base-golang/pkg/token/token_url.go

package token

import (
	"crypto/md5"
	"encoding/base64"
	"encoding/hex"
	"errors"
	"fmt"
	"net/url"
	"strings"
)

// UrlSign
// path 请求的路径 (不附带 querystring)
func (t *token) UrlSign(path string, method string, params url.Values) (tokenString string, err error) {
	// 合法的 Methods
	methods := map[string]bool{
		"get":     true,
		"post":    true,
		"put":     true,
		"path":    true,
		"delete":  true,
		"head":    true,
		"options": true,
	}

	methodName := strings.ToLower(method)
	if !methods[methodName] {
		err = errors.New("method param error")
		return
	}

	// Encode() 方法中自带 sorted by key
	sortParamsEncode := params.Encode()

	// 加密字符串规则 path + method + sortParamsEncode + secret
	encryptStr := fmt.Sprintf("%s%s%s%s", path, methodName, sortParamsEncode, t.secret)

	// 对加密字符串进行 md5
	s := md5.New()
	s.Write([]byte(encryptStr))
	md5Str := hex.EncodeToString(s.Sum(nil))

	// 对 md5Str 进行 base64 encode
	tokenString = base64.StdEncoding.EncodeToString([]byte(md5Str))

	return
}