From bd0f33bb7cbcca5eec92325c350bc7fbc366b609 Mon Sep 17 00:00:00 2001
From: Administrator <15274802129@163.com>
Date: Tue, 23 Jun 2026 21:04:10 +0800
Subject: [PATCH] refactor(pay): 优化LWPAY签名逻辑，使用字段白名单确保安全
---
src/main/java/cc/mrbird/febs/mall/controller/dependentStation/ApiLoginController.java | 30 ++++++++++++++++++++++++++++--
1 files changed, 28 insertions(+), 2 deletions(-)
diff --git a/src/main/java/cc/mrbird/febs/mall/controller/dependentStation/ApiLoginController.java b/src/main/java/cc/mrbird/febs/mall/controller/dependentStation/ApiLoginController.java
index da0db3d..7ecc950 100644
--- a/src/main/java/cc/mrbird/febs/mall/controller/dependentStation/ApiLoginController.java
+++ b/src/main/java/cc/mrbird/febs/mall/controller/dependentStation/ApiLoginController.java
@@ -6,6 +6,8 @@
import cc.mrbird.febs.common.utils.RedisUtils;
import cc.mrbird.febs.mall.dto.*;
import cc.mrbird.febs.mall.service.IApiMallMemberService;
+import cc.mrbird.febs.mall.vo.MallMoneyChangeVo;
+import cc.mrbird.febs.mall.vo.MallSalesServiceVo;
import cc.mrbird.febs.pay.model.WxGenerateQrCodeDto;
import cc.mrbird.febs.pay.service.IXcxPayService;
import cc.mrbird.febs.pay.util.WechatConfigure;
@@ -13,6 +15,8 @@
import com.alibaba.fastjson.JSONObject;
import io.swagger.annotations.Api;
import io.swagger.annotations.ApiOperation;
+import io.swagger.annotations.ApiResponse;
+import io.swagger.annotations.ApiResponses;
import lombok.RequiredArgsConstructor;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
@@ -44,7 +48,7 @@
@ApiOperation(value = "app注册接口", notes = "app注册接口")
@PostMapping(value = "/register")
- @Limit(key = "register", period = 5, count = 1, name = "注册", prefix = "limit",limitType = LimitType.IP)
+ @Limit(key = "register", period = 1, count = 1, name = "注册", prefix = "limit",limitType = LimitType.IP)
public FebsResponse register(@RequestBody @Validated RegisterDto registerDto) {
return memberService.register(registerDto);
}
@@ -52,9 +56,31 @@
@ApiOperation(value = "账号密码登录接口", notes = "账号密码登录接口")
@PostMapping(value = "/toLogin")
- @Limit(key = "toLogin", period = 5, count = 1, name = "注册", prefix = "limit",limitType = LimitType.IP)
+ @Limit(key = "toLogin", period = 1, count = 1, name = "注册", prefix = "limit",limitType = LimitType.IP)
public FebsResponse login(@RequestBody @Validated LoginDto loginDto) {
return memberService.toLogin(loginDto);
}
+
+
+ @ApiOperation(value = "我的售后服务", notes = "我的售后服务")
+ @ApiResponses({
+ @ApiResponse(code = 200, message = "success", response = MallSalesServiceVo.class)
+ })
+ @GetMapping(value = "/salesService")
+ public FebsResponse salesService() {
+ return memberService.salesService();
+ }
+
+
+
+ @ApiOperation(value = "价格转换", notes = "价格转换")
+ @ApiResponses({
+ @ApiResponse(code = 200, message = "success", response = MallMoneyChangeVo.class)
+ })
+ @GetMapping(value = "/moneyChange")
+ public FebsResponse moneyChange() {
+ return memberService.moneyChange();
+ }
+
}
--
Gitblit v1.9.1