JDK Base64編解碼1.7和1.8的坑

場景

• 對接一個第三方api接口，其中簽名部分用的是JDK8的編碼。我們線上采用JDK7，導致項目無法編譯
• 替換編解碼部分為1.7的代碼，然后簽名又不對
• 所以坑就在這里，結論，1.7的編解碼有換行符導致簽名失敗

貼代碼

import sun.misc.BASE64Decoder;
import java.security.KeyFactory;
import java.security.PrivateKey;
import java.security.Signature;
import java.security.spec.PKCS8EncodedKeySpec;
import java.util.Base64;

public class Base64EncodeDemo { public static final String CHARSET_UTF_8 = "UTF-8"; public static final String ALGORITHM_RSA = "RSA"; public static final String ALGORITHM_SHA1_WITH_RSA = "SHA1withRSA"; private static String signWithRSAJdk7(String source, String privateKey, String algorithm) { String result = null; try { // 修改為 1.7語法 // PKCS8EncodedKeySpec spec = new PKCS8EncodedKeySpec(Base64.getDecoder().decode(privateKey)); PKCS8EncodedKeySpec spec = new PKCS8EncodedKeySpec(new BASE64Decoder().decodeBuffer(privateKey)); KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM_RSA); PrivateKey pk = keyFactory.generatePrivate(spec); Signature signature = Signature.getInstance(algorithm); signature.initSign(pk); signature.update(source.getBytes(CHARSET_UTF_8)); // 修改為 1.7語法 //result = Base64.getEncoder().encodeToString(signature.sign()); result = new sun.misc.BASE64Encoder().encode(signature.sign()); System.out.println("jdk7解碼簽名換行符去掉前："+result); // 1.7語法需要去掉換行符 這里是重點 result = result.replaceAll("\\n",""); System.out.println("jdk7解碼簽名換行符去掉后："+result); } catch (Exception e) { System.out.println("RSA 簽名出錯！"); e.printStackTrace(); } return result; } private static String signWithRSAJdk8(String source, String privateKey, String algorithm) { String result = null; try { PKCS8EncodedKeySpec spec = new PKCS8EncodedKeySpec(Base64.getDecoder().decode(privateKey)); KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM_RSA); PrivateKey pk = keyFactory.generatePrivate(spec); Signature signature = Signature.getInstance(algorithm); signature.initSign(pk); signature.update(source.getBytes(CHARSET_UTF_8)); result = Base64.getEncoder().encodeToString(signature.sign()); System.out.println("jdk8解碼簽名："+result); } catch (Exception e) { System.out.println("RSA 簽名出錯！"); e.printStackTrace(); } return result; } public static void main(String[] args) throws Exception { String source = "app_id=89be0bb80a7a4e219b4011168c478f0c&biz_content={\"user_id\":\"17681865480\",\"idcard\":\"09612707419874225X\",\"name\":\"張三\",\"mobile\":\"17681865480\"}&format=JSON&method=moxie.api.risk.magicwand3.enhance-multi-info&sign_type=RSA&timestamp=1567593061041&version=1.0"; String privatekey= "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"; String sign7 = signWithRSAJdk7(source, privatekey, ALGORITHM_SHA1_WITH_RSA); String sign8 = signWithRSAJdk8(source, privatekey, ALGORITHM_SHA1_WITH_RSA); // System.out.println(msg); System.out.println("--------------"); System.out.println(sign7.equals(sign8)); } } 

• 運行結果:

jdk7解碼簽名換行符去掉前：QXEvl/xDLanJ6GfB+eeZbawiKZwF3m1HzUr6r0GIk7DtWzI1GlOLt2au5aeqiIREwEi2sErRU/gU HCJFH1h1SfhADsw1i0xEC3C9lBU+SQCy8asEYZKnLMEsodVB2XhpBo0VkbR2dQad06kfPZoQ8qD5 jTs/3xVJswATiGIVw7tGZaTO0VUwTt2v091MRMq3L80dg765QH2JMc/VzVoVCbYzcElzdwi9tNme zkzqtRnWIwCkc6gwfTsr+3mh4zIfyeB78/vTfdY84tYxh0Lxy1PXKP4SBUktaGUvuKDDsnycpoMK hCJU/WgCsmBe4Aj6+4IbnK2gUSMBOba06Cm6cA== jdk7解碼簽名換行符去掉后：QXEvl/xDLanJ6GfB+eeZbawiKZwF3m1HzUr6r0GIk7DtWzI1GlOLt2au5aeqiIREwEi2sErRU/gUHCJFH1h1SfhADsw1i0xEC3C9lBU+SQCy8asEYZKnLMEsodVB2XhpBo0VkbR2dQad06kfPZoQ8qD5jTs/3xVJswATiGIVw7tGZaTO0VUwTt2v091MRMq3L80dg765QH2JMc/VzVoVCbYzcElzdwi9tNmezkzqtRnWIwCkc6gwfTsr+3mh4zIfyeB78/vTfdY84tYxh0Lxy1PXKP4SBUktaGUvuKDDsnycpoMKhCJU/WgCsmBe4Aj6+4IbnK2gUSMBOba06Cm6cA== jdk8解碼簽名：QXEvl/xDLanJ6GfB+eeZbawiKZwF3m1HzUr6r0GIk7DtWzI1GlOLt2au5aeqiIREwEi2sErRU/gUHCJFH1h1SfhADsw1i0xEC3C9lBU+SQCy8asEYZKnLMEsodVB2XhpBo0VkbR2dQad06kfPZoQ8qD5jTs/3xVJswATiGIVw7tGZaTO0VUwTt2v091MRMq3L80dg765QH2JMc/VzVoVCbYzcElzdwi9tNmezkzqtRnWIwCkc6gwfTsr+3mh4zIfyeB78/vTfdY84tYxh0Lxy1PXKP4SBUktaGUvuKDDsnycpoMKhCJU/WgCsmBe4Aj6+4IbnK2gUSMBOba06Cm6cA== -------------- true 

結論

• JDK1.7 編解碼

編碼 new sun.misc.BASE64Encoder().encode(byte[] array) 解碼 new BASE64Decoder().decodeBuffer(String str) 

• JDK1.8 編解碼

編碼 Base64.getEncoder().encodeToString(byte[] array) 解碼 Base64.getDecoder().decode(String str) 

• 注意換行這個坑
• 1.8 變單例，線程安全提升了