| @@ -5,7 +5,7 @@ | |||
| <modelVersion>4.0.0</modelVersion> | |||
| <groupId>me.chanjar</groupId> | |||
| <artifactId>weixin-java-tools</artifactId> | |||
| <version>1.0.0</version> | |||
| <version>1.0.1-SNAPSHOT</version> | |||
| <name>WeiXin Java Tools</name> | |||
| <description>用于开发微信公众号的Java工具</description> | |||
| <url>https://github.com/chanjarster/weixin-java-tools</url> | |||
| @@ -96,6 +96,28 @@ | |||
| <artifactId>commons-lang3</artifactId> | |||
| <version>3.1</version> | |||
| </dependency> | |||
| <dependency> | |||
| <groupId>commons-codec</groupId> | |||
| <artifactId>commons-codec</artifactId> | |||
| <version>1.9</version> | |||
| </dependency> | |||
| <dependency> | |||
| <groupId>commons-io</groupId> | |||
| <artifactId>commons-io</artifactId> | |||
| <version>2.4</version> | |||
| </dependency> | |||
| <dependency> | |||
| <groupId>org.eclipse.jetty</groupId> | |||
| <artifactId>jetty-server</artifactId> | |||
| <version>9.3.0.M0</version> | |||
| <scope>test</scope> | |||
| </dependency> | |||
| <dependency> | |||
| <groupId>org.eclipse.jetty</groupId> | |||
| <artifactId>jetty-servlet</artifactId> | |||
| <version>9.3.0.M0</version> | |||
| <scope>test</scope> | |||
| </dependency> | |||
| </dependencies> | |||
| <distributionManagement> | |||
| @@ -20,7 +20,9 @@ public interface WxConfigStorage { | |||
| public String getSecret(); | |||
| public String getToken(); | |||
| public String getAesKey(); | |||
| public int getExpiresIn(); | |||
| } | |||
| @@ -13,6 +13,7 @@ public class WxInMemoryConfigStorage implements WxConfigStorage { | |||
| protected String secret; | |||
| protected String token; | |||
| protected String accessToken; | |||
| protected String aesKey; | |||
| protected int expiresIn; | |||
| public void updateAccessToken(WxAccessToken accessToken) { | |||
| @@ -56,6 +57,14 @@ public class WxInMemoryConfigStorage implements WxConfigStorage { | |||
| this.token = token; | |||
| } | |||
| public String getAesKey() { | |||
| return aesKey; | |||
| } | |||
| public void setAesKey(String aesKey) { | |||
| this.aesKey = aesKey; | |||
| } | |||
| public void setAccessToken(String accessToken) { | |||
| this.accessToken = accessToken; | |||
| } | |||
| @@ -64,4 +73,5 @@ public class WxInMemoryConfigStorage implements WxConfigStorage { | |||
| this.expiresIn = expiresIn; | |||
| } | |||
| } | |||
| @@ -11,6 +11,7 @@ import java.util.UUID; | |||
| import java.util.concurrent.atomic.AtomicBoolean; | |||
| import me.chanjar.weixin.bean.WxCustomMessage; | |||
| import me.chanjar.weixin.util.crypto.SHA1; | |||
| import me.chanjar.weixin.util.json.GsonHelper; | |||
| import org.apache.commons.lang3.StringUtils; | |||
| import org.apache.http.client.ClientProtocolException; | |||
| @@ -67,33 +68,12 @@ public class WxServiceImpl implements WxService { | |||
| public boolean checkSignature(String timestamp, String nonce, String signature) { | |||
| try { | |||
| String token = wxConfigStorage.getToken(); | |||
| MessageDigest sha1 = MessageDigest.getInstance("SHA1"); | |||
| String[] arr = new String[] { token, timestamp, nonce }; | |||
| Arrays.sort(arr); | |||
| StringBuilder sb = new StringBuilder(); | |||
| for(String a : arr) { | |||
| sb.append(a); | |||
| } | |||
| sha1.update(sb.toString().getBytes()); | |||
| byte[] output = sha1.digest(); | |||
| return bytesToHex(output).equals(signature); | |||
| return SHA1.gen(wxConfigStorage.getToken(), timestamp, nonce).equals(signature); | |||
| } catch (Exception e) { | |||
| return false; | |||
| } | |||
| } | |||
| protected String bytesToHex(byte[] b) { | |||
| char hexDigit[] = {'0', '1', '2', '3', '4', '5', '6', '7', | |||
| '8', '9', 'a', 'b', 'c', 'd', 'e', 'f'}; | |||
| StringBuffer buf = new StringBuffer(); | |||
| for (int j = 0; j < b.length; j++) { | |||
| buf.append(hexDigit[(b[j] >> 4) & 0x0f]); | |||
| buf.append(hexDigit[b[j] & 0x0f]); | |||
| } | |||
| return buf.toString(); | |||
| } | |||
| public void accessTokenRefresh() throws WxErrorException { | |||
| if (!GLOBAL_ACCESS_TOKEN_REFRESH_FLAG.getAndSet(true)) { | |||
| try { | |||
| @@ -1,6 +1,11 @@ | |||
| package me.chanjar.weixin.bean; | |||
| import java.io.InputStream; | |||
| import me.chanjar.weixin.api.WxConfigStorage; | |||
| import me.chanjar.weixin.api.WxConsts; | |||
| import me.chanjar.weixin.util.crypto.WxCryptUtil; | |||
| import me.chanjar.weixin.util.xml.AdapterCDATA; | |||
| import me.chanjar.weixin.util.xml.XmlTransformer; | |||
| import org.apache.commons.io.IOUtils; | |||
| import javax.xml.bind.JAXBException; | |||
| import javax.xml.bind.annotation.XmlAccessType; | |||
| @@ -8,10 +13,8 @@ import javax.xml.bind.annotation.XmlAccessorType; | |||
| import javax.xml.bind.annotation.XmlElement; | |||
| import javax.xml.bind.annotation.XmlRootElement; | |||
| import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter; | |||
| import me.chanjar.weixin.api.WxConsts; | |||
| import me.chanjar.weixin.util.xml.AdapterCDATA; | |||
| import me.chanjar.weixin.util.xml.XmlTransformer; | |||
| import java.io.IOException; | |||
| import java.io.InputStream; | |||
| /** | |||
| * <pre> | |||
| @@ -21,8 +24,8 @@ import me.chanjar.weixin.util.xml.XmlTransformer; | |||
| * http://mp.weixin.qq.com/wiki/index.php?title=接收事件推送 | |||
| * http://mp.weixin.qq.com/wiki/index.php?title=接收语音识别结果 | |||
| * </pre> | |||
| * @author chanjarster | |||
| * | |||
| * @author chanjarster | |||
| */ | |||
| @XmlRootElement(name = "xml") | |||
| @XmlAccessorType(XmlAccessType.FIELD) | |||
| @@ -31,102 +34,102 @@ public class WxXmlMessage { | |||
| /////////////////////// | |||
| // 以下都是微信推送过来的消息的xml的element所对应的属性 | |||
| /////////////////////// | |||
| @XmlElement(name="ToUserName") | |||
| @XmlElement(name = "ToUserName") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String ToUserName; | |||
| @XmlElement(name="FromUserName") | |||
