记一次微信人脸k12联调坑

1.商户号 mchid,子商户号 sub_mchid,商户公众号 appid,子商户公众号z sub_appid一定要对齐

2.签名的生成及验证，下附java代码，验证可以在线支持；

import okhttp3.HttpUrl;

import java.security.Signature;

import java.util.Base64;

// Authorization: <schema> <token>

// GET - getToken("GET", httpurl, "")

// POST - getToken("POST", httpurl, json)

String schema = "WECHATPAY2-SHA256-RSA2048";

HttpUrl httpurl = HttpUrl.parse(url);

String getToken(String method, HttpUrl url, String body) {

String nonceStr = "your nonce string";

long timestamp = System.currentTimeMillis() / 1000;

String message = buildMessage(method, url, timestamp, nonceStr, body);

String signature = sign(message.getBytes("utf-8"));

return "mchid=\"" + yourMerchantId + "\","

+ "nonce_str=\"" + nonceStr + "\","

+ "timestamp=\"" + timestamp + "\","

+ "serial_no=\"" + yourCertificateSerialNo + "\","

+ "signature=\"" + signature + "\"";

}

String sign(byte[] message) {

Signature sign = Signature.getInstance("SHA256withRSA");

sign.initSign(yourPrivateKey);

sign.update(message);

return Base64.getEncoder().encodeToString(sign.sign());

}

String buildMessage(String method, HttpUrl url, long timestamp, String nonceStr, String body) {

String canonicalUrl = url.encodedPath();

if (url.encodedQuery() != null) {

canonicalUrl += "?" + url.encodedQuery();

}

return method + "\n"

+ canonicalUrl + "\n"

+ timestamp + "\n"

+ nonceStr + "\n"

+ body + "\n";

}

微信对外-离线刷脸商户

签约的生成及验证