercial or illegal purposes, otherwise, users shall bear all consequences. The information on this site comes from the Internet, and copyright disputes have nothing to do with this site. You must completely delete the above content from your computer within 24 hours of downloading. If you like the program, please support genuine software, purchase registration, and get better genuine services. If there is any infringement, please contact us by email.

Mail To:help@itsvse.com