| @XmlElement(name = "FromUserName") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String FromUserName; | |||
| @XmlElement(name="CreateTime") | |||
| @XmlElement(name = "CreateTime") | |||
| private Long CreateTime; | |||
| @XmlElement(name="MsgType") | |||
| @XmlElement(name = "MsgType") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String MsgType; | |||
| @XmlElement(name="Content") | |||
| @XmlElement(name = "Content") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Content; | |||
| @XmlElement(name="MsgId") | |||
| @XmlElement(name = "MsgId") | |||
| private Long MsgId; | |||
| @XmlElement(name="PicUrl") | |||
| @XmlElement(name = "PicUrl") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String PicUrl; | |||
| @XmlElement(name="MediaId") | |||
| @XmlElement(name = "MediaId") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String MediaId; | |||
| @XmlElement(name="Format") | |||
| @XmlElement(name = "Format") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Format; | |||
| @XmlElement(name="ThumbMediaId") | |||
| @XmlElement(name = "ThumbMediaId") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String ThumbMediaId; | |||
| @XmlElement(name="Location_X") | |||
| @XmlElement(name = "Location_X") | |||
| private Double Location_X; | |||
| @XmlElement(name="Location_Y") | |||
| @XmlElement(name = "Location_Y") | |||
| private Double Location_Y; | |||
| @XmlElement(name="Scale") | |||
| @XmlElement(name = "Scale") | |||
| private Double Scale; | |||
| @XmlElement(name="Label") | |||
| @XmlElement(name = "Label") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Label; | |||
| @XmlElement(name="Title") | |||
| @XmlElement(name = "Title") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Title; | |||
| @XmlElement(name="Description") | |||
| @XmlElement(name = "Description") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Description; | |||
| @XmlElement(name="Url") | |||
| @XmlElement(name = "Url") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Url; | |||
| @XmlElement(name="Event") | |||
| @XmlElement(name = "Event") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Event; | |||
| @XmlElement(name="EventKey") | |||
| @XmlElement(name = "EventKey") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String EventKey; | |||
| @XmlElement(name="Ticket") | |||
| @XmlElement(name = "Ticket") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Ticket; | |||
| @XmlElement(name="Latitude") | |||
| @XmlElement(name = "Latitude") | |||
| private Double Latitude; | |||
| @XmlElement(name="Longitude") | |||
| @XmlElement(name = "Longitude") | |||
| private Double Longitude; | |||
| @XmlElement(name="Precision") | |||
| @XmlElement(name = "Precision") | |||
| private Double Precision; | |||
| @XmlElement(name="Recognition") | |||
| @XmlElement(name = "Recognition") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Recognition; | |||
| /////////////////////////////////////// | |||
| // 群发消息返回的结果 | |||
| /////////////////////////////////////// | |||
| /** | |||
| * 群发的结果 | |||
| */ | |||
| @XmlElement(name="Status") | |||
| @XmlElement(name = "Status") | |||
| @XmlJavaTypeAdapter(AdapterCDATA.class) | |||
| private String Status; | |||
| /** | |||
| @@ -134,7 +137,7 @@ public class WxXmlMessage { | |||
| */ | |||
| private Integer TotalCount; | |||
| /** | |||
| * 过滤(过滤是指特定地区、性别的过滤、用户设置拒收的过滤,用户接收已超4条的过滤)后,准备发送的粉丝数,原则上,FilterCount = SentCount + ErrorCount | |||
| * 过滤(过滤是指特定地区、性别的过滤、用户设置拒收的过滤,用户接收已超4条的过滤)后,准备发送的粉丝数,原则上,FilterCount = SentCount + ErrorCount | |||
| */ | |||
| private Integer FilterCount; | |||
| /** | |||
| @@ -145,21 +148,23 @@ public class WxXmlMessage { | |||
| * 发送失败的粉丝数 | |||
| */ | |||
| private Integer ErrorCount; | |||
| public String getToUserName() { | |||
| return ToUserName; | |||
| } | |||
| public void setToUserName(String toUserName) { | |||
| ToUserName = toUserName; | |||
| } | |||
| public Long getCreateTime() { | |||
| return CreateTime; | |||
| } | |||
| public void setCreateTime(Long createTime) { | |||
| CreateTime = createTime; | |||
| } | |||
| /** | |||
| * <pre> | |||
| * 当接受用户消息时,可能会获得以下值: | |||
| @@ -171,12 +176,13 @@ public class WxXmlMessage { | |||
| * {@link WxConsts#XML_MSG_LINK} | |||
| * {@link WxConsts#XML_MSG_EVENT} | |||
| * </pre> | |||
| * | |||
| * @return | |||
| */ | |||
| public String getMsgType() { | |||
| return MsgType; | |||
| } | |||
| /** | |||
| * <pre> | |||
| * 当发送消息的时候使用: | |||
| @@ -187,148 +193,169 @@ public class WxXmlMessage { | |||
| * {@link WxConsts#XML_MSG_NEWS} | |||
| * {@link WxConsts#XML_MSG_MUSIC} | |||
| * </pre> | |||
| * | |||
| * @param msgType | |||
| */ | |||
| public void setMsgType(String msgType) { | |||
| MsgType = msgType; | |||
| } | |||
| public String getContent() { | |||
| return Content; | |||
| } | |||
| public void setContent(String content) { | |||
| Content = content; | |||
| } | |||
| public Long getMsgId() { | |||
| return MsgId; | |||
| } | |||
| public void setMsgId(Long msgId) { | |||
| MsgId = msgId; | |||
| } | |||
| public String getPicUrl() { | |||
| return PicUrl; | |||
| } | |||
| public void setPicUrl(String picUrl) { | |||
| PicUrl = picUrl; | |||
| } | |||
| public String getMediaId() { | |||
| return MediaId; | |||
| } | |||
| public void setMediaId(String mediaId) { | |||
| MediaId = mediaId; | |||
| } | |||
| public String getFormat() { | |||
| return Format; | |||
| } | |||
| public void setFormat(String format) { | |||
| Format = format; | |||
| } | |||
| public String getThumbMediaId() { | |||
| return ThumbMediaId; | |||
| } | |||
| public void setThumbMediaId(String thumbMediaId) { | |||
| ThumbMediaId = thumbMediaId; | |||
| } | |||
| public Double getLocation_X() { | |||
| return Location_X; | |||
| } | |||
| public void setLocation_X(Double location_X) { | |||
| Location_X = location_X; | |||
| } | |||
| public Double getLocation_Y() { | |||
| return Location_Y; | |||
| } | |||
