微信认证signature timestamp nonce echostr

摘要: 微信认证

微信认证原理

2.填写服务器配置

3.验证服务器地址的有效性,验证原理,Token, timestamp, nonce三个参数按照字典排序,拼接成string,然后判断是否和signature相等

4.依据接口文档实现业务逻辑

package com.xp.cn.servlet;

import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.io.PrintWriter;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Arrays;
import java.util.logging.Logger;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import net.sf.json.JSONObject;
import net.sf.json.xml.XMLSerializer;

public class WeiXinParamServlet extends HttpServlet{

private Logger log =Logger.getLogger(this.getClass().getName());
private static final long serialVersionUID = 1L;
private   String Token;
private   String echostr;
@Override
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
connect(request,response);
}

@Override
protected void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
message(request,response);
}

@Override
public void init() throws ServletException {
Token="xp******************";
}

/**
*@author xp
*@desc 接入连接生效验证</p>
*/
private void connect(HttpServletRequest request,HttpServletResponse response) throws ServletException, IOException{
log.info("RemoteAddr: "+ request.getRemoteAddr());
log.info("QueryString: "+ request.getQueryString());
if(!accessing(request, response)){
log.info("服务器接入失败.......");
return ;
}
String echostr=getEchostr();
if(echostr!=null && !"".equals(echostr)){
log.info("服务器接入生效..........");
response.getWriter().print(echostr);//完成相互认证
}
}
/**
* @author xp
* Date 2013-04-19
* @desc用来接收微信公众平台的验证
*/
private boolean accessing(HttpServletRequest request, HttpServletResponse response)throws ServletException, IOException {
//微信加密签名，signature结合了开发者填写的token参数和请求中的timestamp参数、nonce参数。
String signature = request.getParameter("signature");//微信加密签名
String timestamp = request.getParameter("timestamp");//时间戳
String nonce = request.getParameter("nonce");//随机数
String echostr = request.getParameter("echostr");//随机数字符串

if(isEmpty(signature)){
return false;
}
if(isEmpty(timestamp)){
return false;
}
if(isEmpty(nonce)){
return false;
}
if(isEmpty(echostr)){
return false;
}
String[] ArrTmp = { Token, timestamp, nonce };
Arrays.sort(ArrTmp);
StringBuffer sb = new StringBuffer();
for (int i = 0; i < ArrTmp.length; i++) {
sb.append(ArrTmp[i]);
}
String pwd = Encrypt(sb.toString());
//pwd 8052946b7c82d34982bcfcf04ddaa065917dd33f
//signature 8052946b7c82d34982bcfcf04ddaa065917dd33f

log.info("signature:"+signature+"timestamp:"+timestamp+"nonce:"+nonce+"pwd:"+pwd+"echostr:"+echostr);

if(trim(pwd).equals(trim(signature))){
this.echostr =echostr;
return true;
}else{
return false;
}
}
private String Encrypt(String strSrc) {
MessageDigest md = null;
String strDes = null;

byte[] bt = strSrc.getBytes();
try {
md = MessageDigest.getInstance("SHA-1");
md.update(bt);
strDes = bytes2Hex(md.digest()); //to HexString
} catch (NoSuchAlgorithmException e) {
System.out.println("Invalid algorithm.");
return null;
}
return strDes;
}

public String bytes2Hex(byte[] bts) {
String des = "";
String tmp = null;
for (int i = 0; i < bts.length; i++) {
tmp = (Integer.toHexString(bts[i] & 0xFF));
if (tmp.length() == 1) {
des += "0";
}
des += tmp;
}
return des;
}

public String getEchostr(){
return echostr;
}
/**
*@author xp
*@desc XML组装组件</p>
*/
private void message(HttpServletRequest request,HttpServletResponse response) throws ServletException, IOException{

InputStream is = request.getInputStream();
// 取HTTP请求流长度
int size = request.getContentLength();
// 用于缓存每次读取的数据
byte[] buffer = new byte[size];
// 用于存放结果的数组
byte[] xmldataByte = new byte[size];
int count = 0;
int rbyte = 0;
// 循环读取
while (count < size) {
// 每次实际读取长度存于rbyte中
rbyte = is.read(buffer);
for(int i=0;i<rbyte;i++) {
xmldataByte[count + i] = buffer[i];
}
count += rbyte;
}
is.close();
String requestStr = new String(xmldataByte, "UTF-8");

try{
manageMessage(requestStr,request,response);
}catch(Exception e){
e.printStackTrace();
}

}

/**
* @author xp
* @param
* @desc 业务转发组件
*
*/
private void  manageMessage(String requestStr,HttpServletRequest request,HttpServletResponse response)throws ServletException,IOException{
String responseStr;
try {
XMLSerializer xmlSerializer=new XMLSerializer();
JSONObject jsonObject =(JSONObject) xmlSerializer.read(requestStr);
String event =jsonObject.getString("Event");
String msgtype =jsonObject.getString("MsgType");
if("CLICK".equals(event) && "event".equals(msgtype)){ //菜单click事件
String eventkey =jsonObject.getString("EventKey");
if("hytd_001".equals(eventkey)){ // hytd_001 这是好友团队按钮的标志值
jsonObject.put("Content", "欢迎使用好友团队菜单click按钮.");
}

}
responseStr =creatRevertText(jsonObject);//创建XML
log.info("responseStr:"+responseStr);
OutputStream os =response.getOutputStream();
os.write(responseStr.getBytes("UTF-8"));
}   catch (Exception e) {
e.printStackTrace();
}

}
private String creatRevertText(JSONObject jsonObject){
StringBuffer revert =new StringBuffer();
revert.append("<xml>");
revert.append("<ToUserName><![CDATA["+jsonObject.get("ToUserName")+"]]></ToUserName>");
revert.append("<FromUserName><![CDATA["+jsonObject.get("FromUserName")+"]]></FromUserName>");
revert.append("<CreateTime>"+jsonObject.get("CreateTime")+"</CreateTime>");
revert.append("<MsgType><![CDATA[text]]></MsgType>");
revert.append("<Content><![CDATA["+jsonObject.get("Content")+"]]></Content>");
revert.append("<FuncFlag>0</FuncFlag>");
revert.append("</xml>");
return revert.toString();
}

private boolean isEmpty(String str){
return null ==str || "".equals(str) ? true :false;
}

private String trim(String str){
return null !=str  ? str.trim() : str;
}

}