微信V3支付遇到验签失败

import okhttp3.HttpUrl;

import java.security.Signature;

import java.util.Base64;

// Authorization: <schema> <token>

// GET - getToken("GET", httpurl, "")       get的时候body 传入为空  如果这里有值的话会验签失败

// POST - getToken("POST", httpurl, json)

String schema = "WECHATPAY2-SHA256-RSA2048";

HttpUrl httpurl = HttpUrl.parse(url);

String getToken(String method, HttpUrl url, String body) {

String nonceStr = "your nonce string";

long timestamp = System.currentTimeMillis() / 1000;

String message = buildMessage(method, url, timestamp, nonceStr, body);

String signature = sign(message.getBytes("utf-8"));

return "mchid=\"" + yourMerchantId + "\","

+ "nonce_str=\"" + nonceStr + "\","

+ "timestamp=\"" + timestamp + "\","

+ "serial_no=\"" + yourCertificateSerialNo + "\","

+ "signature=\"" + signature + "\"";

}

String sign(byte[] message) {

Signature sign = Signature.getInstance("SHA256withRSA");

sign.initSign(yourPrivateKey);

sign.update(message);

return Base64.getEncoder().encodeToString(sign.sign());

}

String buildMessage(String method, HttpUrl url, long timestamp, String nonceStr, String body) {

String canonicalUrl = url.encodedPath();

if (url.encodedQuery() != null) {

canonicalUrl += "?" + url.encodedQuery();

}

return method + "\n"

+ canonicalUrl + "\n"

+ timestamp + "\n"

+ nonceStr + "\n"

+ body + "\n";

}