1

platformapi/uuptapi/callback.go

@@ -1,10 +1,9 @@
 package uuptapi
 
 import (
-	"encoding/json"
 	"fmt"
 	"git.rosy.net.cn/baseapi/utils"
-	"io/ioutil"
+	"git.rosy.net.cn/jx-callback/globals"
 	"net/http"
 )
 
@@ -12,10 +11,10 @@ const (
 	uuCallbackURL = "http://callback.jxc4.com/UuPt/UuWaybillCallback" //uu跑腿订单回调地址
 )
 
-//var (
-//	SuccessResponse = &CallbackResponse{ReturnCode: "ok"}
-//	FailResponse    = &CallbackResponse{ReturnCode: "fail"}
-//)
+var (
+	SuccessResponse  = &CallbackResponse{ReturnCode: "ok"}
+	SignatureIsNotOk = &CallbackResponse{ReturnCode: "fail"}
+)
 
 type CallbackResponse struct {
 	ReturnCode string `json:"return_code"`
@@ -37,12 +36,11 @@ func Err2CallbackResponse(err error) *CallbackResponse {
 
 //订单提交后状态变化回调
 func (a *API) WaybillCallback(request *http.Request) (*WaybillCallbackParam, *CallbackResponse) {
-	resp, err := ioutil.ReadAll(request.Body)
-	if err != nil {
-		return nil, Err2CallbackResponse(err)
+	if callbackResponse := a.CheckCallbackValidation(request); callbackResponse != nil {
+		return nil, callbackResponse
 	}
 	retVal := WaybillCallbackParam{}
-	if err := json.Unmarshal(resp, &retVal); err != nil {
+	if err := utils.Map2StructByJson(utils.URLValues2Map(request.PostForm), &retVal, true); err != nil {
 		return nil, Err2CallbackResponse(err)
 	}
 	con := retVal != WaybillCallbackParam{}
@@ -52,3 +50,17 @@ func (a *API) WaybillCallback(request *http.Request) (*WaybillCallbackParam, *Ca
 		return nil, Err2CallbackResponse(fmt.Errorf("UU跑腿运单回调信息为空"))
 	}
 }
+
+func (a *API) CheckCallbackValidation(request *http.Request) (callbackResponse *CallbackResponse) {
+	err := request.ParseForm()
+	if err == nil {
+		sign := a.signParam(utils.URLValues2Map(request.PostForm))
+		if sign != request.FormValue(signKey) {
+			globals.SugarLogger.Infof("Signature is not ok, mine:%v, get:%v", sign, request.FormValue(signKey))
+			return SignatureIsNotOk
+		}
+	} else {
+		callbackResponse = Err2CallbackResponse(err)
+	}
+	return callbackResponse
+}