| public void setLocation_Y(Double location_Y) { | |||
| Location_Y = location_Y; | |||
| } | |||
| public Double getScale() { | |||
| return Scale; | |||
| } | |||
| public void setScale(Double scale) { | |||
| Scale = scale; | |||
| } | |||
| public String getLabel() { | |||
| return Label; | |||
| } | |||
| public void setLabel(String label) { | |||
| Label = label; | |||
| } | |||
| public String getTitle() { | |||
| return Title; | |||
| } | |||
| public void setTitle(String title) { | |||
| Title = title; | |||
| } | |||
| public String getDescription() { | |||
| return Description; | |||
| } | |||
| public void setDescription(String description) { | |||
| Description = description; | |||
| } | |||
| public String getUrl() { | |||
| return Url; | |||
| } | |||
| public void setUrl(String url) { | |||
| Url = url; | |||
| } | |||
| public String getEvent() { | |||
| return Event; | |||
| } | |||
| public void setEvent(String event) { | |||
| Event = event; | |||
| } | |||
| public String getEventKey() { | |||
| return EventKey; | |||
| } | |||
| public void setEventKey(String eventKey) { | |||
| EventKey = eventKey; | |||
| } | |||
| public String getTicket() { | |||
| return Ticket; | |||
| } | |||
| public void setTicket(String ticket) { | |||
| Ticket = ticket; | |||
| } | |||
| public Double getLatitude() { | |||
| return Latitude; | |||
| } | |||
| public void setLatitude(Double latitude) { | |||
| Latitude = latitude; | |||
| } | |||
| public Double getLongitude() { | |||
| return Longitude; | |||
| } | |||
| public void setLongitude(Double longitude) { | |||
| Longitude = longitude; | |||
| } | |||
| public Double getPrecision() { | |||
| return Precision; | |||
| } | |||
| public void setPrecision(Double precision) { | |||
| Precision = precision; | |||
| } | |||
| public String getRecognition() { | |||
| return Recognition; | |||
| } | |||
| public void setRecognition(String recognition) { | |||
| Recognition = recognition; | |||
| } | |||
| @@ -336,10 +363,11 @@ public class WxXmlMessage { | |||
| public String getFromUserName() { | |||
| return FromUserName; | |||
| } | |||
| public void setFromUserName(String fromUserName) { | |||
| FromUserName = fromUserName; | |||
| } | |||
| public static WxXmlMessage fromXml(String xml) { | |||
| try { | |||
| return XmlTransformer.fromXml(WxXmlMessage.class, xml); | |||
| @@ -347,7 +375,7 @@ public class WxXmlMessage { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| public static WxXmlMessage fromXml(InputStream is) { | |||
| try { | |||
| return XmlTransformer.fromXml(WxXmlMessage.class, is); | |||
| @@ -355,34 +383,73 @@ public class WxXmlMessage { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| /** | |||
| * 从加密字符串转换 | |||
| * | |||
| * @param encryptedXml | |||
| * @param wxConfigStorage | |||
| * @param timestamp | |||
| * @param nonce | |||
| * @param msgSignature | |||
| * @return | |||
| */ | |||
| public static WxXmlMessage fromEncryptedXml( | |||
| String encryptedXml, | |||
| WxConfigStorage wxConfigStorage, | |||
| String timestamp, String nonce, String msgSignature) { | |||
| WxCryptUtil cryptUtil = new WxCryptUtil(wxConfigStorage); | |||
| String plainText = cryptUtil.decrypt(msgSignature, timestamp, nonce, encryptedXml); | |||
| return fromXml(plainText); | |||
| } | |||
| public static WxXmlMessage fromEncryptedXml( | |||
| InputStream is, | |||
| WxConfigStorage wxConfigStorage, | |||
| String timestamp, String nonce, String msgSignature) { | |||
| try { | |||
| return fromEncryptedXml(IOUtils.toString(is, "UTF-8"), wxConfigStorage, timestamp, nonce, msgSignature); | |||
| } catch (IOException e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| public String getStatus() { | |||
| return Status; | |||
| } | |||
| public void setStatus(String status) { | |||
| Status = status; | |||
| } | |||
| public Integer getTotalCount() { | |||
| return TotalCount; | |||
| } | |||
| public void setTotalCount(Integer totalCount) { | |||
| TotalCount = totalCount; | |||
| } | |||
| public Integer getFilterCount() { | |||
| return FilterCount; | |||
| } | |||
| public void setFilterCount(Integer filterCount) { | |||
| FilterCount = filterCount; | |||
| } | |||
| public Integer getSentCount() { | |||
| return SentCount; | |||
| } | |||
| public void setSentCount(Integer sentCount) { | |||
| SentCount = sentCount; | |||
| } | |||
| public Integer getErrorCount() { | |||
| return ErrorCount; | |||
| } | |||
| public void setErrorCount(Integer errorCount) { | |||
| ErrorCount = errorCount; | |||
| } | |||
| @@ -7,12 +7,14 @@ import javax.xml.bind.annotation.XmlElement; | |||
| import javax.xml.bind.annotation.XmlRootElement; | |||
| import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter; | |||
| import me.chanjar.weixin.api.WxConfigStorage; | |||
| import me.chanjar.weixin.bean.outxmlbuilder.ImageBuilder; | |||
| import me.chanjar.weixin.bean.outxmlbuilder.MusicBuilder; | |||
| import me.chanjar.weixin.bean.outxmlbuilder.NewsBuilder; | |||
| import me.chanjar.weixin.bean.outxmlbuilder.TextBuilder; | |||
| import me.chanjar.weixin.bean.outxmlbuilder.VideoBuilder; | |||
| import me.chanjar.weixin.bean.outxmlbuilder.VoiceBuilder; | |||
| import me.chanjar.weixin.util.crypto.WxCryptUtil; | |||
| import me.chanjar.weixin.util.xml.AdapterCDATA; | |||
| import me.chanjar.weixin.util.xml.XmlTransformer; | |||
| @@ -71,10 +73,20 @@ public class WxXmlOutMessage { | |||
| try { | |||
| return XmlTransformer.toXml((Class)this.getClass(), this); | |||
| } catch (JAXBException e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| return null; | |||
| } | |||
| /** | |||
| * 转换成加密的xml格式 | |||
| * @return | |||
| */ | |||
| public String toEncryptedXml(WxConfigStorage wxConfigStorage) { | |||
| String plainXml = toXml(); | |||
| WxCryptUtil pc = new WxCryptUtil(wxConfigStorage); | |||
| return pc.encrypt(plainXml); | |||
| } | |||
| /** | |||
| * 获得文本消息builder | |||
| * @return | |||
