微信公众号回调地址设置

微信公众号回调地址设置

( 设置好按保存之后 微信会向该接口发送验证消息(token) 如果验证成功 配置才能生效,否则会提示错误,一会附上如何验证的代码 )

1.在微信公众平台 => 基本配置中 => 设置地址

2.设置服务器地址

以我的回调地址为例 http:xxxxx/wxMpSendMsgCallBack

3.设置Token 可以写自己喜欢的英文

4.消息解密方式 我这里用的是 明文 ,可以根据项目需求来修改

5.完整代码

5.1 控制器

/**
 * 微信公众号回调地址
 */
@RequestMapping(value = "/wxMpSendMsgCallBack")
public String shareTestCallBack(HttpServletRequest request) throws AesException {

    String msgSignature = request.getParameter("signature");
    String msgTimestamp = request.getParameter("timestamp");
    String msgNonce = request.getParameter("nonce");
    String echostr = request.getParameter("echostr");
    if (WXPublicUtils.verifyUrl(msgSignature, msgTimestamp, msgNonce)) {
        return echostr;
    }

    return s;
}

5.2 WXPublicUtils工具类 代码中xxxx改成设置中的token

package org.jeecg.modules.common.util.wxcallback;

public class WXPublicUtils {
    /**
     * 验证Token
     * @param msgSignature 签名串，对应URL参数的signature
     * @param timeStamp 时间戳，对应URL参数的timestamp
     * @param nonce 随机串，对应URL参数的nonce
     *
     * @return 是否为安全签名
     * @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息
     */
    public static boolean verifyUrl(String msgSignature, String timeStamp, String nonce)
            throws AesException {
        // 这里的 WXPublicConstants.TOKEN 填写你自己设置的Token就可以了
        String signature = SHA1.getSHA1("xxxxxxxxxxxxxxxx", timeStamp, nonce);
        if (!signature.equals(msgSignature)) {
            throw new AesException(AesException.ValidateSignatureError);
        }
        return true;
    }
}

5.3 SHA1类 用SHA1算法验证Token

package org.jeecg.modules.common.util.wxcallback;

import java.security.MessageDigest;
import java.util.Arrays;

public class SHA1 {

    /**
     * 用SHA1算法验证Token
     *
     * @param token     票据
     * @param timestamp 时间戳
     * @param nonce     随机字符串
     * @return 安全签名
     * @throws AesException
     */
    public static String getSHA1(String token, String timestamp, String nonce) throws AesException {
        try {
            String[] array = new String[]{token, timestamp, nonce};
            StringBuffer sb = new StringBuffer();
            // 字符串排序
            Arrays.sort(array);
            Arrays.sort(array);
            for (int i = 0; i < 3; i++) {
                sb.append(array[i]);
            }
            String str = sb.toString();
            // SHA1签名生成
            MessageDigest md = MessageDigest.getInstance("SHA-1");
            md.update(str.getBytes());
            byte[] digest = md.digest();

            StringBuffer hexstr = new StringBuffer();
            String shaHex = "";
            for (int i = 0; i < digest.length; i++) {
                shaHex = Integer.toHexString(digest[i] & 0xFF);
                if (shaHex.length() < 2) {
                    hexstr.append(0);
                }
                hexstr.append(shaHex);
            }
            return hexstr.toString();
        } catch (Exception e) {
            e.printStackTrace();
            throw new AesException(AesException.ComputeSignatureError);
        }
    }
}

5.4 自定义异常类AesException

package org.jeecg.modules.common.util.wxcallback;
@SuppressWarnings("serial")
public class AesException extends Exception {

    public final static int OK = 0;
    public final static int ValidateSignatureError = -40001;
    public final static int ParseXmlError = -40002;
    public final static int ComputeSignatureError = -40003;
    public final static int IllegalAesKey = -40004;
    public final static int ValidateAppidError = -40005;
    public final static int EncryptAESError = -40006;
    public final static int DecryptAESError = -40007;
    public final static int IllegalBuffer = -40008;
    public final static int EncodeBase64Error = -40009;
    public final static int DecodeBase64Error = -40010;
    public final static int GenReturnXmlError = -40011;

    private int code;

    private static String getMessage(int code) {
        switch (code) {
            case ValidateSignatureError:
                return "签名验证错误";
            case ParseXmlError:
                return "xml解析失败";
            case ComputeSignatureError:
                return "sha加密生成签名失败";
            case IllegalAesKey:
                return "SymmetricKey非法";
            case ValidateAppidError:
                return "appid校验失败";
            case EncryptAESError:
                return "aes加密失败";
            case DecryptAESError:
                return "aes解密失败";
            case IllegalBuffer:
                return "解密后得到的buffer非法";
            case EncodeBase64Error:
                return "base64加密错误";
            case DecodeBase64Error:
                return "base64解密错误";
            case GenReturnXmlError:
                return "xml生成失败";
            default:
                return null;
        }
    }

    public int getCode() {
        return code;
    }

    public AesException(int code) {
        super(getMessage(code));
        this.code = code;
    }
}
ll;
        }
    }

    public int getCode() {
        return code;
    }

    public AesException(int code) {
        super(getMessage(code));
        this.code = code;
    }
}

6.配置nginx服务

在niginx中配置 访问域名跳转到刚才回调地址对应的端口 我的是8599