java实现微信小程序登录，并获取用户敏感数据

一、根据前端传过来的微信code，实现小程序登录

二、一般业务需求小程序端和app端的数据都是保持一致的，而微信不同端（小程序，公众号）的openid是不一样的。这时候就可以用到
微信开放平台的unionId，来进行关联。

import java.util.HashMap;
import java.util.Map;
import java.util.UUID;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.util.StringUtils;

import com.alibaba.fastjson.JSONObject;
/**
	 * 登录
	 * 
	 * @Description:TODO
	 * @param code 登录凭证
	 * @param encryptedData  包括敏感数据在内的完整用户信息的加密数据
	 * @param iv  加密算法的初始向量
	 * @return Map<String,Object>
	 * @exception:
	 */
	public Map<String, Object> login(String code,String encryptedData, String iv){
		Map<String, Object> map = new HashMap<>();
		map.put("message", "登录失败");
		Map<String, Object> result = MyUtil.putMapParams("state", 0, "info", map);

		try {
			MiniProgramUtil min = new MiniProgramUtil();
			// 根据code 向微信发送post请求，获取openId
			JSONObject object = min.getSessionKeyOropenid(code);
			// 获取微信openid
			String openId = object.get("openid").toString();
			log.info("openId=======================>>" + openId);
			String session_key = object.get("session_key").toString();
			log.info("session_key=======================>>" + session_key);
			if (StringUtils.isEmpty(openId)) {
				return result;
			}
			String unionid = null;
            try {
				// 对encryptedData加密数据进行AES解密
				String result2 = decrypt(encryptedData, session_key, iv, "UTF-8");

				if (!StringUtils.isEmpty(result2)) {
					// 解密成功
					// 转换成json对象
					JSONObject josn = JSONObject.parseObject(result2);
					unionid = (String) josn.get("unionId");  //微信开发平台唯一标识
				}

			} catch (Exception e) {
				e.printStackTrace();
			}
			User user = userMapper.selectUserByOpenId(openId);
			String token = UUID.randomUUID().toString(); // 生成token
			if (user == null) {
				// 不存在，新增
				user = new User();
				user.setWechat(openId);
				user.setToken(token);
				user.setUnionid(unionid);
				user.setUserType(1);  //普通用户
				userMapper.insertUser(user);
                
				map.put("message", "登录成功");
				map.put("openId", openId);
				map.put("token", token);
				return result = MyUtil.putMapParams("state", 1, "info", map);
			}
			// 有该用户，更新用户token
			user.setToken(token);
			user.setUnionid(unionid);
			userMapper.updateLoginToken(user);
			// 返回
			map.put("message", "登录成功");
			map.put("openId", openId);
			map.put("token", token);
			return result = putMapParams("state", 1, "info", map);
		} catch (Exception e) {
			e.printStackTrace();
		}
		return result;
	}

import java.util.HashMap;
import java.util.Map;
import java.util.ResourceBundle;
import java.util.UUID;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.util.StringUtils;

import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
/**
	 * 获取微信小程序 session_key 和 openid
	 * 
	 * @param code
	 *            调用微信登陆返回的Code
	 * @return
	 */
	public  JSONObject getSessionKeyOropenid(String code) {
		
		ResourceBundle resource = ResourceBundle.getBundle("weixin"); // 读取属性文件
		String requestUrl = resource.getString("url"); // 请求地址
														// https://api.weixin.qq.com/sns/jscode2session
		Map<String, String> requestUrlParam = new HashMap<String, String>();
		requestUrlParam.put("appid", resource.getString("appId")); // 开发者设置中的appId
		requestUrlParam.put("secret", resource.getString("appSecret")); // 开发者设置中的appSecret
		requestUrlParam.put("js_code", code); // 小程序调用wx.login返回的code
		requestUrlParam.put("grant_type", "authorization_code"); // 默认参数

		// 发送post请求读取调用微信 https://api.weixin.qq.com/sns/jscode2session
		// 接口获取openid用户唯一标识
		JSONObject jsonObject = JSON.parseObject(sendPost(requestUrl, requestUrlParam));
		log.info(jsonObject.get("openid").toString());
		return jsonObject;
	}

import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.net.URL;
import java.net.URLConnection;
import java.util.Iterator;
import java.util.Map;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