| @@ -0,0 +1,26 @@ | |||
| package me.chanjar.weixin.util.crypto; | |||
| import java.util.ArrayList; | |||
| class ByteGroup { | |||
| ArrayList<Byte> byteContainer = new ArrayList<Byte>(); | |||
| byte[] toBytes() { | |||
| byte[] bytes = new byte[byteContainer.size()]; | |||
| for (int i = 0; i < byteContainer.size(); i++) { | |||
| bytes[i] = byteContainer.get(i); | |||
| } | |||
| return bytes; | |||
| } | |||
| ByteGroup addBytes(byte[] bytes) { | |||
| for (byte b : bytes) { | |||
| byteContainer.add(b); | |||
| } | |||
| return this; | |||
| } | |||
| int size() { | |||
| return byteContainer.size(); | |||
| } | |||
| } | |||
| @@ -0,0 +1,68 @@ | |||
| /** | |||
| * 对公众平台发送给公众账号的消息加解密示例代码. | |||
| * | |||
| * @copyright Copyright (c) 1998-2014 Tencent Inc. | |||
| */ | |||
| // ------------------------------------------------------------------------ | |||
| package me.chanjar.weixin.util.crypto; | |||
| import java.nio.charset.Charset; | |||
| import java.util.Arrays; | |||
| /** | |||
| * 提供基于PKCS7算法的加解 | |||
| */ | |||
| class PKCS7Encoder { | |||
| private static final Charset CHARSET = Charset.forName("utf-8"); | |||
| private static final int BLOCK_SIZE = 32; | |||
| /** | |||
| * 获得对明文进行补位填充的字节. | |||
| * | |||
| * @param count 需要进行填充补位操作的明文字节个数 | |||
| * @return 补齐用的字节数组 | |||
| */ | |||
| static byte[] encode(int count) { | |||
| // 计算需要填充的位数 | |||
| int amountToPad = BLOCK_SIZE - (count % BLOCK_SIZE); | |||
| if (amountToPad == 0) { | |||
| amountToPad = BLOCK_SIZE; | |||
| } | |||
| // 获得补位所用的字符 | |||
| char padChr = chr(amountToPad); | |||
| String tmp = new String(); | |||
| for (int index = 0; index < amountToPad; index++) { | |||
| tmp += padChr; | |||
| } | |||
| return tmp.getBytes(CHARSET); | |||
| } | |||
| /** | |||
| * 删除解密后明文的补位字符 | |||
| * | |||
| * @param decrypted 解密后的明文 | |||
| * @return 删除补位字符后的明文 | |||
| */ | |||
| static byte[] decode(byte[] decrypted) { | |||
| int pad = (int) decrypted[decrypted.length - 1]; | |||
| if (pad < 1 || pad > 32) { | |||
| pad = 0; | |||
| } | |||
| return Arrays.copyOfRange(decrypted, 0, decrypted.length - pad); | |||
| } | |||
| /** | |||
| * 将数字转化成ASCII码对应的字符,用于对明文进行补码 | |||
| * | |||
| * @param a 需要转化的数字 | |||
| * @return 转化得到的字符 | |||
| */ | |||
| static char chr(int a) { | |||
| byte target = (byte) (a & 0xFF); | |||
| return (char) target; | |||
| } | |||
| } | |||
| @@ -0,0 +1,42 @@ | |||
| package me.chanjar.weixin.util.crypto; | |||
| import java.security.MessageDigest; | |||
| import java.security.NoSuchAlgorithmException; | |||
| import java.util.Arrays; | |||
| /** | |||
| * Created by qianjia on 14/10/19. | |||
| */ | |||
| public class SHA1 { | |||
| /** | |||
| * 生成SHA1签名 | |||
| * @param arr | |||
| * @return | |||
| */ | |||
| public static String gen(String... arr) throws NoSuchAlgorithmException { | |||
| Arrays.sort(arr); | |||
| StringBuilder sb = new StringBuilder(); | |||
| for(String a : arr) { | |||
| sb.append(a); | |||
| } | |||
| MessageDigest sha1 = MessageDigest.getInstance("SHA1"); | |||
| sha1.update(sb.toString().getBytes()); | |||
| byte[] output = sha1.digest(); | |||
| return bytesToHex(output); | |||
| } | |||
| protected static String bytesToHex(byte[] b) { | |||
| char hexDigit[] = {'0', '1', '2', '3', '4', '5', '6', '7', | |||
| '8', '9', 'a', 'b', 'c', 'd', 'e', 'f'}; | |||
| StringBuffer buf = new StringBuffer(); | |||
| for (int j = 0; j < b.length; j++) { | |||
| buf.append(hexDigit[(b[j] >> 4) & 0x0f]); | |||
| buf.append(hexDigit[b[j] & 0x0f]); | |||
| } | |||
| return buf.toString(); | |||
| } | |||
| } | |||
| @@ -0,0 +1,322 @@ | |||
| /** | |||
| * 对公众平台发送给公众账号的消息加解密示例代码. | |||
| * | |||
| * @copyright Copyright (c) 1998-2014 Tencent Inc. | |||
| */ | |||
| // ------------------------------------------------------------------------ | |||
| /** | |||
| * 针对org.apache.commons.codec.binary.Base64, | |||
| * 需要导入架包commons-codec-1.9(或commons-codec-1.8等其他版本) | |||
| * 官方下载地址:http://commons.apache.org/proper/commons-codec/download_codec.cgi | |||
| */ | |||
| package me.chanjar.weixin.util.crypto; | |||
| import java.io.StringReader; | |||
| import java.nio.charset.Charset; | |||
| import java.security.NoSuchAlgorithmException; | |||
| import java.util.Arrays; | |||
| import java.util.Random; | |||
| import javax.crypto.Cipher; | |||
| import javax.crypto.spec.IvParameterSpec; | |||
| import javax.crypto.spec.SecretKeySpec; | |||
| import javax.xml.parsers.DocumentBuilder; | |||
| import javax.xml.parsers.DocumentBuilderFactory; | |||
| import javax.xml.parsers.ParserConfigurationException; | |||
| import me.chanjar.weixin.api.WxConfigStorage; | |||
| import org.apache.commons.codec.binary.Base64; | |||
| import org.w3c.dom.Document; | |||
| import org.w3c.dom.Element; | |||
| import org.xml.sax.InputSource; | |||
| public class WxCryptUtil { | |||
| private static final Base64 base64 = new Base64(); | |||
| private static final Charset CHARSET = Charset.forName("utf-8"); | |||
| private static final ThreadLocal<DocumentBuilder> builderLocal = | |||
| new ThreadLocal<DocumentBuilder>() { | |||
| @Override protected DocumentBuilder initialValue() { | |||
| try { | |||
| return DocumentBuilderFactory.newInstance().newDocumentBuilder(); | |||
| } catch (ParserConfigurationException exc) { | |||
| throw new IllegalArgumentException(exc); | |||
| } | |||
| } | |||
| }; | |||
| private byte[] aesKey; | |||
| private String token; | |||
| private String appId; | |||
| /** | |||
| * 构造函数 | |||
| * | |||
| * @param wxConfigStorage | |||
| */ | |||
| public WxCryptUtil(WxConfigStorage wxConfigStorage) { | |||
| /* | |||
| * @param token 公众平台上,开发者设置的token | |||
| * @param encodingAesKey 公众平台上,开发者设置的EncodingAESKey | |||
| * @param appId 公众平台appid | |||
| */ | |||
| String encodingAesKey = wxConfigStorage.getAesKey(); | |||
| String token = wxConfigStorage.getToken(); | |||
| String appId = wxConfigStorage.getAppId(); | |||
