PHP实现简单鉴权的示例代码

$params = $_GET; // 假设请求参数在GET中
$key = 'your_secret_key'; // 替换为实际的密钥
ksort($params); // 对参数按照键名进行排序
$signStr = '';
foreach ($params as $k => $v) {
    $signStr .= "{$k}={$v}&";
}
$signStr .= "timestamp={$timestamp}&key={$key}"; // 拼接需要加密的字符串
$sign = md5($signStr); // 使用md5加密生成sign

header('X-Auth-Key: your_key');
header('X-Auth-Sign: ' . $sign);
header('X-Auth-Timestamp: ' . $timestamp);

<?php
function generateSign($params, $timestamp, $key)
{
    ksort($params); // 对参数按照键名进行排序
    $signStr = '';
    foreach ($params as $k => $v) {
        $signStr .= "{$k}={$v}&";
    }
    $signStr .= "timestamp={$timestamp}&key={$key}"; // 拼接需要加密的字符串
    $sign = md5($signStr); // 使用md5加密生成sign
    return $sign;
}

function addAuthHeaders($key, $sign, $timestamp)
{
    header('X-Auth-Key: ' . $key);
    header('X-Auth-Sign: ' . $sign);
    header('X-Auth-Timestamp: ' . $timestamp);
}

// 假设请求参数在GET中
$params = $_GET;
$key = 'your_secret_key'; // 替换为实际的密钥
$timestamp = time(); // 获取当前时间戳

$sign = generateSign($params, $timestamp, $key);
addAuthHeaders($key, $sign, $timestamp);

// 其他业务逻辑
// ...
?>

<?php
function verifySign($params, $timestamp, $key, $receivedSign)
{
    ksort($params); // 对参数按照键名进行排序
    $signStr = '';
    foreach ($params as $k => $v) {
        $signStr .= "{$k}={$v}&";
    }
    $signStr .= "timestamp={$timestamp}&key={$key}"; // 拼接需要加密的字符串
    $sign = md5($signStr); // 使用md5加密生成sign
    return $sign === $receivedSign;
}

// 假设接收到的请求header中有以下三个值
$receivedKey = $_SERVER['HTTP_X_AUTH_KEY'];
$receivedSign = $_SERVER['HTTP_X_AUTH_SIGN'];
$receivedTimestamp = $_SERVER['HTTP_X_AUTH_TIMESTAMP'];

$key = 'your_secret_key'; // 替换为实际的密钥

// 假设请求参数在GET中
$params = $_GET;

if (verifySign($params, $receivedTimestamp, $key, $receivedSign)) {
    echo '鉴权通过';
    // 鉴权通过，继续处理业务逻辑
    // ...
} else {
    echo '鉴权失败';
    // 鉴权失败，可以返回错误信息或进行其他处理
}
?>