wesmiler 2 месяцев назад
Родитель
Сommit
3161b34d8a
1 измененных файлов с 5 добавлено и 22 удалено
  1. 5 22
      app/Services/Api/MemberService.php

+ 5 - 22
app/Services/Api/MemberService.php

@@ -75,32 +75,15 @@ class MemberService extends BaseService
         }
 
         // 敏感数据
-        $signData = isset($params['userInfo'])?$params['userInfo']:[];
-        $encryptedData = isset($signData['encryptedData'])?$signData['encryptedData']:'';
-        $iv = isset($signData['iv'])?$signData['iv']:'';
-        $signature = isset($signData['signature'])?$signData['signature']:'';
-        $rawData = isset($signData['rawData'])?$signData['rawData']:'';
+//        $signData = isset($params['userInfo'])?$params['userInfo']:[];
+//        $encryptedData = isset($signData['encryptedData'])?$signData['encryptedData']:'';
+//        $iv = isset($signData['iv'])?$signData['iv']:'';
+//        $signature = isset($signData['signature'])?$signData['signature']:'';
+//        $rawData = isset($signData['rawData'])?$signData['rawData']:'';
 
         // 获取用户信息
         $result = MpService::make()->getUserInfo($code);
         $openid = isset($result['openid']) ? $result['openid'] : '';
-        $sessionKey = isset($result['session_key']) ? $result['session_key'] : '';
-        $signature2 =  sha1(htmlspecialchars_decode($rawData).$sessionKey);
-        var_dump($signature,$signature2);
-        // 验证签名
-        if ($signature2 !== $signature){
-            $this->error = '签名验证失败';
-            return false;
-        }
-
-        // 解密敏感数据
-        $userInfo = MpService::make()->decryptData($encryptedData, $iv, $sessionKey);
-        if (empty($userInfo)) {
-            $this->error = '授权登录失败:'.MpService::make()->getError();
-            return false;
-        }
-
-
         if (empty($openid)) {
             $this->error = 1042;
             return false;