微信公众平台java版本token验证

微信公众平台java版本token验证

以下是token.jsp  本人项目中使用的方法，仅供参考，方便自己后期使用

 

<%@page import="java.util.Date"%>
<%@page import="org.dom4j.Element"%>
<%@page import="org.dom4j.DocumentHelper"%>
<%@page import="org.dom4j.Document"%>
<%@page import="java.io.IOException"%>
<%@page import="java.io.InputStreamReader"%>
<%@page import="java.io.BufferedReader"%>
<%@page import="java.io.Reader"%>
<%@page import="java.security.MessageDigest"%>
<%@page import="org.springframework.context.ApplicationContext"%>
<%@page import="org.springframework.web.context.support.WebApplicationContextUtils"%>
<%@page import="java.util.Arrays"%>
<%@ page language="java" contentType="text/html; charset=utf-8" pageEncoding="utf-8"%>
<%@page import="java.util.*"%>
<%@page import="com.cjt.base.util.comm.SysOptionsValues"%>
<%@page import="com.sides.vms.web.violation.service.MessageResolveBiz"%>
<%@page import="com.sides.vms.web.violation.service.ViolationInfoBiz"%>
<%@page import="com.sides.vms.web.violation.bean.RequsetBean"%>
<%@page import="com.sides.vms.web.violation.action.ViolationAction"%>
<%@page import="com.sides.vms.web.violation.bean.Violation"%>
<%@page import="com.sides.vms.web.violation.MainConfig"%>

<%
 String path = request.getContextPath();
 
%>
<%
 //WeiXinHandler为内部类不能使用非final类型的对象
 final String TOKEN="weixin";
 final HttpServletRequest final_request=request;
 final HttpServletResponse final_response=response;
 final HttpSession final_session =session;
 final ApplicationContext context = WebApplicationContextUtils.getWebApplicationContext(pageContext.getServletContext());
 final MessageResolveBiz msgResolveBiz = (MessageResolveBiz)context.getBean("msgResolveBiz");
 final ViolationInfoBiz violationInfoBiz = (ViolationInfoBiz)context.getBean("violationInfoBiz"); 
 final String localIp = MainConfig.LOCALIP;
%>
<%
class WeiXinHandler{
 public void valid(){
  
  String echostr=final_request.getParameter("echostr");
  if(null==echostr||echostr.isEmpty()){
   try{
    responseMsg();
   }catch(Exception ex){
    ex.printStackTrace();
   }
  }else{
   if(this.checkSignature()){
    this.print(echostr);
   }else{
    this.print("error");                                                                                                                                                                                                                                                                                                                                        
   }
  }
 }
 //自动回复内容
 public void responseMsg()throws Exception{
  String postStr=null;
 
  postStr=this.readStreamParameter(final_request.getInputStream());
  System.out.println("22:"+postStr);
  //存入用户信息及消息及验证用户
  String result = msgResolveBiz.insertMseeage(msgResolveBiz.pageContent2Bean(postStr));
  if("invalidUser".equals(result)){
   //非法用户
   final_response.setHeader("REFRESH","5;URL=userManager/login.jsp");
  }
  if (null!=postStr&&!postStr.isEmpty()){
   
   Document document=null;
   try{
    document = DocumentHelper.parseText(postStr);
   }catch(Exception e){
    e.printStackTrace();
   }
   if(null==document){
    this.print("");
    return;
   }
   
