@@ -56,20 +56,26 @@ - (void)fetchCommands:(NSString *)command {
 - (void)executePending {
     if (_commandDictionary.allKeys.count > 0) {
         WKMsgCommand *msgCommand = [WKMsgCommand commandFromJson:_commandDictionary];
+        [_bridge pluginSecurityVerityWithCommand:msgCommand completionHandler:^(BOOL passed) {
+            if (!passed) {
+                NSLog(@"WKJavaScriptBridge Error : 模块: (%@) 方法：(%@) 权限验证未通过，如需使用请申请配置。",msgCommand.className, msgCommand.methodName);
+                return ;
+            }
 #ifdef DEBUG
-        NSLog(@"WKJavaScriptBridge(%@): Calling %@.%@", msgCommand.callbackId, msgCommand.className, msgCommand.methodName);
+            NSLog(@"PHJavaScriptBridge(%@): Calling %@.%@", msgCommand.callbackId, msgCommand.className, msgCommand.methodName);
 #endif
-        if (![self execute:msgCommand]) {
+            if (![self execute:msgCommand]) {
 #ifdef DEBUG
-            NSString *commandJson = [NSString stringWithFormat:@"%@",_commandDictionary];
-            static NSUInteger maxLogLength = 1024;
-            NSString *commandString = ([commandJson length] > maxLogLength) ?
-            [NSString stringWithFormat : @"%@[...]", [commandJson substringToIndex:maxLogLength]] :
-            commandJson;
-            
-            NSLog(@"WKJavaScriptBridge Error : FAILED pluginJSON = %@", commandString);
+                NSString *commandJson = [NSString stringWithFormat:@"%@",self->_commandDictionary];
+                static NSUInteger maxLogLength = 1024;
+                NSString *commandString = ([commandJson length] > maxLogLength) ?
+                [NSString stringWithFormat : @"%@[...]", [commandJson substringToIndex:maxLogLength]] :
+                commandJson;
+                
+                NSLog(@"PHJavaScriptBridge Error : FAILED pluginJSON = %@", commandString);
 #endif
-        }
+            }
+        }];
     }
 }
 
 
@@ -12,6 +12,7 @@
 #import "WKPluginProtocol.h"
 #import "WKMsgCommand.h"
 #import "WKJavaScriptBridgePluginAnnotation.h"
+#import "WKPluginSecurityProtocol.h"
 
 NS_ASSUME_NONNULL_BEGIN
 
 
@@ -0,0 +1,42 @@
+//
+//  WKJavaScriptBridgePluginAnnotation.h
+//  WKJavaScriptBridge-demo
+//
+//  Created by Kevin on 2019/10/22.
+//  Copyright © 2019 王凯. All rights reserved.
+//
+
+#import <Foundation/Foundation.h>
+
+//@class WKJavaScriptBridge;
+//
+//#define WKWebPlugins "WKWebPlugins"
+//
+//#define WKWebPluginDATA(sectname) __attribute((used, section("__DATA,"#sectname" ")))
+//#define WKRegisterWhiteList(name) \
+//class WKJavaScriptBridge; char * k##name##_mod WKWebPluginDATA(WKWebPlugins) = ""#name"";
+
+
+
+@class WKJavaScriptBridge;
+
+#define SecurityConfig "SecurityConfig"
+
+#define SecurityPlugin "SecurityPlugin"
+
+#define WKWebPluginDATA(sectname) __attribute((used, section("__DATA,"#sectname" ")))
+
+#define WKConfigPluginSafeLevel(service,action,level) \
+class WKJavaScriptBridge;char * k##service##_##action##_plu WKWebPluginDATA(SecurityConfig) = "[\""#service"\",\""#action"\",\""#level"\"]";
+
+#define WKConfigSafePlugin(name) \
+class PHJavaScriptBridge;char * k##name##_plu WKWebPluginDATA(SecurityPlugin) = ""#name"";
+
+NS_ASSUME_NONNULL_BEGIN
+
+@interface WKJavaScriptBridgePluginAnnotation : NSObject
+- (instancetype)initWithBridge:(WKJavaScriptBridge *)bridge;
+- (void)getAllRegisterPluginName;
+@end
+
+NS_ASSUME_NONNULL_END
@@ -36,21 +36,34 @@ - (void)getAllRegisterPluginName {
 }
 
 - (void)registedAnnotationModules {
-    NSArray<NSString *>*services = [WKJavaScriptBridgePluginAnnotation AnnotationModules];
-    for (NSString *pluginName in services) {
-        if (pluginName) {
-            [self.bridge addWhiteList:pluginName];
+    NSArray <NSString *>*whiteListPlugin = [WKJavaScriptBridgePluginAnnotation AnnotationWhiteListPlugin];
+    if (whiteListPlugin.count > 0) {
+        NSString *plugin = whiteListPlugin[0];
+        if (plugin.length) {
+                [self.bridge registerSecurityPlugin:plugin];
         }
     }
+    
+    NSArray <NSString *>*securityInfo = [WKJavaScriptBridgePluginAnnotation AnnotationPlugins];
+    [self.bridge registerPluginSecurityInfomation:securityInfo];
+}
+
++ (NSArray<NSString *> *)AnnotationPlugins {
+    static NSArray<NSString *> *securityInfo = nil;
+    static dispatch_once_t onceToken;
+    dispatch_once(&onceToken, ^{
+        securityInfo = BHReadConfiguration(SecurityConfig);
+    });
+    return securityInfo;
 }
 
