From 34cbebfd59819e0bbe9e130dec634545ac58b712 Mon Sep 17 00:00:00 2001
From: chenruilong <chenruilong@dcloud.io>
Date: Fri, 24 Feb 2023 15:22:13 +0800
Subject: [PATCH] =?UTF-8?q?fix(uni-id-co):=20requestAuthSecret=20=E7=BC=BA?=
 =?UTF-8?q?=E5=B0=91=E4=B8=BA=E7=A9=BA=E5=88=A4=E6=96=AD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../uniCloud/cloudfunctions/uni-id-co/common/error.js    | 3 ++-
 .../uniCloud/cloudfunctions/uni-id-co/lang/en.js         | 3 ++-
 .../uniCloud/cloudfunctions/uni-id-co/lang/zh-hans.js    | 3 ++-
 .../uni-id-co/middleware/verify-request-sign.js          | 9 +++++++++
 4 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/common/error.js b/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/common/error.js
index d026fe7..cf267de 100644
--- a/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/common/error.js
+++ b/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/common/error.js
@@ -38,7 +38,8 @@ const ERROR = {
   UNBIND_PASSWORD_NOT_EXISTS: 'uni-id-unbind-password-not-exists',
   UNBIND_MOBILE_NOT_EXISTS: 'uni-id-unbind-mobile-not-exists',
   UNSUPPORTED_REQUEST: 'uni-id-unsupported-request',
-  ILLEGAL_REQUEST: 'uni-id-illegal-request'
+  ILLEGAL_REQUEST: 'uni-id-illegal-request',
+  CONFIG_FIELD_REQUIRED: 'uni-id-config-field-required'
 }
 
 function isUniIdError (errCode) {
diff --git a/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/lang/en.js b/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/lang/en.js
index d329d01..6f1dae3 100644
--- a/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/lang/en.js
+++ b/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/lang/en.js
@@ -43,7 +43,8 @@ const sentence = {
   'uni-id-unbind-mobile-not-exists': 'This is the only way to login at the moment, please bind your phone number and then try to unbind',
   'uni-id-unbind-password-not-exists': 'Please set a password first',
   'uni-id-unsupported-request': 'Unsupported request',
-  'uni-id-illegal-request': 'Illegal request'
+  'uni-id-illegal-request': 'Illegal request',
+  'uni-id-config-field-required': 'Config field required: {field}'
 }
 
 module.exports = {
diff --git a/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/lang/zh-hans.js b/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/lang/zh-hans.js
index 3c69c9f..f7ab079 100644
--- a/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/lang/zh-hans.js
+++ b/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/lang/zh-hans.js
@@ -45,7 +45,8 @@ const sentence = {
   'uni-id-unbind-mobile-not-exists': '这是当前唯一登录方式，请绑定手机号后再尝试解绑',
   'uni-id-unbind-password-not-exists': '请先设置密码在尝试解绑',
   'uni-id-unsupported-request': '不支持的请求方式',
-  'uni-id-illegal-request': '非法请求'
+  'uni-id-illegal-request': '非法请求',
+  'uni-id-config-field-required': '缺少配置项: {field}'
 }
 
 module.exports = {
diff --git a/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/middleware/verify-request-sign.js b/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/middleware/verify-request-sign.js
index e695a40..3f5feed 100644
--- a/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/middleware/verify-request-sign.js
+++ b/uni_modules/uni-id-pages/uniCloud/cloudfunctions/uni-id-co/middleware/verify-request-sign.js
@@ -20,6 +20,15 @@ module.exports = function () {
     }
   }
 
+  if (!this.config.requestAuthSecret || typeof this.config.requestAuthSecret !== 'string') {
+    throw {
+      errCode: ERROR.CONFIG_FIELD_REQUIRED,
+      errMsgVal: {
+        field: 'requestAuthSecret'
+      }
+    }
+  }
+
   const timeout = 20 * 1000 // 请求超过20秒不能再请求，防止重放攻击
   const { headers, body: _body } = this.getHttpInfo()
   const { 'uni-id-nonce': nonce, 'uni-id-timestamp': timestamp, 'uni-id-signature': signature } = headers
-- 
GitLab