生成sign(签名)，以及校验工具类

野性酷女 2023-10-10 09:54 78阅读 0赞

本文链接： [https://blog.csdn.net/sunzbking/article/details/79790927][https_blog.csdn.net_sunzbking_article_details_79790927]

`生成sign(签名)，以及校验工具类`

package cn.weixiuhui.support.comm.utils; import java.io.IOException; import java.io.UnsupportedEncodingException; import java.security.GeneralSecurityException; import java.security.MessageDigest; import java.util.Date; import java.util.Enumeration; import java.util.HashMap; import java.util.Iterator; import java.util.Map; import java.util.Set; import java.util.TreeSet; import javax.servlet.http.HttpServletRequest; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import cn.weixiuhui.platform.comm.rest.RestCommService; public class SignUtils { private static Logger LOGGER = LoggerFactory.getLogger(SignUtils.class); private static final String secretKeyOfWxh = "e10adc3949ba59abbe56e057f20f883f"; private static final String appidOfWxh = "xxx"; public static void main(String[] args) { //参数签名算法测试例子 HashMap<String, String> signMap = new HashMap<String, String>(); signMap.put( "devid", "BC5549D899ED"); signMap.put( "userId", "1"); signMap.put( "type", "worker"); signMap.put( "name", "中文测试"); System.out.println( "得到签名sign1:"+getSign(signMap,secretKeyOfWxh)); } /** * 唯修汇外部接口签名验证 * @param request * @return */ public static Boolean checkSign(HttpServletRequest request){ Boolean flag= false; String appid = request.getParameter( "appid"); //appid if(!appid.equals(appidOfWxh)){ throw RestCommService.buildBadRequest( "appid错误"); } String sign = request.getParameter( "sign"); //签名 String timestamp = request.getParameter( "timestamp"); //时间戳 //check时间戳的值是否在当前时间戳前后一小时以内 String currTimestamp = String.valueOf( new Date().getTime() / 1000); // 当前时间的时间戳 int currTimestampNum = Integer.parseInt(currTimestamp); int verifyTimestampNum = Integer.parseInt(timestamp); // 时间戳的数值 // 在一小时范围之外，访问已过期 if (Math.abs(verifyTimestampNum - currTimestampNum) > 600) { throw RestCommService.buildBadRequest( "sigin已经过期"); } //检查sigin是否过期 Enumeration<?> pNames = request.getParameterNames(); Map<String, String> params = new HashMap<String, String>(); while (pNames.hasMoreElements()) { String pName = (String) pNames.nextElement(); if( "sign".equals(pName)) continue; String pValue = (String)request.getParameter(pName); params.put(pName, pValue); } if(sign.equals(getSign(params, secretKeyOfWxh))){ flag = true; } return flag; } public static String utf8Encoding(String value, String sourceCharsetName) { try { return new String(value.getBytes(sourceCharsetName), "UTF-8"); } catch (UnsupportedEncodingException e) { throw new IllegalArgumentException(e); } } private static byte[] getMD5Digest(String data) throws IOException { byte[] bytes = null; try { MessageDigest md = MessageDigest.getInstance( "MD5"); bytes = md.digest(data.getBytes( "UTF-8")); } catch (GeneralSecurityException gse) { throw new IOException(gse); } return bytes; } private static String byte2hex(byte[] bytes) { StringBuilder sign = new StringBuilder(); for ( int i = 0; i < bytes.length; i++) { String hex = Integer.toHexString(bytes[i] & 0xFF); if (hex.length() == 1) { sign.append( "0"); } sign.append(hex.toUpperCase()); //sign.append(hex.toLowerCase()); } return sign.toString(); } /** * 得到签名 * @param params 参数集合不含secretkey * @param secret 验证接口的secretkey * @return */ public static String getSign(Map<String, String> params,String secret) { String sign= ""; StringBuilder sb = new StringBuilder(); //step1：先对请求参数排序 Set<String> keyset=params.keySet(); TreeSet<String> sortSet= new TreeSet<String>(); sortSet.addAll(keyset); Iterator<String> it=sortSet.iterator(); //step2：把参数的key value链接起来 secretkey放在最后面，得到要加密的字符串 while(it.hasNext()) { String key=it.next(); String value=params.get(key); sb.append(key).append(value); } sb.append(secret); byte[] md5Digest; try { //得到Md5加密得到sign md5Digest = getMD5Digest(sb.toString()); sign = byte2hex(md5Digest); } catch (IOException e) { LOGGER.error( "生成签名错误",e); } return sign; } }

ps:该类没有校验随机数，请自行实现；

实现逻辑：检查缓存中是否存在 sign对的随机数，若有代表已经请求过。。。根据接口性质决定是否允许在有效时间内重复请求该接口。做对应的异常处理

[Link 1]: http://creativecommons.org/licenses/by-sa/4.0/
[https_blog.csdn.net_sunzbking_article_details_79790927]: https://blog.csdn.net/sunzbking/article/details/79790927