composer/php-internal-api-client
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add docker ip

Browse Source
This commit is contained in:
dongwei 2019-02-28 14:20:42 +08:00
parent 436a084581
commit 445f9dd037
2 changed files with 92 additions and 65 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

117
src/Middleware/InternalApi.php
View File

@ -10,68 +10,77 @@ use function PdInternalApi\sign;
class InternalApi class InternalApi
{ {
public function __construct() public function __construct()
{ {
app()->configure('internal_api'); app()->configure('internal_api');
} }
private function isClientIPPermitted ($ip) { private function isClientIPPermitted($ip)
if (!app()->environment('production', 'staging')) { {
return true; if (!app()->environment('production', 'staging')) {
} return true;
if (Str::startsWith($ip, [ }
'127.0.0.', '192.168.', '10.0.', if (Str::startsWith($ip, [
])) { '127.0.0.1',
return true; //局域网
} '192.168.',
return false; //vpc
} '10.0.',
//pod network
'172.20.',
//北京办公区
'172.16.'
])) {
return true;
}
return false;
}
/** /**
* Handle an incoming request. * Handle an incoming request.
* *
* @param \Illuminate\Http\Request $request * @param \Illuminate\Http\Request $request
* @param \Closure $next * @param \Closure $next
* @return mixed * @return mixed
*/ */
public function handle($request, Closure $next) public function handle($request, Closure $next)
{ {
$ip = $request->getClientIp(); $ip = $request->getClientIp();
if (!$this->isClientIPPermitted($ip)) { if (!$this->isClientIPPermitted($ip)) {
return new JsonResponse("$ip is forbidden", 403); return new JsonResponse("$ip is forbidden", 403);
} }
$params = $request->all(); $params = $request->all();
if (empty($params['appid'])) { if (empty($params['appid'])) {
$data = ['error' => 'require appid',]; $data = ['error' => 'require appid',];
return new JsonResponse($data, 403); return new JsonResponse($data, 403);
} }
if (empty($params['timestamp'])) { if (empty($params['timestamp'])) {
$data = ['error' => 'require time',]; $data = ['error' => 'require time',];
return new JsonResponse($data, 403); return new JsonResponse($data, 403);
} elseif (intval($params['timestamp']) + 60 < time()) { } else if (intval($params['timestamp']) + 60 < time()) {
$data = ['error' => 'sign expired',]; $data = ['error' => 'sign expired',];
return new JsonResponse($data, 403); return new JsonResponse($data, 403);
} }
$key = config('internal_api.server.' . $params['appid']); $key = config('internal_api.server.' . $params['appid']);
if (empty($key)) { if (empty($key)) {
$data = ['error' => 'config error',]; $data = ['error' => 'config error',];
return new JsonResponse($data, 403); return new JsonResponse($data, 403);
} }
$sign = sign($params, $key); $sign = sign($params, $key);
if ($sign != $params['sign']) { if ($sign != $params['sign']) {
$data = [ $data = [
'error' => 'sign error', 'error' => 'sign error',
]; ];
return new JsonResponse($data, 403); return new JsonResponse($data, 403);
} }
return $next($request); return $next($request);
} }
} }

18
src/ServiceProvider.php
View File

@ -2,8 +2,26 @@
namespace PdInternalApi; namespace PdInternalApi;
use Illuminate\Http\Request;
class ServiceProvider extends \Illuminate\Support\ServiceProvider class ServiceProvider extends \Illuminate\Support\ServiceProvider
{ {
public function boot(){
Request::setTrustedProxies([
//pod network
'172.20.0.0/16',
//vpc
'10.0.0.0/16',
//local
'127.0.0.1',
//北京办公区
'172.16.0.0/16',
//aliyun slb
'100.116.0.0/16',
], Request::HEADER_X_FORWARDED_ALL);
}
/** /**
* Register any application services. * Register any application services.
* *