q-koa 13.8.34 → 13.8.35
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -95,10 +95,8 @@ const validateUnionNotifySign = ({ notifyData, signType, publicKey, md5Key }) =>
|
|
|
95
95
|
if (!notifyData || !notifyData.sign) return false
|
|
96
96
|
const params = { ...notifyData }
|
|
97
97
|
const sign = String(params.sign)
|
|
98
|
+
// 通联签名规则：仅剔除 sign 字段本身，signtype/signType 仍保留在原串里
|
|
98
99
|
delete params.sign
|
|
99
|
-
// 通联回调报文字段是全小写 signtype；同时删除大小写两种做防御
|
|
100
|
-
delete params.signType
|
|
101
|
-
delete params.signtype
|
|
102
100
|
|
|
103
101
|
// 通联 buildSignStr：按 ASCII 字典序拼接，跳过空/undefined/null
|
|
104
102
|
const sortedKeys = Object.keys(params).sort()
|