| this.token = token; | |||
| this.appId = appId; | |||
| this.aesKey = Base64.decodeBase64(encodingAesKey + "="); | |||
| } | |||
| /** | |||
| * 构造函数 | |||
| * | |||
| * @param token 公众平台上,开发者设置的token | |||
| * @param encodingAesKey 公众平台上,开发者设置的EncodingAESKey | |||
| * @param appId 公众平台appid | |||
| */ | |||
| public WxCryptUtil(String token, String encodingAesKey, String appId) { | |||
| this.token = token; | |||
| this.appId = appId; | |||
| this.aesKey = Base64.decodeBase64(encodingAesKey + "="); | |||
| } | |||
| /** | |||
| * 将公众平台回复用户的消息加密打包. | |||
| * <ol> | |||
| * <li>对要发送的消息进行AES-CBC加密</li> | |||
| * <li>生成安全签名</li> | |||
| * <li>将消息密文和安全签名打包成xml格式</li> | |||
| * </ol> | |||
| * | |||
| * @param plainText 公众平台待回复用户的消息,xml格式的字符串 | |||
| * @return 加密后的可以直接回复用户的密文,包括msg_signature, timestamp, nonce, encrypt的xml格式的字符串 | |||
| */ | |||
| public String encrypt(String plainText) { | |||
| // 加密 | |||
| String encryptedXml = encrypt(genRandomStr(), plainText); | |||
| // 生成安全签名 | |||
| String timeStamp = timeStamp = Long.toString(System.currentTimeMillis() / 1000l); | |||
| String nonce = genRandomStr(); | |||
| try { | |||
| String signature = SHA1.gen(token, timeStamp, nonce, encryptedXml); | |||
| String result = generateXml(encryptedXml, signature, timeStamp, nonce); | |||
| return result; | |||
| } catch (NoSuchAlgorithmException e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| /** | |||
| * 对明文进行加密. | |||
| * | |||
| * @param plainText 需要加密的明文 | |||
| * @return 加密后base64编码的字符串 | |||
| */ | |||
| protected String encrypt(String randomStr, String plainText) { | |||
| ByteGroup byteCollector = new ByteGroup(); | |||
| byte[] randomStringBytes = randomStr.getBytes(CHARSET); | |||
| byte[] plainTextBytes = plainText.getBytes(CHARSET); | |||
| byte[] bytesOfSizeInNetworkOrder = number2BytesInNetworkOrder(plainTextBytes.length); | |||
| byte[] appIdBytes = appId.getBytes(CHARSET); | |||
| // randomStr + networkBytesOrder + text + appid | |||
| byteCollector.addBytes(randomStringBytes); | |||
| byteCollector.addBytes(bytesOfSizeInNetworkOrder); | |||
| byteCollector.addBytes(plainTextBytes); | |||
| byteCollector.addBytes(appIdBytes); | |||
| // ... + pad: 使用自定义的填充方式对明文进行补位填充 | |||
| byte[] padBytes = PKCS7Encoder.encode(byteCollector.size()); | |||
| byteCollector.addBytes(padBytes); | |||
| // 获得最终的字节流, 未加密 | |||
| byte[] unencrypted = byteCollector.toBytes(); | |||
| try { | |||
| // 设置加密模式为AES的CBC模式 | |||
| Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding"); | |||
| SecretKeySpec keySpec = new SecretKeySpec(aesKey, "AES"); | |||
| IvParameterSpec iv = new IvParameterSpec(aesKey, 0, 16); | |||
| cipher.init(Cipher.ENCRYPT_MODE, keySpec, iv); | |||
| // 加密 | |||
| byte[] encrypted = cipher.doFinal(unencrypted); | |||
| // 使用BASE64对加密后的字符串进行编码 | |||
| String base64Encrypted = base64.encodeToString(encrypted); | |||
| return base64Encrypted; | |||
| } catch (Exception e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| /** | |||
| * 检验消息的真实性,并且获取解密后的明文. | |||
| * <ol> | |||
| * <li>利用收到的密文生成安全签名,进行签名验证</li> | |||
| * <li>若验证通过,则提取xml中的加密消息</li> | |||
| * <li>对消息进行解密</li> | |||
| * </ol> | |||
| * | |||
| * @param msgSignature 签名串,对应URL参数的msg_signature | |||
| * @param timeStamp 时间戳,对应URL参数的timestamp | |||
| * @param nonce 随机串,对应URL参数的nonce | |||
| * @param encryptedXml 密文,对应POST请求的数据 | |||
| * @return 解密后的原文 | |||
| */ | |||
| public String decrypt(String msgSignature, String timeStamp, String nonce, String encryptedXml) { | |||
| // 密钥,公众账号的app secret | |||
| // 提取密文 | |||
| String cipherText = extractEncryptPart(encryptedXml); | |||
| try { | |||
| // 验证安全签名 | |||
| String signature = SHA1.gen(token, timeStamp, nonce, cipherText); | |||
| if (!signature.equals(msgSignature)) { | |||
| throw new RuntimeException("加密消息签名校验失败"); | |||
| } | |||
| } catch (NoSuchAlgorithmException e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| // 解密 | |||
| String result = decrypt(cipherText); | |||
| return result; | |||
| } | |||
| /** | |||
| * 对密文进行解密. | |||
| * | |||
| * @param cipherText 需要解密的密文 | |||
| * @return 解密得到的明文 | |||
| */ | |||
| protected String decrypt(String cipherText) { | |||
| byte[] original; | |||
| try { | |||
| // 设置解密模式为AES的CBC模式 | |||
| Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding"); | |||
| SecretKeySpec key_spec = new SecretKeySpec(aesKey, "AES"); | |||
| IvParameterSpec iv = new IvParameterSpec(Arrays.copyOfRange(aesKey, 0, 16)); | |||
| cipher.init(Cipher.DECRYPT_MODE, key_spec, iv); | |||
| // 使用BASE64对密文进行解码 | |||
| byte[] encrypted = Base64.decodeBase64(cipherText); | |||
| // 解密 | |||
| original = cipher.doFinal(encrypted); | |||
| } catch (Exception e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| String xmlContent, from_appid; | |||
| try { | |||
| // 去除补位字符 | |||
| byte[] bytes = PKCS7Encoder.decode(original); | |||
| // 分离16位随机字符串,网络字节序和AppId | |||
| byte[] networkOrder = Arrays.copyOfRange(bytes, 16, 20); | |||
| int xmlLength = bytesNetworkOrder2Number(networkOrder); | |||
| xmlContent = new String(Arrays.copyOfRange(bytes, 20, 20 + xmlLength), CHARSET); | |||
| from_appid = new String(Arrays.copyOfRange(bytes, 20 + xmlLength, bytes.length), | |||
| CHARSET); | |||
| } catch (Exception e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| // appid不相同的情况 | |||
| if (!from_appid.equals(appId)) { | |||
| throw new RuntimeException("AppID不正确"); | |||
| } | |||
| return xmlContent; | |||
| } | |||
| /** | |||
| * 将一个数字转换成生成4个字节的网络字节序bytes数组 | |||
| * | |||
| * @param number | |||
| */ | |||
| private byte[] number2BytesInNetworkOrder(int number) { | |||
| byte[] orderBytes = new byte[4]; | |||
| orderBytes[3] = (byte) (number & 0xFF); | |||
| orderBytes[2] = (byte) (number >> 8 & 0xFF); | |||
| orderBytes[1] = (byte) (number >> 16 & 0xFF); | |||
| orderBytes[0] = (byte) (number >> 24 & 0xFF); | |||
| return orderBytes; | |||
| } | |||
| /** | |||
| * 4个字节的网络字节序bytes数组还原成一个数字 | |||
| * | |||
| * @param bytesInNetworkOrder | |||
| */ | |||
| private int bytesNetworkOrder2Number(byte[] bytesInNetworkOrder) { | |||
| int sourceNumber = 0; | |||
| for (int i = 0; i < 4; i++) { | |||
| sourceNumber <<= 8; | |||
| sourceNumber |= bytesInNetworkOrder[i] & 0xff; | |||
| } | |||
| return sourceNumber; | |||
| } | |||
| /** | |||
| * 随机生成16位字符串 | |||
| * | |||
| * @return | |||
| */ | |||
| private String genRandomStr() { | |||
| String base = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; | |||
| Random random = new Random(); | |||
| StringBuffer sb = new StringBuffer(); | |||
| for (int i = 0; i < 16; i++) { | |||
| int number = random.nextInt(base.length()); | |||
| sb.append(base.charAt(number)); | |||
| } | |||
| return sb.toString(); | |||
| } | |||
| /** | |||
| * 生成xml消息 | |||
| * | |||
| * @param encrypt 加密后的消息密文 | |||
| * @param signature 安全签名 | |||
| * @param timestamp 时间戳 | |||
| * @param nonce 随机字符串 | |||
| * @return 生成的xml字符串 | |||
| */ | |||
| private String generateXml(String encrypt, String signature, String timestamp, String nonce) { | |||
| String format = | |||
| "<xml>\n" | |||
| + "<Encrypt><![CDATA[%1$s]]></Encrypt>\n" | |||
| + "<MsgSignature><![CDATA[%2$s]]></MsgSignature>\n" | |||
| + "<TimeStamp>%3$s</TimeStamp>\n" | |||
| + "<Nonce><![CDATA[%4$s]]></Nonce>\n" | |||
| + "</xml>"; | |||
| return String.format(format, encrypt, signature, timestamp, nonce); | |||
| } | |||
| static String extractEncryptPart(String xml) { | |||
| try { | |||
| DocumentBuilder db = builderLocal.get(); | |||
| Document document = db.parse(new InputSource(new StringReader(xml))); | |||
| Element root = document.getDocumentElement(); | |||
| return root.getElementsByTagName("Encrypt").item(0).getTextContent(); | |||
| } catch (Exception e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| } | |||
| @@ -5,8 +5,6 @@ import java.io.InputStream; | |||
| import java.io.StringReader; | |||
| import java.io.StringWriter; | |||
| import java.io.Writer; | |||
| import java.util.HashMap; | |||
| import java.util.Map; | |||
| import javax.xml.bind.*; | |||
| @@ -17,7 +15,7 @@ import com.sun.xml.bind.marshaller.CharacterEscapeHandler; | |||
| public class XmlTransformer { | |||
| protected static final JAXBContext jaxbContext = initJAXBContext(); | |||
| protected static final JAXBContext JAXB_CONTEXT = initJAXBContext(); | |||
| /** | |||
| * xml -> pojo | |||
| @@ -29,16 +27,14 @@ public class XmlTransformer { | |||
| */ | |||
| @SuppressWarnings("unchecked") | |||
| public static <T> T fromXml(Class<T> clazz, String xml) throws JAXBException { | |||
| JAXBContext context = jaxbContext; | |||
| Unmarshaller um = context.createUnmarshaller(); | |||
| Unmarshaller um = JAXB_CONTEXT.createUnmarshaller(); | |||
| T object = (T) um.unmarshal(new StringReader(xml)); | |||
| return object; | |||
| } | |||
| @SuppressWarnings("unchecked") | |||
| public static <T> T fromXml(Class<T> clazz, InputStream is) throws JAXBException { | |||
| JAXBContext context = jaxbContext; | |||
| Unmarshaller um = context.createUnmarshaller(); | |||
| Unmarshaller um = JAXB_CONTEXT.createUnmarshaller(); | |||
| InputSource inputSource = new InputSource(is); | |||
| inputSource.setEncoding("utf-8"); | |||
| T object = (T) um.unmarshal(inputSource); | |||
| @@ -60,14 +56,13 @@ public class XmlTransformer { | |||
| } | |||
| public static <T> void toXml(Class<T> clazz, T object, Writer writer) throws JAXBException { | |||
| JAXBContext context = jaxbContext; | |||
| Marshaller m = context.createMarshaller(); | |||
| Marshaller m = JAXB_CONTEXT.createMarshaller(); | |||
| m.setProperty(Marshaller.JAXB_FORMATTED_OUTPUT, true); | |||
| m.setProperty(CharacterEscapeHandler.class.getName(), characterUnescapeHandler); | |||
| m.setProperty(CharacterEscapeHandler.class.getName(), CHAR_ESCAPE_HANDLER); | |||
| m.marshal(object, writer); | |||
| } | |||
| protected static CharacterEscapeHandler characterUnescapeHandler = new CharacterUnescapeHandler(); | |||
| protected static final CharacterEscapeHandler CHAR_ESCAPE_HANDLER = new CharacterUnescapeHandler(); | |||
| protected static class CharacterUnescapeHandler implements CharacterEscapeHandler { | |||
| public void escape(char[] ac, int i, int j, boolean flag, Writer writer) throws IOException { | |||
| @@ -2,7 +2,9 @@ package me.chanjar.weixin.api; | |||
| import java.io.InputStream; | |||
| import javax.xml.bind.JAXBContext; | |||
| import javax.xml.bind.JAXBException; | |||
| import javax.xml.bind.Unmarshaller; | |||
| import javax.xml.bind.annotation.XmlAccessType; | |||
| import javax.xml.bind.annotation.XmlAccessorType; | |||
| import javax.xml.bind.annotation.XmlRootElement; | |||
| @@ -13,6 +15,7 @@ import me.chanjar.weixin.util.xml.XmlTransformer; | |||
| import com.google.inject.Binder; | |||
| import com.google.inject.Module; | |||
| import org.xml.sax.InputSource; | |||
| public class ApiTestModule implements Module { | |||
| @@ -20,22 +23,31 @@ public class ApiTestModule implements Module { | |||
| public void configure(Binder binder) { | |||
| try { | |||
| InputStream is1 = ClassLoader.getSystemResourceAsStream("test-config.xml"); | |||
| WxXmlConfigStorage config = XmlTransformer.fromXml(WxXmlConfigStorage.class, is1); | |||
| WxXmlConfigStorage config = fromXml(WxXmlConfigStorage.class, is1); | |||
| WxServiceImpl wxService = new WxServiceImpl(); | |||
| wxService.setWxConfigStorage(config); | |||
| binder.bind(WxServiceImpl.class).toInstance(wxService); | |||
| binder.bind(WxConfigStorage.class).toInstance(config); | |||
| } catch (JAXBException e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| public static <T> T fromXml(Class<T> clazz, InputStream is) throws JAXBException { | |||
| Unmarshaller um = JAXBContext.newInstance(clazz).createUnmarshaller(); | |||
| InputSource inputSource = new InputSource(is); | |||
| inputSource.setEncoding("utf-8"); | |||
| T object = (T) um.unmarshal(inputSource); | |||
| return object; | |||
| } | |||
| @XmlRootElement(name = "xml") | |||
| @XmlAccessorType(XmlAccessType.FIELD) | |||
| public static class WxXmlConfigStorage extends WxInMemoryConfigStorage { | |||
| protected String openId; | |||
| public String getOpenId() { | |||
| return openId; | |||
| } | |||
| @@ -33,9 +33,9 @@ public class WxBaseAPITest { | |||
| } | |||
| public void testCheckSignature() throws WxErrorException { | |||
| String timestamp = "23234235423246"; | |||
| String nonce = "y7didfkcmvnbd90sdofjkiefhsd"; | |||
| String signature = "77b6651628dfb9a64bfb0d3432ee053ac566a459"; | |||
| String timestamp = "1413729506"; | |||
| String nonce = "1753282854"; | |||
| String signature = "af210121811dce2d6f306612cb133cba490e818b"; | |||
| Assert.assertTrue(wxService.checkSignature(timestamp, nonce, signature)); | |||
| } | |||
| @@ -71,7 +71,7 @@ public class WxMessageRouterTest { | |||
| router.rule().handler(new WxMessageHandler() { | |||
| @Override | |||
| public WxXmlOutMessage handle(WxXmlMessage wxMessage, Map<String, Object> context) { | |||
| // TODO Auto-generated method stub | |||
| System.out.println(wxMessage.toString()); | |||
| return null; | |||
| } | |||
| }).end(); | |||
| @@ -0,0 +1,35 @@ | |||
| package me.chanjar.weixin.demo; | |||
| import me.chanjar.weixin.api.WxInMemoryConfigStorage; | |||
| import org.xml.sax.InputSource; | |||
| import javax.xml.bind.JAXBContext; | |||
| import javax.xml.bind.JAXBException; | |||
| import javax.xml.bind.Unmarshaller; | |||
| import javax.xml.bind.annotation.XmlAccessType; | |||
| import javax.xml.bind.annotation.XmlAccessorType; | |||
| import javax.xml.bind.annotation.XmlRootElement; | |||
| import java.io.InputStream; | |||
| /** | |||
| * @author Daniel Qian | |||
| */ | |||
| @XmlRootElement(name = "xml") | |||
| @XmlAccessorType(XmlAccessType.FIELD) | |||
| class WxTestConfigStorage extends WxInMemoryConfigStorage { | |||
| @Override | |||
| public String toString() { | |||
| return "SimpleWxConfigProvider [appId=" + appId + ", secret=" + secret + ", accessToken=" + accessToken | |||
| + ", expiresIn=" + expiresIn + ", token=" + token + ", aesKey=" + aesKey + "]"; | |||
| } | |||
| public static WxTestConfigStorage fromXml(InputStream is) throws JAXBException { | |||
| Unmarshaller um = JAXBContext.newInstance(WxTestConfigStorage.class).createUnmarshaller(); | |||
| InputSource inputSource = new InputSource(is); | |||
| inputSource.setEncoding("utf-8"); | |||
| return (WxTestConfigStorage) um.unmarshal(inputSource); | |||
| } | |||
| } | |||
| @@ -0,0 +1,20 @@ | |||
| package me.chanjar.weixin.demo; | |||
| import org.eclipse.jetty.server.Server; | |||
| import org.eclipse.jetty.servlet.ServletHandler; | |||
| /** | |||
| * @author Daniel Qian | |||
| */ | |||
| public class WxTestServer { | |||
| public static void main(String[] args) throws Exception { | |||
| Server server = new Server(8080); | |||
| ServletHandler handler = new ServletHandler(); | |||
| server.setHandler(handler); | |||
| handler.addServletWithMapping(WxTestServlet.class, "/*"); | |||
| server.start(); | |||
| server.join(); | |||
| } | |||
| } | |||
| @@ -0,0 +1,117 @@ | |||
| package me.chanjar.weixin.demo; | |||
| import me.chanjar.weixin.api.*; | |||
| import me.chanjar.weixin.bean.WxXmlMessage; | |||
| import me.chanjar.weixin.bean.WxXmlOutMessage; | |||
| import me.chanjar.weixin.bean.WxXmlOutTextMessage; | |||
| import org.apache.commons.lang3.StringUtils; | |||
| import javax.servlet.ServletException; | |||
| import javax.servlet.http.HttpServlet; | |||
| import javax.servlet.http.HttpServletRequest; | |||
| import javax.servlet.http.HttpServletResponse; | |||
| import javax.xml.bind.JAXBException; | |||
| import java.io.IOException; | |||
| import java.io.InputStream; | |||
| import java.util.Map; | |||
| /** | |||
| * @author Daniel Qian | |||
| */ | |||
| public class WxTestServlet extends HttpServlet { | |||
| protected WxService wxService; | |||
| protected WxConfigStorage wxConfigStorage; | |||
| protected WxMessageRouter wxMessageRouter; | |||
| @Override public void init() throws ServletException { | |||
| // | |||
| super.init(); | |||
| try { | |||
| InputStream is1 = ClassLoader.getSystemResourceAsStream("test-config.xml"); | |||
| WxTestConfigStorage config = WxTestConfigStorage.fromXml(is1); | |||
| wxConfigStorage = config; | |||
| wxService = new WxServiceImpl(); | |||
| wxService.setWxConfigStorage(config); | |||
| WxMessageHandler handler = new WxMessageHandler() { | |||
| @Override public WxXmlOutMessage handle(WxXmlMessage wxMessage, Map<String, Object> context) { | |||
| WxXmlOutTextMessage m | |||
| = WxXmlOutMessage.TEXT().content("测试加密消息").fromUser(wxMessage.getToUserName()) | |||
| .touser(wxMessage.getFromUserName()).build(); | |||
| return m; | |||
| } | |||
| }; | |||
| wxMessageRouter = new WxMessageRouter(); | |||
| wxMessageRouter | |||
| .rule() | |||
| .async(false) | |||
| .content("哈哈") // 拦截内容为“哈哈”的消息 | |||
| .handler(handler) | |||
| .end(); | |||
| } catch (JAXBException e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| @Override protected void service(HttpServletRequest request, HttpServletResponse response) | |||
| throws ServletException, IOException { | |||
| String signature = request.getParameter("signature"); | |||
| String nonce = request.getParameter("nonce"); | |||
| String timestamp = request.getParameter("timestamp"); | |||
| response.setContentType("text/html;charset=utf-8"); | |||
| response.setStatus(HttpServletResponse.SC_OK); | |||
| if (!wxService.checkSignature(timestamp, nonce, signature)) { | |||
| // 消息签名不正确,说明不是公众平台发过来的消息 | |||
| response.getWriter().println("非法请求"); | |||
| return; | |||
| } | |||
| String echostr = request.getParameter("echostr"); | |||
| if (StringUtils.isNotBlank(echostr)) { | |||
| // 说明是一个仅仅用来验证的请求,回显echostr | |||
| response.getWriter().println(echostr); | |||
| return; | |||
| } | |||
| String encryptType = StringUtils.isBlank(request.getParameter("encrypt_type")) ? | |||
| "raw" : | |||
| request.getParameter("encrypt_type"); | |||
| WxXmlMessage inMessage = null; | |||
| if ("raw".equals(encryptType)) { | |||
| // 明文传输的消息 | |||
| inMessage = WxXmlMessage.fromXml(request.getInputStream()); | |||
| } else if ("aes".equals(encryptType)) { | |||
| // 是aes加密的消息 | |||
| String msgSignature = request.getParameter("msg_signature"); | |||
| inMessage = WxXmlMessage.fromEncryptedXml( | |||
| request.getInputStream(), | |||
| wxConfigStorage, | |||
| timestamp, nonce, msgSignature); | |||
| } else { | |||
| response.getWriter().println("不可识别的加密类型"); | |||
| return; | |||
| } | |||
| WxXmlOutMessage outMessage = wxMessageRouter.route(inMessage); | |||
| if (outMessage != null) { | |||
| if ("raw".equals(encryptType)) { | |||
| response.getWriter().write(outMessage.toXml()); | |||
| } else if ("aes".equals(encryptType)) { | |||
| response.getWriter().write(outMessage.toEncryptedXml(wxConfigStorage)); | |||
| } | |||
| return; | |||
| } | |||
| } | |||
| } | |||
| @@ -0,0 +1,94 @@ | |||
| package me.chanjar.weixin.util.crypto; | |||
| import org.testng.annotations.Test; | |||
| import org.w3c.dom.Document; | |||
| import org.w3c.dom.Element; | |||
| import org.w3c.dom.NodeList; | |||
| import org.xml.sax.InputSource; | |||
| import org.xml.sax.SAXException; | |||
| import javax.xml.parsers.DocumentBuilder; | |||
| import javax.xml.parsers.DocumentBuilderFactory; | |||
| import javax.xml.parsers.ParserConfigurationException; | |||
| import java.io.IOException; | |||
| import java.io.StringReader; | |||
| import static org.testng.Assert.*; | |||
| @Test | |||
| public class WxCryptUtilTest { | |||
| String encodingAesKey = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFG"; | |||
| String token = "pamtest"; | |||
| String timestamp = "1409304348"; | |||
| String nonce = "xxxxxx"; | |||
| String appId = "wxb11529c136998cb6"; | |||
| String randomStr = "aaaabbbbccccdddd"; | |||
| String xmlFormat = "<xml><ToUserName><![CDATA[toUser]]></ToUserName><Encrypt><![CDATA[%1$s]]></Encrypt></xml>"; | |||
| String replyMsg = "我是中文abcd123"; | |||
| String afterAesEncrypt = "jn1L23DB+6ELqJ+6bruv21Y6MD7KeIfP82D6gU39rmkgczbWwt5+3bnyg5K55bgVtVzd832WzZGMhkP72vVOfg=="; | |||
| String replyMsg2 = "<xml><ToUserName><![CDATA[oia2Tj我是中文jewbmiOUlr6X-1crbLOvLw]]></ToUserName><FromUserName><![CDATA[gh_7f083739789a]]></FromUserName><CreateTime>1407743423</CreateTime><MsgType><![CDATA[video]]></MsgType><Video><MediaId><![CDATA[eYJ1MbwPRJtOvIEabaxHs7TX2D-HV71s79GUxqdUkjm6Gs2Ed1KF3ulAOA9H1xG0]]></MediaId><Title><![CDATA[testCallBackReplyVideo]]></Title><Description><![CDATA[testCallBackReplyVideo]]></Description></Video></xml>"; | |||
| String afterAesEncrypt2 = "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"; | |||
| public void testNormal() throws ParserConfigurationException, SAXException, IOException { | |||
| WxCryptUtil pc = new WxCryptUtil(token, encodingAesKey, appId); | |||
| String encryptedXml = pc.encrypt(replyMsg); | |||
| System.out.println(encryptedXml); | |||
| DocumentBuilderFactory documentBuilderFactory = DocumentBuilderFactory.newInstance(); | |||
| DocumentBuilder documentBuilder = documentBuilderFactory.newDocumentBuilder(); | |||
| Document document = documentBuilder.parse(new InputSource(new StringReader(encryptedXml))); | |||
| Element root = document.getDocumentElement(); | |||
| String cipherText = root.getElementsByTagName("Encrypt").item(0).getTextContent(); | |||
| String msgSignature = root.getElementsByTagName("MsgSignature").item(0).getTextContent(); | |||
| String timestamp = root.getElementsByTagName("TimeStamp").item(0).getTextContent(); | |||
| String nonce = root.getElementsByTagName("Nonce").item(0).getTextContent(); | |||
| String messageText = String.format(xmlFormat, cipherText); | |||
| // 第三方收到公众号平台发送的消息 | |||
| String plainMessage = pc.decrypt(cipherText); | |||
| System.out.println(plainMessage); | |||
| assertEquals(plainMessage, replyMsg); | |||
| } | |||
| public void testAesEncrypt() { | |||
| WxCryptUtil pc = new WxCryptUtil(token, encodingAesKey, appId); | |||
| assertEquals(pc.encrypt(randomStr, replyMsg), afterAesEncrypt); | |||
| } | |||
| public void testAesEncrypt2() { | |||
| WxCryptUtil pc = new WxCryptUtil(token, encodingAesKey, appId); | |||
| assertEquals(pc.encrypt(randomStr, replyMsg2), afterAesEncrypt2); | |||
| } | |||
| public void testValidateSignatureError() throws ParserConfigurationException, SAXException, | |||
| IOException { | |||
| try { | |||
| WxCryptUtil pc = new WxCryptUtil(token, encodingAesKey, appId); | |||
| String afterEncrpt = pc.encrypt(replyMsg); | |||
| DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance(); | |||
| DocumentBuilder db = dbf.newDocumentBuilder(); | |||
| StringReader sr = new StringReader(afterEncrpt); | |||
| InputSource is = new InputSource(sr); | |||
| Document document = db.parse(is); | |||
| Element root = document.getDocumentElement(); | |||
| NodeList nodelist1 = root.getElementsByTagName("Encrypt"); | |||
| String encrypt = nodelist1.item(0).getTextContent(); | |||
| String fromXML = String.format(xmlFormat, encrypt); | |||
| pc.decrypt("12345", timestamp, nonce, fromXML); // 这里签名错误 | |||
| } catch (RuntimeException e) { | |||
| assertEquals(e.getMessage(), "加密消息签名校验失败"); | |||
| return; | |||
| } | |||
| fail("错误流程不抛出异常???"); | |||
| } | |||
| } | |||
| @@ -29,6 +29,7 @@ | |||
| <class name="me.chanjar.weixin.bean.WxXmlOutIVideoMessageTest" /> | |||
| <class name="me.chanjar.weixin.bean.WxXmlOutIVoiceMessageTest" /> | |||
| <class name="me.chanjar.weixin.bean.WxXmlOutTextMessageTest" /> | |||
| <class name="me.chanjar.weixin.util.crypto.WxCryptUtilTest" /> | |||
| </classes> | |||
| </test> | |||
| </suite> | |||