From c8a5b922a20efa479da15bb4c8fff337c5881050 Mon Sep 17 00:00:00 2001
From: click33 <2393584716@qq.com>
Date: Sat, 27 Apr 2024 04:52:15 +0800
Subject: [PATCH] =?UTF-8?q?API=20=E8=B0=83=E7=94=A8=E7=AD=BE=E5=90=8D?=
 =?UTF-8?q?=E6=A0=A1=E9=AA=8C=E6=97=B6=EF=BC=8C=E9=99=90=E5=AE=9A=E5=8F=82?=
 =?UTF-8?q?=E4=B8=8E=E7=AD=BE=E5=90=8D=E7=9A=84=E5=8F=82=E6=95=B0=E5=88=97?=
 =?UTF-8?q?=E8=A1=A8=EF=BC=8C=E6=9B=B4=E5=AE=89=E5=85=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../main/java/cn/dev33/satoken/sso/SaSsoProcessor.java   | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/sa-token-plugin/sa-token-sso/src/main/java/cn/dev33/satoken/sso/SaSsoProcessor.java b/sa-token-plugin/sa-token-sso/src/main/java/cn/dev33/satoken/sso/SaSsoProcessor.java
index 23d538d8..083775b8 100644
--- a/sa-token-plugin/sa-token-sso/src/main/java/cn/dev33/satoken/sso/SaSsoProcessor.java
+++ b/sa-token-plugin/sa-token-sso/src/main/java/cn/dev33/satoken/sso/SaSsoProcessor.java
@@ -140,7 +140,8 @@ public class SaSsoProcessor {
 		String sloCallback = req.getParam(paramName.ssoLogoutCall);
 
 		// 2、校验签名
-		ssoTemplate.getSignTemplate().checkRequest(req);
+		ssoTemplate.getSignTemplate().checkRequest(req,
+				paramName.client, paramName.ticket, paramName.ssoLogoutCall);
 
 		// 3、校验ticket，获取 loginId
 		Object loginId = ssoTemplate.checkTicket(ticket, client);
@@ -210,7 +211,7 @@ public class SaSsoProcessor {
 		String loginId = req.getParam(paramName.loginId);
 		
 		// step.1 校验签名 
-		ssoTemplate.getSignTemplate().checkRequest(req);
+		ssoTemplate.getSignTemplate().checkRequest(req, paramName.loginId);
 		
 		// step.2 单点注销 
 		ssoTemplate.ssoLogout(loginId);
@@ -390,8 +391,10 @@ public class SaSsoProcessor {
 		// 获取参数 
 		String loginId = req.getParamNotNull(paramName.loginId);
 		
+		// 校验参数签名
+		ssoTemplate.getSignTemplate().checkRequest(req, paramName.loginId);
+
 		// 注销当前应用端会话
-		ssoTemplate.getSignTemplate().checkRequest(req);
 		stpLogic.logout(loginId);
 		
 		// 响应