Java微信公众号配置验证Token

首先我们需要在微信公众平台上填写服务器配置

重点内容     服务器地址URL（一定要外网能访问的到）         在我们提交配置的时候，微信会发送GET请求到URL上，         并会携带 signature，timestamp，nonce，echostr 四个参数，         我的URL是 http://www.baidu.com/wxpublic/verify_wx_token，         也就是 域名 + 接口 路径，至于怎么验证，我会在下面说到         signature： 微信加密签名，signature结合了我们自己填写的token参数和请求中的timestamp参数、nonce参数         timestamp： 时间戳         nonce： 字符串         echostr： 随机字符串     令牌Token         Token 可由我们自行定义，主要作用是参与生成签名，与微信请求的签名进行比较     消息加解密密钥EncodingAESKey         EncodingAESKey 可由我们自行定义或随机生成，主要作用是参与接收和推送给公众平台消息的加解密     消息加解密方式         此处我选择的是安全模式，大家可以根据自己的具体需求，选择相应的模式

 @RequestMapping("/wxpublic/verify_wx_token") @ResponseBody     public String verifyWXToken(HttpServletRequest request) throws AesException {         String msgSignature = request.getParameter("signature");         String msgTimestamp = request.getParameter("timestamp");         String msgNonce = request.getParameter("nonce");         String echostr = request.getParameter("echostr");         if (WXPublicUtils.verifyUrl(msgSignature, msgTimestamp, msgNonce)) {             return echostr;         }         return null;     }   WXPublicUtils     public class WXPublicUtils {     /**      * 验证Token      * @param msgSignature 签名串，对应URL参数的signature      * @param timeStamp 时间戳，对应URL参数的timestamp      * @param nonce 随机串，对应URL参数的nonce      *      * @return 是否为安全签名      * @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息      */     public static boolean verifyUrl(String msgSignature, String timeStamp, String nonce)             throws AesException {         // 这里的 WXPublicConstants.TOKEN 填写你自己设置的Token就可以了         String signature = SHA1.getSHA1(WXPublicConstants.TOKEN, timeStamp, nonce);         if (!signature.equals(msgSignature)) {             throw new AesException(AesException.ValidateSignatureError);         }         return true;     } }    AesException @SuppressWarnings("serial") public class AesException extends Exception {     public final static int OK = 0;     public final static int ValidateSignatureError = -40001;     public final static int ParseXmlError = -40002;     public final static int ComputeSignatureError = -40003;     public final static int IllegalAesKey = -40004;     public final static int ValidateAppidError = -40005;     public final static int EncryptAESError = -40006;     public final static int DecryptAESError = -40007;     public final static int IllegalBuffer = -40008;     public final static int EncodeBase64Error = -40009;     public final static int DecodeBase64Error = -40010;     public final static int GenReturnXmlError = -40011;     private int code;     private static String getMessage(int code) {         switch (code) {         case ValidateSignatureError:             return "签名验证错误";         case ParseXmlError:             return "xml解析失败";         case ComputeSignatureError:             return "sha加密生成签名失败";         case IllegalAesKey:             return "SymmetricKey非法";         case ValidateAppidError:             return "appid校验失败";         case EncryptAESError:             return "aes加密失败";         case DecryptAESError:             return "aes解密失败";         case IllegalBuffer:             return "解密后得到的buffer非法";         case EncodeBase64Error:             return "base64加密错误";         case DecodeBase64Error:             return "base64解密错误";         case GenReturnXmlError:             return "xml生成失败";         default:             return null;         }     }     public int getCode() {         return code;     }     public AesException(int code) {         super(getMessage(code));         this.code = code;     } } SHA1 public class SHA1 {     /**      * 用SHA1算法验证Token      *      * @param token     票据      * @param timestamp 时间戳      * @param nonce     随机字符串      * @return 安全签名      * @throws AesException      */     public static String getSHA1(String token, String timestamp, String nonce) throws AesException {         try {             String[] array = new String[]{token, timestamp, nonce};             StringBuffer sb = new StringBuffer();             // 字符串排序             Arrays.sort(array);             for (int i = 0; i < 3; i++) {                 sb.append(array[i]);             }             String str = sb.toString();             // SHA1签名生成             MessageDigest md = MessageDigest.getInstance("SHA-1");             md.update(str.getBytes());             byte[] digest = md.digest();             StringBuffer hexstr = new StringBuffer();             String shaHex = "";             for (int i = 0; i < digest.length; i++) {                 shaHex = Integer.toHexString(digest[i] & 0xFF);                 if (shaHex.length() < 2) {                     hexstr.append(0);                 }                 hexstr.append(shaHex);             }             return hexstr.toString();         } catch (Exception e) {             e.printStackTrace();             throw new AesException(AesException.ComputeSignatureError);         }     } }