修改

app/Request/ApiRequest.php

@@ -30,12 +30,13 @@ class ApiRequest extends Request
     }
 
     protected function checkSign($params) {
-        if ($params['timestamp'] < time() - 6000) {
-            throw new BusinessException('请求已过期');
-        }
         if (!Signer::verify($params, $this->app->app_key)) {
             throw new BusinessException('验签错误');
         }
+
+        if ($params['timestamp'] < time() - 6000) {
+            throw new BusinessException('请求已过期');
+        }
     }
 
     protected function checkApp($appId) {