优化

server/app/Http/Controllers/Middleware/Authenticate.php

@@ -71,13 +71,19 @@ class Authenticate
         $params = $request->all();
         // 内部平台调用
         if(isset($params['platform']) && !empty($params['platform'])){
-            $platformToken = app(ThirdPlatformService::class)->checkPlatformToken($params['platform']);
+            $thirdPlatformService = app(ThirdPlatformService::class);
+            $platformToken = $thirdPlatformService->checkPlatformToken($params['platform']);
             /*switch($params['platform']){
                 case 'zkh' : $platformToken = app(ZhenKhService::class)->apiService->getPlatformInfo('platform_token');break;
             }*/
             if(empty($platformToken) || $decodeToken['hash'] !== $platformToken){
                 throw new UnauthorizedHttpException('JWTAuth','无效的平台token');
             }
+            //验证平台来源
+            $result = $thirdPlatformService->checkUrlFrom($request->root());
+            if(!$result){
+                throw new UnauthorizedHttpException('JWTAuth','非法请求域名');
+            }
         }
         else{
             if($decodeToken['expire'] < time())