频道和机器人如果没有密钥，不允许使用api

2020-10-06 12:14:07 +08:00
parent 6388f1b89c
commit 2538a6ca68
2 changed files with 8 additions and 0 deletions
@@ -75,6 +75,10 @@ abstract public class ChannelAction extends Action {
        if (channelInfo == null) {
            return ErrorCode.INVALID_PARAMETER;
        }
+        
+        if (StringUtil.isNullOrEmpty(channelInfo.getSecret())) {
+            return ErrorCode.ERROR_CODE_NOT_RIGHT;
+        }

        String str = nonce + "|" + channelInfo.getSecret() + "|" + timestamp;
        String localSign = DigestUtils.sha1Hex(str);
@@ -80,6 +80,10 @@ abstract public class RobotAction extends Action {
            return ErrorCode.ERROR_CODE_NOT_EXIST;
        }

+        if (StringUtil.isNullOrEmpty(robot.getSecret())) {
+            return ErrorCode.ERROR_CODE_NOT_RIGHT;
+        }
+
        String str = nonce + "|" + robot.getSecret() + "|" + timestamp;
        String localSign = DigestUtils.sha1Hex(str);
        return localSign.equals(sign) ? ErrorCode.ERROR_CODE_SUCCESS : ErrorCode.ERROR_CODE_AUTH_FAILURE;