微信小程序消息推送token驗證Java樣例

//校驗微信小程序消息token
public void checkSignature() {
    try {
        String timestamp = null != getPara("timestamp") ? getPara("timestamp") : "";    //時間戳
        String nonce = null != getPara("nonce") ? getPara("nonce") : "";                //隨機字符串
        String signature = null != getPara("signature") ? getPara("signature") : "";    //簽名
        String echostr = null != getPara("echostr") ? getPara("echostr") : "";          //自定義字符串，驗證成功后原樣返回

        String token = "ams2022";       //明文
        String[] tokenArray = new String[]{timestamp, nonce, token};
        Arrays.sort(tokenArray);        //排序
        //排序后的字符串
        StringBuilder sb = new StringBuilder();
        for (String s : tokenArray) {
            sb.append(s);
        }
        String local_signature = HashKit.sha1(String.valueOf(sb)); //sha1加密
        if (local_signature.equals(signature)) {
            renderText(echostr);    //驗證成功，返回echostr給微信服務器
        } else {
            renderText(String.valueOf(false));
        }
    } catch (Exception e) {
        ByteArrayOutputStream bs = new ByteArrayOutputStream();
        e.printStackTrace(new PrintStream(bs));
        renderText(String.valueOf(false));
    }
}

 

1、小程序消息推送配置

2、驗證配置