微信通过txt文件验证服务器是否可用

• 控制器

@GetMapping("/valid")
    @ResponseBody
    public void valid(
	    HttpServletResponse response,
	    @RequestParam(value = "signature") String signature,
	    @RequestParam(value = "timestamp") String timestamp,
	    @RequestParam(value = "nonce") String nonce,
	    @RequestParam(value = "echostr") String echostr) {
	wechatService.signValid(signature, timestamp, nonce, echostr, response);
}

• service

public void signValid(String signature, String timestamp, String nonce, String echoStr, HttpServletResponse response) {
	// 加密/校验流程如下:
	// 1. 将token、timestamp、nonce三个参数进行字典序排序
	// 2. 将三个参数字符串拼接成一个字符串进行sha1加密
	// 3. 开发者获得加密后的字符串可与signature对比，标识该请求来源于微信
	try {
	    if (SignUtil.checkSignature(signature, timestamp, nonce)) {
	        PrintWriter out = response.getWriter();
	        out.print(echoStr);
	        out.close();
	    }
	} catch (Exception e) {
	    e.getMessage();
	}
}

• SignUtil工具

public static boolean checkSignature(String signature, String timestamp, String nonce) {
	//token：必须与接口配置信息中的Token要一致
	String[] arr = new String[]{token, timestamp, nonce};
	// 将 token、timestamp、nonce 三个参数进行字典序排序
	Arrays.sort(arr);
	StringBuilder content = new StringBuilder();
	for (int i = 0; i < arr.length; i++) {
	    content.append(arr[i]);
	}
	MessageDigest md = null;
	String tmpStr = null;
	
	try {
	    md = MessageDigest.getInstance("SHA-1");
	    // 将三个参数字符串拼接成一个字符串进行 sha1 加密
	    byte[] digest = md.digest(content.toString().getBytes());
	    tmpStr = byteToStr(digest);
	} catch (NoSuchAlgorithmException e) {
	    e.printStackTrace();
	}
	
	content = null;
	// 将 sha1 加密后的字符串可与 signature 对比，标识该请求来源于微信
return tmpStr != null && tmpStr.equals(signature.toUpperCase());
}