Verification of WebAPI Universal Signatures (2)

Little scum · Posted on 6/26/2017 3:49:16 PM

Encapsulation of Web API signatures, verification timestamped random number keys, etc
http://www.itsvse.com/thread-3274-1-1.html
(Source: Architect)

The above is written before, a bit buggy, and below is the new version of the universal verification scheme

Login is visible.

Returned model model:

Login is visible.

In the requested interface, the client must carry the timestamp, random number, and signature in the URL parameter

The signature judgment method is as follows:

Tourists, if you want to see the hidden content of this post, pleaseReply

ude816 · Posted on 2/26/2018 5:33:35 PM

Prompt:Authors are banned or removed content is automatically blocked

Little scum · Posted on 6/26/2017 4:18:58 PM

Interface address: http://ip:port/api/XXX/XXX

Request method: POST

Signature method: URL parameters must contain nonce, timestamp, and signature

Signature value: URL parameter A-Z sorting (excluding signature) splice the value value, finally add secretkey, and then md5
secretkey is 123456

Successfully returned:
{
"result": true,
"message": "ok",
"code": 200
}

Error returns:
{
"result": false,
"message": "XXX attribute is required." ,
"code": 200
}

jinibm · Posted on 7/26/2018 1:39:35 PM

GetDateTimeFrom1970Ticks has a bit of a problem: return dtStart.AddMilliseconds(curSeconds); It turns out to be return dtStart.Addseconds(curSeconds); After verification, curSeconds should be milliseconds, so it is correct to change it to add milliseconds.

netmpx · Posted on 6/27/2017 11:15:33 AM

I want to see hidden content~!!!

1076490584 · Posted on 7/12/2017 4:56:42 PM

Beginners, learn to learn safety verification

Leilei's second uncle · Posted on 7/16/2017 11:52:03 PM

I'm going to look at the hidden code

Breeze bluebird · Posted on 7/17/2017 4:28:45 PM

I want to see how to sign it

lgr360478429 · Posted on 7/24/2017 10:38:57 AM

Aston Villa sent a letter to the Afghan government

flying fish · Posted on 8/11/2017 11:17:20 PM

Yes, yes, I learned

Listen to the sea ship · Posted on 8/19/2017 8:02:20 AM

In worship, we have been working on webapi interface security certification recently

pecklu · Posted on 9/1/2017 1:13:21 PM

Reply and see!
- This article is from the architect, the original address: https://www.itsvse.com/thread-3653-1-1.html

[WebAPI] Verification of WebAPI Universal Signatures (2)

Related Posts

Sections viewed

ude816	Posted on 2/26/2018 5:33:35 PM \| Prompt:Authors are banned or removed content is automatically blocked
ude816