我需要签署文件,但为此,我需要通过json传递密码和证书路径。
用这个真的安全吗?如何在php配置文件中实现这些数组?所以没有人(外部公众)可以访问数据,我知道php可以做到这一点。
我正在配置一个api,其文档中包含以下内容:
配置API该API配置是通过一个文件,甚至是一个JSON格式的数组完成的。
这个JSON数组包含API知道重要文件所在位置所需的数据,例如数字证书和其他相关信息。
{"atualizacao":"2016-02-02 08:01:21","tpAmb":2,"pathXmlUrlFileNFe":"nfe_ws3_mod55.xml","pathXmlUrlFileCTe":"cte_ws1.xml","pathXmlUrlFileMDFe":"mdfe_ws1.xml","pathXmlUrlFileCLe":"cle_ws1.xml","pathXmlUrlFileNFSe":"","pathNFeFiles":"/MyApp/nfe","pathCTeFiles":"/MyApp/cte","pathMDFeFiles":"/MyApp/mdfe","pathCLeFiles":"/MyApp/cle","pathNFSeFiles":"/MyApp/nfse","pathCertsFiles":"/MyApp/certs/","siteUrl":"http://myapp.local","schemesNFe":"PL_008h2","schemesCTe":"PL_CTE_104","schemesMDFe":"MDFe_100","schemesCLe":"CLe_100","schemesNFSe":"","razaosocial":"Fulano de tal Ltda","siglaUF":"AM","cnpj":"547678524000133","tokenIBPT":"AAAAAAA","tokenNFCe":"GPB0JBWLUR6HWFTVEAS6RJ69GPCROFPBBB8G","tokenNFCeId":"000002","certPfxName":"myapp_2016.pfx","certPassword":"JIO&$@2990_zx","certPhrase":"tajomstvo","aDocFormat":{"format":"P","paper":"A4","southpaw":"1","pathLogoFile":"/MyApp/publico/images/logo.jpg","logoPosition":"L","font":"Times","printer":"hpteste"},"aMailConf":{"mailAuth":"1","mailFrom":"roberto@myapp.local","mailSmtp":"smtp.myapp.local","mailUser":"roberto@myapp.local","mailPass":"heslo$","mailProtocol":"ssl","mailPort":"587","mailFromMail":null,"mailFromName":null,"mailReplayToMail":null,"mailReplayToName":null,"mailImapHost":null,"mailImapPort":null,"mailImapSecurity":null,"mailImapNocerts":null,"mailImapBox":null},"aProxyConf":{"proxyIp":"","proxyPort":"","proxyUser":"","proxyPass":""}}文档没有显示如何实现它,它只是展示了json数组的例子,这个数组也可以在php文件中完成,我想我应该把这个数组放在类似config.json的文件中,并在控制器中调用它,我不知道这个调用是怎么回事,我也不知道我会把它放在哪里,我可以把它放在任何地方,但是我最关心的是需要将个人手指作为密码放在这个矩阵中,json是一个任何人都可以通过浏览器访问的文件,我不知道实现它是否像他们建议的那样合适和安全。这真的是最佳做法吗?
发布于 2020-07-02 03:25:37
如果您在https上发布它,您应该会很好,而且它与承载令牌没有什么不同。如果您在查询字符串中包含将记录在访问日志等内容中的任何内容。
编辑:任何关于安全的问题,都取决于你想去的兔子洞有多深。POST/PUTing数据比使用GET更安全,因为它是如何由服务器处理的。但问题是,服务器、ssl设置等的安全性如何。因此,您最终会根据保持安全的数据的重要性来权衡它的安全性。
https://stackoverflow.com/questions/62604366
复制相似问题