Kaynağa Gözat

滴滴签名验证通过后会判断请求有效期 -- 还原

shizhongqi 7 ay önce
ebeveyn
işleme
cbb6bdb743

+ 8 - 7
common/components/delivery/platform/didi/CallBackHandler.php

@@ -36,13 +36,14 @@ class CallBackHandler
                 return false;
             }
             // 签名验证通过后会判断请求有效期, now - 2分钟 < timestamp < now + 2分钟 为有效区间内的请求
-//            if ($post['timeStamp'] < time() - 120 || $post['timeStamp'] > time() + 120) {
-//                if(getenv('YII_ENV') == 'production'){
-//                    Yii::error('滴滴回调请求有效期验证失败', 'didi-callback');
-//                    noticeUtil::push('滴滴回调请求有效期验证失败 -- '.$post['logisticsParam']);
-//                    return false;
-//                }
-//            }
+            $timeStamp = (int)$post['timeStamp']/1000;
+            if ($timeStamp < time() - 120 || $timeStamp > time() + 120) {
+                if(getenv('YII_ENV') == 'production'){
+                    Yii::error('滴滴回调请求有效期验证失败', 'didi-callback');
+                    noticeUtil::push('滴滴回调请求有效期验证失败 -- '.$post['logisticsParam']);
+                    return false;
+                }
+            }
             $data = json_decode($post['logisticsParam'], true);
 
             // ----- 区分业务类型 -----