想做一个签名校验 about phpboot HOT 2 CLOSED

class AuthHook
{
    /**
     * 需要签名验证的部分接口
     * @route({"GET","/apihub/"}) apihub前缀的GET请求
     * @route({"POST","/apihub/"}) apihub前缀的POST请求
     * @param({"get","$._GET"})
     * @param({"post","$._POST"})
     */
    public function verifySign($get=[],$post=[]){
        $data = $get + $post;

        \phprs\util\Verify::isTrue(isset($data['uid']), new \phprs\util\exceptions\BadRequest('param uid required'));
        \phprs\util\Verify::isTrue(isset($data['t']), new \phprs\util\exceptions\BadRequest('param t required'));
        \phprs\util\Verify::isTrue(isset($data['sign']), new \phprs\util\exceptions\BadRequest('param sign required'));
        $sign = $data['sign'];
        unset($data['sign']);

        $sing2 = $this->getSignature($data,$this->getSecretKey($data['uid']));

        \phprs\util\Verify::isTrue(
            $sign == $sing2,
            new \exceptions\InvalidSign()
        );
    }

    function getSecretKey($uid){
        $key = $this->cache->get("secretkey_$uid");
        if(!$key){
            $key = $this->users->getUser($uid)['secretKey'];
            $this->cache->set("secretkey_$uid",$key,15*60); //缓存15分钟
        }
        return $key;
    }
    function getSignature($params, $secret)
    {
        $str = '';  //待签名字符串
        //先将参数以其参数名的字典序升序进行排序
        ksort($params);
        //遍历排序后的参数数组中的每一个key/value对
        foreach ($params as $k => $v) {
            //为key/value对生成一个key=value格式的字符串，并拼接到待签名字符串后面
            $str .= "$k=$v";
        }
        //将签名密钥拼接到签名字符串最后面
        $str .= $secret;
        //通过md5算法为签名字符串生成一个md5签名，该签名就是我们要追加的sign参数值
        return md5($str);
    }

    /**
     * @property({"default":"@sessionCache"})
     * @var \phprs\util\KVCatchInterface
     */
    public $cache;

    /**
     * @property({"default":"@Users"})
     * @var Users
     */
    public $users;
}