|
|
@@ -60,16 +60,16 @@ public class TtCalllbackController extends BaseController { |
|
|
|
@PostMapping(value = "/notify") |
|
|
|
@ApiOperation("接收ticket回调") |
|
|
|
@ResponseBody |
|
|
|
public String receiveTicket(HttpServletRequest request) throws IOException { |
|
|
|
public String receiveTicket(@RequestBody Map<String, String> params) throws IOException { |
|
|
|
logger.info("[" + getIpAddr() + "]接收微信回调 /ttOpen/notify"); |
|
|
|
|
|
|
|
String nonce = request.getParameter("Nonce"); |
|
|
|
String timestamp = request.getParameter("TimeStamp"); |
|
|
|
// String signature = request.getParameter("signature"); |
|
|
|
String encrypt = request.getParameter("Encrypt"); |
|
|
|
String msgSignature = request.getParameter("MsgSignature"); |
|
|
|
String nonce = params.get("Nonce"); |
|
|
|
String timestamp = params.get("TimeStamp"); |
|
|
|
// String signature = params.get("signature"); |
|
|
|
String encrypt = params.get("Encrypt"); |
|
|
|
String msgSignature = params.get("MsgSignature"); |
|
|
|
|
|
|
|
if (openService.getTtOpenComponentService().checkSignature(timestamp, nonce, encrypt, msgSignature)) { |
|
|
|
if (!openService.getTtOpenComponentService().checkSignature(timestamp, nonce, encrypt, msgSignature)) { |
|
|
|
throw new IllegalArgumentException("非法请求,可能属于伪造的请求!"); |
|
|
|
} |
|
|
|
// aes加密的消息, 解密 |
|
|
|