/**
	 * 向指定 URL 发送POST方法的请求
	 * @param url  发送请求的 UR
	 * @param param 请求参数
	 * @return 所代表远程资源的响应结果
	 */
	public static String sendPost(String url, Map<String, ?> paramMap) {
		PrintWriter out = null;
		BufferedReader in = null;
		String result = "";

		String param = "";
		Iterator<String> it = paramMap.keySet().iterator();

		while (it.hasNext()) {
			String key = it.next();
			param += key + "=" + paramMap.get(key) + "&";
		}

		try {
			URL realUrl = new URL(url);
			// 打开和URL之间的连接
			URLConnection conn = realUrl.openConnection();
			// 设置通用的请求属性
			conn.setRequestProperty("accept", "*/*");
			conn.setRequestProperty("connection", "Keep-Alive");
			conn.setRequestProperty("Accept-Charset", "utf-8");
			conn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
				// 发送POST请求必须设置如下两行
			conn.setDoOutput(true);
			conn.setDoInput(true);
			// 获取URLConnection对象对应的输出流
			out = new PrintWriter(conn.getOutputStream());
			// 发送请求参数
			out.print(param);
			// flush输出流的缓冲
			out.flush();
			// 定义BufferedReader输入流来读取URL的响应
			in = new BufferedReader(new InputStreamReader(conn.getInputStream(), "UTF-8"));
			String line;
			while ((line = in.readLine()) != null) {
				result += line;
			}
		} catch (Exception e) {
			e.printStackTrace();
		}
		// 使用finally块来关闭输出流、输入流
		finally {
			try {
				if (out != null) {
					out.close();
				}
				if (in != null) {
					in.close();
				}
			} catch (IOException ex) {
				ex.printStackTrace();
			}
		}
		return result;
	}
	

import java.io.UnsupportedEncodingException;
import java.security.AlgorithmParameters;
import java.security.InvalidAlgorithmParameterException;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.security.spec.InvalidParameterSpecException;

import javax.crypto.BadPaddingException;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.NoSuchPaddingException;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;

import org.apache.commons.codec.binary.Base64;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

 /**
     * AES解密
     *
     * @param data           //密文，被加密的数据
     * @param key            //秘钥
     * @param iv             //偏移量
     * @param encodingFormat //解密后的结果需要进行的编码
     * @return
     * @throws Exception
     */
    public static String decrypt(String data, String key, String iv, String encodingFormat) throws Exception {
 
        //被加密的数据
        byte[] dataByte = Base64.decodeBase64(data);
        //加密秘钥
        byte[] keyByte = Base64.decodeBase64(key);
        //偏移量
        byte[] ivByte = Base64.decodeBase64(iv);
        try {
            Cipher cipher = Cipher.getInstance("AES/CBC/PKCS7Padding");
            SecretKeySpec spec = new SecretKeySpec(keyByte, "AES");
            AlgorithmParameters parameters = AlgorithmParameters.getInstance("AES");
            parameters.init(new IvParameterSpec(ivByte));
            cipher.init(Cipher.DECRYPT_MODE, spec, parameters);// 初始化
            byte[] resultByte = cipher.doFinal(dataByte);
            if (null != resultByte && resultByte.length > 0) {
                String result = new String(resultByte, encodingFormat);
                return result;
            }
            return null;
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (NoSuchPaddingException e) {
            e.printStackTrace();
        } catch (InvalidParameterSpecException e) {
            e.printStackTrace();
        } catch (InvalidKeyException e) {
            e.printStackTrace();
        } catch (InvalidAlgorithmParameterException e) {
            e.printStackTrace();
        } catch (IllegalBlockSizeException e) {
            e.printStackTrace();
        } catch (BadPaddingException e) {
            e.printStackTrace();
        } catch (UnsupportedEncodingException e) {
            e.printStackTrace();
        }
        return null;
    }

后台基本就完成了