package com.base.action;import java.io.PrintWriter;import java.security.MessageDigest;import java.security.NoSuchAlgorithmException;import java.util.Arrays;import java.util.Enumeration;import javax.servlet.http.HttpServletRequest;import javax.servlet.http.HttpServletResponse;import org.apache.log4j.Logger;import org.springframework.stereotype.Controller;import org.springframework.web.bind.annotation.RequestMapping;@RequestMapping("/wechat")@Controllerpublic class WechatController { private static Logger logger = Logger.getLogger(WechatController.class);   private static String token = "xuejp";  @RequestMapping(value = "/wx.do") public void get(HttpServletRequest request, HttpServletResponse response) throws Exception {  System.out.println("========WechatController========= ");  logger.info("-----來自微信的請求----");   Enumeration pNames = request.getParameterNames();  while (pNames.hasMoreElements()) {   String name = (String) pNames.nextElement();   String value = request.getParameter(name);   //查看微信的請求都帶了哪些參數(shù)   String log = "name =" + name + "  value =" + value;   logger.error(log);  }   String signature = request.getParameter("signature");/// 微信加密簽名  String timestamp = request.getParameter("timestamp");/// 時(shí)間戳  String nonce = request.getParameter("nonce"); /// 隨機(jī)數(shù)  String echostr = request.getParameter("echostr"); // 隨機(jī)字符串  PrintWriter out = response.getWriter();   if (checkSignature(signature, timestamp, nonce)) {   out.print(echostr);  }   out.print(token);   out.close();  out = null;  }  /**  * 校驗(yàn)簽名  */ public static boolean checkSignature(String signature, String timestamp, String nonce) {  System.out.println("signature:" + signature + "timestamp:" + timestamp + "nonc:" + nonce);  String[] arr = new String[] { token, timestamp, nonce };  // 將token、timestamp、nonce三個(gè)參數(shù)進(jìn)行字典序排序  Arrays.sort(arr);  StringBuilder content = new StringBuilder();  for (int i = 0; i < arr.length; i++) {   content.append(arr[i]);  }  MessageDigest md = null;  String tmpStr = null;   try {   md = MessageDigest.getInstance("SHA-1");   // 將三個(gè)參數(shù)字符串拼接成一個(gè)字符串進(jìn)行sha1加密   byte[] digest = md.digest(content.toString().getBytes());   tmpStr = byteToStr(digest);  } catch (NoSuchAlgorithmException e) {   e.printStackTrace();  }   content = null;  // 將sha1加密后的字符串可與signature對比，標(biāo)識(shí)該請求來源于微信  System.out.println(tmpStr.equals(signature.toUpperCase()));  return tmpStr != null ? tmpStr.equals(signature.toUpperCase()) : false; }  /**  * 將字節(jié)數(shù)組轉(zhuǎn)換為十六進(jìn)制字符串  *   * @param byteArray  * @return  */ private static String byteToStr(byte[] byteArray) {  String strDigest = "";  for (int i = 0; i < byteArray.length; i++) {   strDigest += byteToHexStr(byteArray[i]);  }  return strDigest; }  /**  * 將字節(jié)轉(zhuǎn)換為十六進(jìn)制字符串  *   * @param mByte  * @return  */ private static String byteToHexStr(byte mByte) {  char[] Digit = { '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A', 'B', 'C', 'D', 'E', 'F' };  char[] tempArr = new char[2];  tempArr[0] = Digit[(mByte >>> 4) & 0X0F];  tempArr[1] = Digit[mByte & 0X0F];   String s = new String(tempArr);  return s; }}