前后端分离数据的加密和验签

偏执的太偏执、 2021-12-14 19:27 210阅读 0赞

## 数据加密 ##

加密规则：将前端传来的所有参数中，pop掉sign参数<待校验的加密结果>，将其余所有的参数按照ascii码的升序排序，在拼接上前后端预定的规定的api\_key，将拼接结果MD5加密。

备注：示例中参数之间的拼接使用的为 "&"，可根据具体情况自定义

后端代码示例：

#!/usr/bin/env python
    # -*- coding: utf-8 -*-
    """
    数据加密验签
    """
    
    import hashlib
    import operator
    
    
    class Signation(object):
        """
        Sign Class
        """
    
        def __init__(self, api_key):
            self.api_key = api_key  # api_key：固定字符串，前后端预定好的字符串
    
        def get_params_dict(self, params):
            """
            将所有的urlencode格式的请求参数转化为字典格式
            :param params:
            :return:
            """
            return {k: v[0].decode() for k, v in params.items()}
    
        def _get_order_dict(self, params):
            """
            获取有序字典
            :param params: 字典数据   格式{"phone":"13211112222","code":"2345"}
            :return:   按key升序排序的字典
            """
            return dict(sorted(params.items(), key=operator.itemgetter(0)))  # operator.itemgetter 获取到的是一个函数
    
        def _concat_str(self, order_dict):
            """
            键值拼接
            :param order_dict:  有序字典
            :return:
            """
            return "&".join([str(k) + "=" + str(v) for k, v in order_dict.items()])
    
        def get_sign(self, params, api_key):
            """
            返回加密结果
            :param params: 请求参数字典
            :param api_key:  固定字符串
            :return:
            """
            order_dict = self._get_order_dict(params)
            str_data = self._concat_str(order_dict)
            return hashlib.md5((str_data + '&apiKey=' + api_key).encode()).hexdigest()
    
        def get_valid(self, params, sign):
            """
            校验sign   返回True或False
            :param params: 前端传来的请求参数
            :param sign: 前端传来的加密结构
            :return:
            """
            return sign == self.get_sign(self.get_params_dict(params), self.api_key)

前端js代码示例 <额外加了一个时间戳的参数，可不用>

/**
     * 获取当前的时间戳
     */
    function getCurrentTimestamp(){
      let timestamp = new Date().getTime();
      return timestamp
    }
    /**
     * 获取加密函数
     * @param {*} params 请求相关参数
     * @param {*} timestamp  当前时间戳
     * @param {*} apiKey  规定字符串
     */
    function getSign(params,timestamp, apiKey) {
      if (typeof params === "string") {
          return paramsStrSort(params,timestamp,apiKey);
      } else if (typeof params === "object") {
          var arr = [];
          for (var i in params) {
              arr.push((i + "=" + params[i]));
          }
          arr.push(("timestamp"+"="+timestamp));
          return paramsStrSort(arr.join(("&")),apiKey);
      }
    }
    
    function paramsStrSort(paramsStr,apiKey) {
      var urlStr = paramsStr.split("&").sort().join("&");
      var newUrl = urlStr + '&apiKey=' + apiKey;
      return md5.md5(newUrl);
    }

