微信公眾號開發(一)--驗證服務器地址的Java實現


現在主流上都用php寫微信公眾號后台,其實作為后端語言之一的java也可以實現。

這篇文章將對驗證服務器地址這一步做出實現。

參考資料:1.慕課網-《初識java微信公眾號開發》,2.微信公眾號開發者文檔http://mp.weixin.qq.com/wiki/8/f9a0b8382e0b77d87b3bcc1ce6fbc104.html

如圖,開發者在點擊提交后,微信服務器向公眾號后台服務器發送了四個參數,咱們把這四個參數封裝成一個類,就叫Signature吧

代碼都是myeclipse自動生成的(導包代碼已省略,由於視圖關系丟失了縮進)

public class Signature {
private String signature;
private String timestamp;
private String nonce;
private String echostr;

public Signature() {
super();
// TODO Auto-generated constructor stub
}

public Signature(String signature, String timestamp, String nonce,
String echostr) {
super();
this.signature = signature;
this.timestamp = timestamp;
this.nonce = nonce;
this.echostr = echostr;
}

public String getSignature() {
return signature;
}

public void setSignature(String signature) {
this.signature = signature;
}

public String getTimestamp() {
return timestamp;
}

public void setTimestamp(String timestamp) {
this.timestamp = timestamp;
}

public String getNonce() {
return nonce;
}

public void setNonce(String nonce) {
this.nonce = nonce;
}

public String getEchostr() {
return echostr;
}

public void setEchostr(String echostr) {
this.echostr = echostr;
}

@Override
public String toString() {
return "Signature [signature=" + signature + ", timestamp=" + timestamp
+ ", nonce=" + nonce + ", echostr=" + echostr + "]";
}

}

之后編寫servlet,對四個參數進行接收,new 一個Signarure對象,

public class WeixinServlet extends HttpServlet {

@Override
protected void doGet(HttpServletRequest req, HttpServletResponse resp)
throws ServletException, IOException {

Signature sg = new Signature(req.getParameter("signature"),req.getParameter("timestamp"),
req.getParameter("nonce"),req.getParameter("echostr"));

PrintWriter out = resp.getWriter();
if(CheckUtil.checkSignature(sg)){
out.print(sg.getEchostr());
}

}
}

新建CheckUtil類實現校驗邏輯

public class CheckUtil {

private static final String token = "userwang";

public static boolean checkSignature(Signature sg){

String[] arr = new String[]{token,sg.getTimestamp(),sg.getNonce()};
//排序
Arrays.sort(arr);
//生成字符串
StringBuffer content = new StringBuffer();
for(int i=0;i<arr.length;i++){
content.append(arr[i]);
}

//sha1加密
String temp = getSha1(content.toString());
//比較
return temp.equals(sg.getSignature());
}

//加密算法
public static String getSha1(String str){
if(str == null || str.length()==0){
return null;
}

char hexDigits[] = {'0','1','2','3','4','5','6','7','8','9',
'a','b','c','d','e','f'};
try{
MessageDigest mdTemp = MessageDigest.getInstance("SHA1");
mdTemp.update(str.getBytes("UTF-8"));
byte[] md = mdTemp.digest();
int j = md.length;
char buf[] = new char[j*2];
int k = 0;

for(int i = 0;i<j;i++){
byte byte0 = md[i];
buf[k++] = hexDigits[byte0 >>> 4 & 0xf];
buf[k++] = hexDigits[byte0 & 0xf];
}

return new String(buf);
}catch(Exception e){
return null;
}

}
}

 

在web.xml中完成對servlet的配置之后,這一步基本就完成啦。

另外推薦一個好用的ngrok內網映射工具(站內有使用教程),用於本地調試

www.ngrok.cc

 


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM