chose: cancel the assignment and judge later (zeromicro#1359)

Co-authored-by: charliecen <chq@abierr.com>
ricktian1226 · Dec 22, 2021 · d5e4933 · d5e4933
1 parent 6f1d273
commit d5e4933
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/rest/internal/security/contentsecurity.go b/rest/internal/security/contentsecurity.go
@@ -119,15 +119,20 @@ func VerifySignature(r *http.Request, securityHeader *ContentSecurityHeader, tol
 	}, "\n")
 	actualSignature := codec.HmacBase64(securityHeader.Key, signContent)
 
-	passed := securityHeader.Signature == actualSignature
+	/*passed := securityHeader.Signature == actualSignature
 	if !passed {
 		logx.Infof("signature different, expect: %s, actual: %s",
 			securityHeader.Signature, actualSignature)
 	}
 
 	if passed {
 		return httpx.CodeSignaturePass
+	}*/
+	if securityHeader.Signature == actualSignature {
+		return httpx.CodeSignaturePass
 	}
+	logx.Infof("signature different, expect: %s, actual: %s",
+		securityHeader.Signature, actualSignature)
 
 	return httpx.CodeSignatureInvalidToken
 }