   Element root=document.getRootElement();
            String fromUsername = root.elementText("FromUserName");
            String toUsername = root.elementText("ToUserName");
            String keyword = root.elementTextTrim("Content"); //消息内容
            String msgtype =root.elementTextTrim("MsgType"); //消息类型
            String event =root.elementTextTrim("Event"); //事件推送  click 表示自定义菜单点击事件
            String eventKey =root.elementTextTrim("EventKey"); //自定义菜单接口中KEY值对应
            String location_x =root.elementTextTrim("Location_X"); //地理位置纬度
            String location_y =root.elementTextTrim("Location_Y"); //地理位置经度
            String scale = root.elementTextTrim("Scale");//地图缩放大小
            String label = root.elementTextTrim("Label");//地理位置信息
            String time = new Date().getTime()+"";
            System.out.println("keyword:  "+keyword);
            System.out.println("msgtype:  "+msgtype);
            //文本消息
            String textTpl = "<xml>"+
      "<ToUserName><![CDATA[%1$s]]></ToUserName>"+
      "<FromUserName><![CDATA[%2$s]]></FromUserName>"+
      "<CreateTime>%3$s</CreateTime>"+
      "<MsgType><![CDATA[%4$s]]></MsgType>"+
      "<Content><![CDATA[%5$s]]></Content>"+
      "<FuncFlag>0</FuncFlag>"+
      "</xml>";    
   //图文消息 
   String textTpl2 = "<xml>"+
     "<ToUserName><![CDATA["+fromUsername+"]]></ToUserName>"+
     "<FromUserName><![CDATA["+toUsername+"]]></FromUserName>"+
     "<CreateTime>"+new Date().getTime()+"</CreateTime>"+
     "<MsgType><![CDATA[news]]></MsgType>"+
     "<Content><![CDATA[]]></Content>"+
     "<ArticleCount>2</ArticleCount>"+
     "<Articles>"+
     "<item>"+
     "<Title><![CDATA[%1$s]]></Title>"+
     "<Description><![CDATA[]]></Description>"+
     "<PicUrl><![CDATA[%2$s]]></PicUrl>"+
     "<Url><![CDATA[%3$s]]></Url>"+
     "</item>"+
     "<item>"+
     "<Title><![CDATA[%4$s]]></Title>"+
     "<Description><![CDATA[]]></Description>"+
     "<PicUrl><![CDATA[]]></PicUrl>"+
     "<Url><![CDATA[%5$s]]></Url>"+
     "</item>"+
     "</Articles>"+
     "<FuncFlag>0</FuncFlag>"+
     "</xml>"; 
  }
 }
 
 //微信接口验证
 public boolean checkSignature(){
  String signature = final_request.getParameter("signature");
        String timestamp = final_request.getParameter("timestamp");
        String nonce = final_request.getParameter("nonce");
        String token=TOKEN;
        String[] tmpArr={token,timestamp,nonce};
        Arrays.sort(tmpArr);
        String tmpStr=this.ArrayToString(tmpArr);
        tmpStr=this.SHA1Encode(tmpStr);
        if(tmpStr.equalsIgnoreCase(signature)){
   return true;
  }else{
   return false;
  }
 }
 //向请求端发送返回数据
 public void print(String content){
  try{
   final_response.getWriter().print(content);
   final_response.getWriter().flush();
   final_response.getWriter().close();
  }catch(Exception e){
   
  }
 }
 //数组转字符串
 public String ArrayToString(String [] arr){
  StringBuffer bf = new StringBuffer();
  for(int i = 0; i < arr.length; i++){
   bf.append(arr[i]);
  }
  return bf.toString();
 }
 //sha1加密
 public String SHA1Encode(String sourceString) {
  String resultString = null;
  try {
     resultString = new String(sourceString);
     MessageDigest md = MessageDigest.getInstance("SHA-1");
     resultString = byte2hexString(md.digest(resultString.getBytes()));
  } catch (Exception ex) {
  }
  return resultString;
 }
 public final String byte2hexString(byte[] bytes) {
  StringBuffer buf = new StringBuffer(bytes.length * 2);
  for (int i = 0; i < bytes.length; i++) {
   if (((int) bytes[i] & 0xff) < 0x10) {
       buf.append("0");
      }
   buf.append(Long.toString((int) bytes[i] & 0xff, 16));
  }
  return buf.toString().toUpperCase();
 }
 //从输入流读取post参数
 public String readStreamParameter(ServletInputStream in){
  StringBuilder buffer = new StringBuilder();
  BufferedReader reader=null;
  try{
   reader = new BufferedReader(new InputStreamReader(in));
   String line=null;
   while((line = reader.readLine())!=null){
    buffer.append(line);
         }
  }catch(Exception e){
   e.printStackTrace();
  }finally{
   if(null!=reader){
    try {
     reader.close();
    } catch (IOException e) {
     e.printStackTrace();
    }
   }
  }
  return buffer.toString();
 }
}
%>
<%
 WeiXinHandler handler=new WeiXinHandler();
 handler.valid();
%>