备注：

前后端使用MD5校验时，加密方式要定义好，要保证前后端使用中文时，加密结果任然一致<即保证加密方式的编码格式一致>

示例中后端使用的是python的标准库hashlib，前端的MD5为：

/**
     * 封装MD5
     * @param {*} string 
     */
    function md5(string) {
        function md5_RotateLeft(lValue, iShiftBits) {
          return (lValue << iShiftBits) | (lValue >>> (32 - iShiftBits));
        }
        function md5_AddUnsigned(lX, lY) {
          var lX4, lY4, lX8, lY8, lResult;
          lX8 = (lX & 0x80000000);
          lY8 = (lY & 0x80000000);
          lX4 = (lX & 0x40000000);
          lY4 = (lY & 0x40000000);
          lResult = (lX & 0x3FFFFFFF) + (lY & 0x3FFFFFFF);
          if (lX4 & lY4) {
            return (lResult ^ 0x80000000 ^ lX8 ^ lY8);
          }
          if (lX4 | lY4) {
            if (lResult & 0x40000000) {
              return (lResult ^ 0xC0000000 ^ lX8 ^ lY8);
            } else {
              return (lResult ^ 0x40000000 ^ lX8 ^ lY8);
            }
          } else {
            return (lResult ^ lX8 ^ lY8);
          }
        }
        function md5_F(x, y, z) {
          return (x & y) | ((~x) & z);
        }
        function md5_G(x, y, z) {
          return (x & z) | (y & (~z));
        }
        function md5_H(x, y, z) {
          return (x ^ y ^ z);
        }
        function md5_I(x, y, z) {
          return (y ^ (x | (~z)));
        }
        function md5_FF(a, b, c, d, x, s, ac) {
          a = md5_AddUnsigned(a, md5_AddUnsigned(md5_AddUnsigned(md5_F(b, c, d), x), ac));
          return md5_AddUnsigned(md5_RotateLeft(a, s), b);
        };
        function md5_GG(a, b, c, d, x, s, ac) {
          a = md5_AddUnsigned(a, md5_AddUnsigned(md5_AddUnsigned(md5_G(b, c, d), x), ac));
          return md5_AddUnsigned(md5_RotateLeft(a, s), b);
        };
        function md5_HH(a, b, c, d, x, s, ac) {
          a = md5_AddUnsigned(a, md5_AddUnsigned(md5_AddUnsigned(md5_H(b, c, d), x), ac));
          return md5_AddUnsigned(md5_RotateLeft(a, s), b);
        };
        function md5_II(a, b, c, d, x, s, ac) {
          a = md5_AddUnsigned(a, md5_AddUnsigned(md5_AddUnsigned(md5_I(b, c, d), x), ac));
          return md5_AddUnsigned(md5_RotateLeft(a, s), b);
        };
        function md5_ConvertToWordArray(string) {
          var lWordCount;
          var lMessageLength = string.length;
          var lNumberOfWords_temp1 = lMessageLength + 8;
          var lNumberOfWords_temp2 = (lNumberOfWords_temp1 - (lNumberOfWords_temp1 % 64)) / 64;
          var lNumberOfWords = (lNumberOfWords_temp2 + 1) * 16;
          var lWordArray = Array(lNumberOfWords - 1);
          var lBytePosition = 0;
          var lByteCount = 0;
          while (lByteCount < lMessageLength) {
            lWordCount = (lByteCount - (lByteCount % 4)) / 4;
            lBytePosition = (lByteCount % 4) * 8;
            lWordArray[lWordCount] = (lWordArray[lWordCount] | (string.charCodeAt(lByteCount) << lBytePosition));
            lByteCount++;
          }
          lWordCount = (lByteCount - (lByteCount % 4)) / 4;
          lBytePosition = (lByteCount % 4) * 8;
          lWordArray[lWordCount] = lWordArray[lWordCount] | (0x80 << lBytePosition);
