Showing
1 changed file
with
0 additions
and
51 deletions
逛/security.md
deleted
100644 → 0
1 | -## 安全控制 | ||
2 | - | ||
3 | -### 消息完整性校验 | ||
4 | - | ||
5 | -#### 控制开关 | ||
6 | -发送请求 `http://m.yohobuy.com/lb/v1?app_version=4.1.0.1603140001&client_secret=e750b0174173917bfe3388d57b03d5dd&client_type=iphone&os_version=9.3&screen_size=375x667&v=7` | ||
7 | -根据响应消息体中`bv`的接口判断是否进行消息完整性校验 | ||
8 | -```javascript | ||
9 | -{ | ||
10 | -code: 200, | ||
11 | -message: "Config Success", | ||
12 | -md5: "1231231231231", | ||
13 | -data: { | ||
14 | - ae: "e0323a9039add2978bf5b49550572c7c", | ||
15 | - url: "http://m.yohobuy.com", | ||
16 | - tl: "7ea6bdf07376a928c5d4677789c45463", | ||
17 | - rp: "62a165d59f8daf42e2df5f3c5aed8a2f", | ||
18 | - bv: "94931e4a3036baeecdacb975e10a8ec6" | ||
19 | - } | ||
20 | -} | ||
21 | - | ||
22 | -``` | ||
23 | - | ||
24 | -![checksum](http://7xs795.com1.z0.glb.clouddn.com/228694685069003367.jpg) | ||
25 | - | ||
26 | - | ||
27 | - | ||
28 | -### 会话控制 | ||
29 | - | ||
30 | -#### 控制开关 | ||
31 | - | ||
32 | - - 只有客户端版本>4.0.5才会进行session校验 | ||
33 | - - 只有下面的接口才会进行session校验 | ||
34 | - - app.passport.profile | ||
35 | - - app.SpaceOrders.detail | ||
36 | - - app.SpaceOrders.get | ||
37 | - | ||
38 | -#### java服务端配置 | ||
39 | - | ||
40 | -```bash | ||
41 | - | ||
42 | -# gateway模块,是否启用校验 | ||
43 | -is_checksession_enable=true | ||
44 | - | ||
45 | - #用户模块,用分钟作为单位, 默认是7天 | ||
46 | - user.session.expire=10080 | ||
47 | - | ||
48 | -``` | ||
49 | - | ||
50 | - | ||
51 | - ![session](http://7xs795.com1.z0.glb.clouddn.com/10270172634654153.jpg) |
-
Please register or login to post a comment