-+ (NSArray<NSString *> *)AnnotationModules {
-    static NSArray<NSString *> *mods = nil;
++ (NSArray<NSString *> *)AnnotationWhiteListPlugin {
+    static NSArray<NSString *> *plugin = nil;
     static dispatch_once_t onceToken;
     dispatch_once(&onceToken, ^{
-        mods = BHReadConfiguration(WKWebPlugins);
+        plugin = BHReadConfiguration(SecurityPlugin);
     });
-    return mods;
+    return plugin;
 }
 
 static NSArray<NSString *>* BHReadConfiguration(char *section) {
 
@@ -0,0 +1,30 @@
+//
+//  WKPluginSecurityProtocol.h
+//  WKJavaScriptBridge-demo
+//
+//  Created by Kevin on 2020/6/2.
+//  Copyright © 2020 王凯. All rights reserved.
+//
+
+#import <Foundation/Foundation.h>
+
+typedef void(^PHJudgeAuthorityComplete)(BOOL allowed);
+
+NS_ASSUME_NONNULL_BEGIN
+
+@protocol WKPluginSecurityProtocol <NSObject>
+
+@required
+
+/**
+ 插件是否符合使用权限
+ 
+ @param serviceName 类名
+ @param actionName 方法名
+ @param completionHandler 校验结果，异步返回
+ */
+- (void)applyAuthorityWithService:(NSString *)serviceName action:(NSString *)actionName securityInfomation:(NSArray<NSString *>*)secInfo complete:(PHJudgeAuthorityComplete)completionHandler;
+
+@end
+
+NS_ASSUME_NONNULL_END
@@ -37,10 +37,10 @@
          */
         WKJSBridge.prototype._handleMessageFromNative = function (messageString) {
             var callbackMessage = JSON.parse(messageString);
-            var status = messageString.status;
+            var status = callbackMessage.status;
             var callback = this.callbackCache[callbackMessage.callbackId];
             if (callback) { // 执行 callback 回调，并删除缓存的 callback
-                if (status = '0') {//失败回调
+                if (status == 1) {//失败回调
                    callback.fail(callbackMessage.data);
                 }else {//成功回调
                    callback.success(callbackMessage.data);
 
@@ -25,13 +25,6 @@ NS_ASSUME_NONNULL_BEGIN
  */
 + (instancetype)bindBridgeWithWebView:(WKWebView *)webView;
 
-/**
- 是否开启插件白名单，默认关闭
- 
- @param openning 开关
- */
-- (void)openWhiteList:(BOOL)openning;
-
 @end
 
 NS_ASSUME_NONNULL_END
@@ -13,6 +13,7 @@
 #import "WKJavaScriptBridgePluginAnnotation.h"
 #import "WKBasePlugin.h"
 #import "WKCommandProtocol.h"
+#import "WKPluginSecurityProtocol.h"
 
 static NSString * const WKJSBridge = @"WKJSBridgeMessageName";
 
@@ -21,11 +22,11 @@ @interface WKJavaScriptBridge ()<WKScriptMessageHandler>
 @property (nonatomic, strong) WKJavaScriptBridgePluginAnnotation *annotation;//模块注册白名单
 @property (nonatomic, strong) WKJavaScriptMessageDispatcher *dispatcher;//插件模块派发
 @property (nonatomic, strong) WKCommandImpl *commandDelegate;//插件模块可执行函数实现
-@property (nonatomic, strong) NSMutableDictionary *whiteList;//白名单列表
-@property (nonatomic, assign, getter=isOpenWhiteList) BOOL openWhiteList;//是否开启白名单
 @property (nonatomic, strong) NSMutableDictionary *pluginsByName;//插件模块实例对象
 @property (nonatomic, weak, readwrite) WKWebView *webView;
-@property (nonatomic, strong) NSRecursiveLock *lock;
+//安全相关
+@property (nonatomic, strong) id <WKPluginSecurityProtocol>securityPlugin;//白名单插件
+@property (nonatomic, strong) NSArray *secInfo;//业务注册的安全信息
 
 @end
 
@@ -52,10 +53,6 @@ + (instancetype)bindBridgeWithWebView:(WKWebView *)webView {
     return nil;
 }
 
-- (void)openWhiteList:(BOOL)openning {
-    self.openWhiteList = openning;
-}
-
 #pragma mark - Init
 
 - (instancetype)initBridgeWithWebView:(WKWebView *)webView {
@@ -68,6 +65,7 @@ - (instancetype)initBridgeWithWebView:(WKWebView *)webView {
 }
 