          lWordArray[lNumberOfWords - 2] = lMessageLength << 3;
          lWordArray[lNumberOfWords - 1] = lMessageLength >>> 29;
          return lWordArray;
        };
        function md5_WordToHex(lValue) {
          var WordToHexValue = "", WordToHexValue_temp = "", lByte, lCount;
          for (lCount = 0; lCount <= 3; lCount++) {
            lByte = (lValue >>> (lCount * 8)) & 255;
            WordToHexValue_temp = "0" + lByte.toString(16);
            WordToHexValue = WordToHexValue + WordToHexValue_temp.substr(WordToHexValue_temp.length - 2, 2);
          }
          return WordToHexValue;
        };
        function md5_Utf8Encode(string) {
          string = string.replace(/\r\n/g, "\n");
          var utftext = "";
          for (var n = 0; n < string.length; n++) {
            var c = string.charCodeAt(n);
            if (c < 128) {
              utftext += String.fromCharCode(c);
            } else if ((c > 127) && (c < 2048)) {
              utftext += String.fromCharCode((c >> 6) | 192);
              utftext += String.fromCharCode((c & 63) | 128);
            } else {
              utftext += String.fromCharCode((c >> 12) | 224);
              utftext += String.fromCharCode(((c >> 6) & 63) | 128);
              utftext += String.fromCharCode((c & 63) | 128);
            }
          }
          return utftext;
        };
        var x = Array();
        var k, AA, BB, CC, DD, a, b, c, d;
        var S11 = 7, S12 = 12, S13 = 17, S14 = 22;
        var S21 = 5, S22 = 9, S23 = 14, S24 = 20;
        var S31 = 4, S32 = 11, S33 = 16, S34 = 23;
        var S41 = 6, S42 = 10, S43 = 15, S44 = 21;
        string = md5_Utf8Encode(string);
        x = md5_ConvertToWordArray(string);
        a = 0x67452301; b = 0xEFCDAB89; c = 0x98BADCFE; d = 0x10325476;
        for (k = 0; k < x.length; k += 16) {
          AA = a; BB = b; CC = c; DD = d;
          a = md5_FF(a, b, c, d, x[k + 0], S11, 0xD76AA478);
          d = md5_FF(d, a, b, c, x[k + 1], S12, 0xE8C7B756);
          c = md5_FF(c, d, a, b, x[k + 2], S13, 0x242070DB);
          b = md5_FF(b, c, d, a, x[k + 3], S14, 0xC1BDCEEE);
          a = md5_FF(a, b, c, d, x[k + 4], S11, 0xF57C0FAF);
          d = md5_FF(d, a, b, c, x[k + 5], S12, 0x4787C62A);
          c = md5_FF(c, d, a, b, x[k + 6], S13, 0xA8304613);
          b = md5_FF(b, c, d, a, x[k + 7], S14, 0xFD469501);
          a = md5_FF(a, b, c, d, x[k + 8], S11, 0x698098D8);
          d = md5_FF(d, a, b, c, x[k + 9], S12, 0x8B44F7AF);
          c = md5_FF(c, d, a, b, x[k + 10], S13, 0xFFFF5BB1);
          b = md5_FF(b, c, d, a, x[k + 11], S14, 0x895CD7BE);
          a = md5_FF(a, b, c, d, x[k + 12], S11, 0x6B901122);
          d = md5_FF(d, a, b, c, x[k + 13], S12, 0xFD987193);
          c = md5_FF(c, d, a, b, x[k + 14], S13, 0xA679438E);
          b = md5_FF(b, c, d, a, x[k + 15], S14, 0x49B40821);
          a = md5_GG(a, b, c, d, x[k + 1], S21, 0xF61E2562);
          d = md5_GG(d, a, b, c, x[k + 6], S22, 0xC040B340);
          c = md5_GG(c, d, a, b, x[k + 11], S23, 0x265E5A51);
