parent: e55697 | patch | commitdiff
Administrator
6 days ago bd0f33bb7cbcca5eec92325c350bc7fbc366b609
refs
author Administrator <15274802129@163.com>
Tuesday, June 23, 2026 21:04 +0800
committer Administrator <15274802129@163.com>
Tuesday, June 23, 2026 21:04 +0800
commitbd0f33bb7cbcca5eec92325c350bc7fbc366b609
tree 8e3f578a57718e75df12cb78332a38b5db121db1 tree | zip | gz
parent e55697ed07d7a99df3e64fd1624346a64a71dd20 view | diff 
refactor(pay): 优化LWPAY签名逻辑，使用字段白名单确保安全

- 定义SIGN_FIELD_KEYS常量数组，明确指定参与签名的7个业务必传字段
- 修改签名方法，仅对白名单中的字段进行签名计算
- 过滤pay_productname、pay_attach、pay_md5sign等非签名字段
- 使用TreeMap确保签名参数按字典序排列
- 提升支付接口的安全性和规范性
1 files modified
20 ■■■■■ changed files
src/main/java/cc/mrbird/febs/pay/service/LwPayService.java 20 ●●●●● diff | view | raw | blame | history