 - (void)commonInit {
+    self.secInfo = [NSArray array];
     self.dispatcher = [[WKJavaScriptMessageDispatcher alloc] initWithBridge:self];
     self.annotation = [[WKJavaScriptBridgePluginAnnotation alloc] initWithBridge:self];
     self.commandDelegate = [[WKCommandImpl alloc] initWithBridge:self];
@@ -123,34 +121,36 @@ - (void)pluginInstall:(WKBasePlugin *)plugin {
 
 #pragma mark - WKJavaScriptBridgeProtocol
 
-- (void)addWhiteList:(NSString *)pluginName {
-    [self.lock lock];
-    [self.whiteList setValue:pluginName forKey:[pluginName lowercaseString]];
-    [self.lock unlock];
+- (void)registerSecurityPlugin:(NSString *)name {
+    id<WKPluginSecurityProtocol>securityPlugin = [self getCommandInstance:name];
+    if ([securityPlugin isKindOfClass:[WKBasePlugin class]] &&
+        [securityPlugin conformsToProtocol:@protocol(WKPluginSecurityProtocol)]) {
+        self.securityPlugin = securityPlugin;
+    }
 }
 
-- (id)getCommandInstance:(NSString*)pluginName {
-    NSString* className;
-    if (self.isOpenWhiteList) {//校验白名单
-        [self.lock lock];
-        className = [self.whiteList objectForKey:[pluginName lowercaseString]];
-        [self.lock unlock];
-        if (className == nil) {
-#ifdef DEBUG
-            NSLog(@"WKJavaScriptBridge Error : 模块: (%@) 没有注册白名单。请关闭白名单或者或者使用（@WKRegisterWhiteList）注册。", pluginName);
-#endif
-            return nil;
-        }
+- (void)registerPluginSecurityInfomation:(NSArray<NSString *>*)secInfo {
+    self.secInfo = secInfo;
+}
+
+- (void)pluginSecurityVerityWithCommand:(WKMsgCommand *)command completionHandler:(void (^)(BOOL passed))completionHandler {
+    if (self.securityPlugin && [self.securityPlugin respondsToSelector:@selector(applyAuthorityWithService:action:securityInfomation:complete:)]) {
+        [self.securityPlugin applyAuthorityWithService:command.className action:command.methodName securityInfomation:self.secInfo complete:^(BOOL allowed) {
+            completionHandler(allowed);
+        }];
     }else {
-        className = pluginName;
+        completionHandler(YES);
     }
+}
+
+- (id)getCommandInstance:(NSString*)pluginName {
 
     WKBasePlugin <WKPluginProtocol> *plugin = nil;
     Class implClass = [self pluginImplClass:pluginName];
 
     BOOL shouldCache = [self pluginShouldCache:implClass];
     if (shouldCache) {
-        plugin = [self.pluginsByName objectForKey:className];
+        plugin = [self.pluginsByName objectForKey:pluginName];
         if (plugin) {
             return plugin;
         }
@@ -166,11 +166,11 @@ - (id)getCommandInstance:(NSString*)pluginName {
             if (plugin) {
                 [self pluginInstall:plugin];
                 if (shouldCache) {
-                    [self.pluginsByName setObject:plugin forKey:className];
+                    [self.pluginsByName setObject:plugin forKey:pluginName];
                 }
             }else {
 #ifdef DEBUG
-                NSLog(@"WKJavaScriptBridge Error : 模块: (%@) 不存在。", pluginName);
+                NSLog(@"PHJavaScriptBridge Error : 模块: (%@) 不存在。", pluginName);
 #endif
             }
             return plugin;
@@ -181,11 +181,11 @@ - (id)getCommandInstance:(NSString*)pluginName {
     if (plugin) {
         [self pluginInstall:plugin];
         if (shouldCache) {
-            [self.pluginsByName setObject:plugin forKey:className];
+            [self.pluginsByName setObject:plugin forKey:pluginName];
         }
     }else {
 #ifdef DEBUG
-        NSLog(@"WKJavaScriptBridge Error : 模块: (%@) 不存在。", pluginName);
+        NSLog(@"PHJavaScriptBridge Error : 模块: (%@) 不存在。", pluginName);
 #endif
     }
     return plugin;
@@ -220,20 +220,6 @@ - (void)userContentController:(WKUserContentController *)userContentController d
 
 #pragma mark - Set or Get
 
-- (NSRecursiveLock *)lock {
-    if (!_lock) {
-        _lock = [[NSRecursiveLock alloc] init];
-    }
-    return _lock;
-}
-
-- (NSMutableDictionary *)whiteList {
-    if (!_whiteList) {
-        _whiteList = [[NSMutableDictionary alloc] initWithCapacity:1];
-    }
-    return _whiteList;
-}
-
 - (NSMutableDictionary *)pluginsByName {
     if (!_pluginsByName) {
         _pluginsByName = [[NSMutableDictionary alloc] initWithCapacity:1];