[WeChatPay] 签名探测流量

essensoft · Feb 7, 2025 · 4b451cf · 4b451cf
1 parent 58be6a2
commit 4b451cf
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/src/Essensoft.Paylinks.WeChatPay.Client/WeChatPayNotifyClient.cs b/src/Essensoft.Paylinks.WeChatPay.Client/WeChatPayNotifyClient.cs
@@ -11,6 +11,11 @@ public class WeChatPayNotifyClient(IWeChatPayPlatformCertificateManagerFactory c
 {
     public Task<T> ExecuteAsync<T>(WeChatPayHeaders headers, string body, WeChatPayClientOptions options) where T : IWeChatPayNotifyResource
     {
+        if (headers.Signature.StartsWith(WeChatPayConstants.SignTestPrefix)) // 签名探测流量
+        {
+            throw new WeChatPayException("验签失败: 签名探测流量");
+        }
+
         // 验签
         string certPublicKey;
 

diff --git a/src/Essensoft.Paylinks.WeChatPay.Core/WeChatPayConstants.cs b/src/Essensoft.Paylinks.WeChatPay.Core/WeChatPayConstants.cs
@@ -2,5 +2,6 @@ namespace Essensoft.Paylinks.WeChatPay.Core;
 
 public static class WeChatPayConstants
 {
+    public const string SignTestPrefix = "WECHATPAY/SIGNTEST/";
     public const string PublicKeyIdPrefix = "PUB_KEY_ID_";
 }