95 lines
2.6 KiB
Go
95 lines
2.6 KiB
Go
|
package rongxing
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"crypto"
|
|||
|
|
"crypto/md5"
|
|||
|
|
"crypto/rand"
|
|||
|
|
"crypto/rsa"
|
|||
|
|
"crypto/sha256"
|
|||
|
|
"crypto/x509"
|
|||
|
|
"encoding/base64"
|
|||
|
|
"encoding/hex"
|
|||
|
|
"encoding/pem"
|
|||
|
|
"fmt"
|
|||
|
|
"sort"
|
|||
|
|
"strings"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
// MD5Upper 对明文做 MD5，返回 32 位大写十六进制（入参说明要求大写）。
|
|||
|
|
func MD5Upper(plaintext string) string {
|
|||
|
|
sum := md5.Sum([]byte(strings.TrimSpace(plaintext)))
|
|||
|
|
return strings.ToUpper(hex.EncodeToString(sum[:]))
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// EncodePasswordBase64 将明文密码做 Base64 编码（登录接口要求）。
|
|||
|
|
func EncodePasswordBase64(password string) string {
|
|||
|
|
return base64.StdEncoding.EncodeToString([]byte(password))
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// BuildSignContent 生成登录签名原文：过滤 sign/空值 → 按 key 升序 → key=value&...
|
|||
|
|
func BuildSignContent(params map[string]interface{}) string {
|
|||
|
|
keys := make([]string, 0, len(params))
|
|||
|
|
for k, v := range params {
|
|||
|
|
if strings.EqualFold(k, "sign") || v == nil {
|
|||
|
|
continue
|
|||
|
|
}
|
|||
|
|
keys = append(keys, k)
|
|||
|
|
}
|
|||
|
|
sort.Strings(keys)
|
|||
|
|
|
|||
|
|
parts := make([]string, 0, len(keys))
|
|||
|
|
for _, k := range keys {
|
|||
|
|
parts = append(parts, fmt.Sprintf("%s=%v", k, params[k]))
|
|||
|
|
}
|
|||
|
|
return strings.Join(parts, "&")
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// SignSHA256WithRSA 使用私钥对原文做 SHA256withRSA 签名，返回 Base64。
|
|||
|
|
func SignSHA256WithRSA(content string, privateKey *rsa.PrivateKey) (string, error) {
|
|||
|
|
if privateKey == nil {
|
|||
|
|
return "", fmt.Errorf("私钥为空")
|
|||
|
|
}
|
|||
|
|
hashed := sha256.Sum256([]byte(content))
|
|||
|
|
signed, err := rsa.SignPKCS1v15(rand.Reader, privateKey, crypto.SHA256, hashed[:])
|
|||
|
|
if err != nil {
|
|||
|
|
return "", fmt.Errorf("RSA 签名失败: %w", err)
|
|||
|
|
}
|
|||
|
|
return base64.StdEncoding.EncodeToString(signed), nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// ParsePrivateKey 解析 RSA 私钥（支持 PEM / PKCS#8 / PKCS#1 原始 Base64）。
|
|||
|
|
func ParsePrivateKey(raw string) (*rsa.PrivateKey, error) {
|
|||
|
|
raw = strings.TrimSpace(raw)
|
|||
|
|
if raw == "" {
|
|||
|
|
return nil, fmt.Errorf("私钥为空")
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
var der []byte
|
|||
|
|
if block, _ := pem.Decode([]byte(raw)); block != nil {
|
|||
|
|
der = block.Bytes
|
|||
|
|
} else {
|
|||
|
|
normalized := strings.ReplaceAll(raw, "\n", "")
|
|||
|
|
normalized = strings.ReplaceAll(normalized, "\r", "")
|
|||
|
|
normalized = strings.ReplaceAll(normalized, " ", "")
|
|||
|
|
decoded, err := base64.StdEncoding.DecodeString(normalized)
|
|||
|
|
if err != nil {
|
|||
|
|
return nil, fmt.Errorf("私钥 Base64 解码失败: %w", err)
|
|||
|
|
}
|
|||
|
|
der = decoded
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if key, err := x509.ParsePKCS8PrivateKey(der); err == nil {
|
|||
|
|
rsaKey, ok := key.(*rsa.PrivateKey)
|
|||
|
|
if !ok {
|
|||
|
|
return nil, fmt.Errorf("私钥不是 RSA 类型")
|
|||
|
|
}
|
|||
|
|
return rsaKey, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if key, err := x509.ParsePKCS1PrivateKey(der); err == nil {
|
|||
|
|
return key, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return nil, fmt.Errorf("无法解析 RSA 私钥（需 PKCS#8 或 PKCS#1）")
|
|||
|
|
}
|