          b = md5_GG(b, c, d, a, x[k + 0], S24, 0xE9B6C7AA);
          a = md5_GG(a, b, c, d, x[k + 5], S21, 0xD62F105D);
          d = md5_GG(d, a, b, c, x[k + 10], S22, 0x2441453);
          c = md5_GG(c, d, a, b, x[k + 15], S23, 0xD8A1E681);
          b = md5_GG(b, c, d, a, x[k + 4], S24, 0xE7D3FBC8);
          a = md5_GG(a, b, c, d, x[k + 9], S21, 0x21E1CDE6);
          d = md5_GG(d, a, b, c, x[k + 14], S22, 0xC33707D6);
          c = md5_GG(c, d, a, b, x[k + 3], S23, 0xF4D50D87);
          b = md5_GG(b, c, d, a, x[k + 8], S24, 0x455A14ED);
          a = md5_GG(a, b, c, d, x[k + 13], S21, 0xA9E3E905);
          d = md5_GG(d, a, b, c, x[k + 2], S22, 0xFCEFA3F8);
          c = md5_GG(c, d, a, b, x[k + 7], S23, 0x676F02D9);
          b = md5_GG(b, c, d, a, x[k + 12], S24, 0x8D2A4C8A);
          a = md5_HH(a, b, c, d, x[k + 5], S31, 0xFFFA3942);
          d = md5_HH(d, a, b, c, x[k + 8], S32, 0x8771F681);
          c = md5_HH(c, d, a, b, x[k + 11], S33, 0x6D9D6122);
          b = md5_HH(b, c, d, a, x[k + 14], S34, 0xFDE5380C);
          a = md5_HH(a, b, c, d, x[k + 1], S31, 0xA4BEEA44);
          d = md5_HH(d, a, b, c, x[k + 4], S32, 0x4BDECFA9);
          c = md5_HH(c, d, a, b, x[k + 7], S33, 0xF6BB4B60);
          b = md5_HH(b, c, d, a, x[k + 10], S34, 0xBEBFBC70);
          a = md5_HH(a, b, c, d, x[k + 13], S31, 0x289B7EC6);
          d = md5_HH(d, a, b, c, x[k + 0], S32, 0xEAA127FA);
          c = md5_HH(c, d, a, b, x[k + 3], S33, 0xD4EF3085);
          b = md5_HH(b, c, d, a, x[k + 6], S34, 0x4881D05);
          a = md5_HH(a, b, c, d, x[k + 9], S31, 0xD9D4D039);
          d = md5_HH(d, a, b, c, x[k + 12], S32, 0xE6DB99E5);
          c = md5_HH(c, d, a, b, x[k + 15], S33, 0x1FA27CF8);
          b = md5_HH(b, c, d, a, x[k + 2], S34, 0xC4AC5665);
          a = md5_II(a, b, c, d, x[k + 0], S41, 0xF4292244);
          d = md5_II(d, a, b, c, x[k + 7], S42, 0x432AFF97);
          c = md5_II(c, d, a, b, x[k + 14], S43, 0xAB9423A7);
          b = md5_II(b, c, d, a, x[k + 5], S44, 0xFC93A039);
          a = md5_II(a, b, c, d, x[k + 12], S41, 0x655B59C3);
          d = md5_II(d, a, b, c, x[k + 3], S42, 0x8F0CCC92);
          c = md5_II(c, d, a, b, x[k + 10], S43, 0xFFEFF47D);
          b = md5_II(b, c, d, a, x[k + 1], S44, 0x85845DD1);
          a = md5_II(a, b, c, d, x[k + 8], S41, 0x6FA87E4F);
          d = md5_II(d, a, b, c, x[k + 15], S42, 0xFE2CE6E0);
          c = md5_II(c, d, a, b, x[k + 6], S43, 0xA3014314);
          b = md5_II(b, c, d, a, x[k + 13], S44, 0x4E0811A1);
          a = md5_II(a, b, c, d, x[k + 4], S41, 0xF7537E82);
          d = md5_II(d, a, b, c, x[k + 11], S42, 0xBD3AF235);
          c = md5_II(c, d, a, b, x[k + 2], S43, 0x2AD7D2BB);
          b = md5_II(b, c, d, a, x[k + 9], S44, 0xEB86D391);
          a = md5_AddUnsigned(a, AA);
          b = md5_AddUnsigned(b, BB);
          c = md5_AddUnsigned(c, CC);
          d = md5_AddUnsigned(d, DD);
        }
        return (md5_WordToHex(a) + md5_WordToHex(b) + md5_WordToHex(c) + md5_WordToHex(d)).toLowerCase();
      }
      module.exports = {
        md5: md5
      }