sign签名验签方案及代码

 

 

序列图

流程图

源码

SignUtils

package com.hnu.sign;

import java.io.UnsupportedEncodingException;
import java.util.Arrays;
import java.util.Map;
import java.util.Set;
/**
 * @description:
 * @author: yuanhx
 * @create: 2020/12/23
 */
public class SignUtils {

    /**
     * @Description: 生成sign
     * @Param:  * @params : map集合参数
     * @param @appSecret appSecret
     * @return: 返回sign
     * @Author: yuanhx
     * @date: 2020/12/23
    */
    public static String generateSign(Map<String, Object> params, String appSecret) throws UnsupportedEncodingException {
        Set<String> keysSet = params.keySet();
        Object[] keys = keysSet.toArray();
        Arrays.sort(keys);
        StringBuilder temp = new StringBuilder();
        boolean first = true;
        for (Object key : keys) {
            Object value = params.get(key);
            String valueString = "";
            if (null != value && "" != value) {
                valueString = key + String.valueOf(value);
            }
            temp.append(valueString);
        }
        temp.append(appSecret);
//        StringBuilder temp2 = new StringBuilder();
//        temp2.append(appSecret);
//        temp2.append(temp);
        return MD5Util.md5Encrypt32Upper(temp.toString()).toUpperCase();

//        MessageDigest md = MessageDigest.getInstance("SHA-1");
//        return byte2hex(md.digest(sb.toString().getBytes("UTF-8")));
    }

    private static String byte2hex(byte[] bytes) {
        StringBuilder sign = new StringBuilder();
        for (int i = 0; i < bytes.length; i++) {
            String hex = Integer.toHexString(bytes[i] & 0xFF);
            if (hex.length() == 1) {
                sign.append("0");
            }
            sign.append(hex.toUpperCase());
        }
        return sign.toString();
    }

    /**
     * @Description: map转string结果
     * @Params:  * @param null :
     * @return:
     * @Author: yuanhx
     * @date: 2020/12/23
    */
    public static String mapToString(Map<String, Object> params){
        Set<String> keysSet = params.keySet();
        // 参数按照ANSII排序
        Object[] keys = keysSet.toArray();
        Arrays.sort(keys);

        StringBuilder temp = new StringBuilder();
        boolean first = true;
        for (Object key : keys) {
            if (first) {
                first = false;
            } else {
                temp.append("&");
            }
            temp.append(key).append("=");
            Object value = params.get(key);
            String valueString = "";
            if (null != value) {
                valueString = String.valueOf(value);
            }
            temp.append(valueString);
        }
        return temp.toString();
    }
}

MD5Util 

package com.hnu.sign;

import java.io.UnsupportedEncodingException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.regex.Matcher;
import java.util.regex.Pattern;

/**
 * 1.MD5加密字符串（32位大写）
 * 2.MD5加密字符串（32位小写）
 * <p>
 * MD5在线加密：https://md5jiami.51240.com/
 * 3.将二进制字节数组转换为十六进制字符串
 * 4.Unicode中文编码转换成字符串
 */
public class MD5Util {

    /**
     * MD5加密字符串（32位大写）
     *
     * @param string 需要进行MD5加密的字符串
     * @return 加密后的字符串（大写）
     */
    public static String md5Encrypt32Upper(String string) {
        byte[] hash;
        try {
            //创建一个MD5算法对象，并获得MD5字节数组,16*8=128位
            hash = MessageDigest.getInstance("MD5").digest(string.getBytes("UTF-8"));
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException("Huh, MD5 should be supported?", e);
        } catch (UnsupportedEncodingException e) {
            throw new RuntimeException("Huh, UTF-8 should be supported?", e);
        }

        //转换为十六进制字符串
        StringBuilder hex = new StringBuilder(hash.length * 2);
        for (byte b : hash) {
            if ((b & 0xFF) < 0x10) hex.append("0");
            hex.append(Integer.toHexString(b & 0xFF));
        }
        return hex.toString().toUpperCase();
    }

    /**
     * MD5加密字符串（32位小写）
     *
     * @param string 需要进行MD5加密的字符串
     * @return 加密后的字符串（小写）
     */
    public static String md5Encrypt32Lower(String string) {
        byte[] hash;
        try {
            //创建一个MD5算法对象，并获得MD5字节数组,16*8=128位
            hash = MessageDigest.getInstance("MD5").digest(string.getBytes("UTF-8"));
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException("Huh, MD5 should be supported?", e);
        } catch (UnsupportedEncodingException e) {
            throw new RuntimeException("Huh, UTF-8 should be supported?", e);
        }

        //转换为十六进制字符串
        StringBuilder hex = new StringBuilder(hash.length * 2);
        for (byte b : hash) {
            if ((b & 0xFF) < 0x10) hex.append("0");
            hex.append(Integer.toHexString(b & 0xFF));
        }
        return hex.toString().toLowerCase();
    }

    /**
     * 将二进制字节数组转换为十六进制字符串
     *
     * @param bytes 二进制字节数组
     * @return 十六进制字符串
     */
    public static String bytesToHex(byte[] bytes) {
        StringBuffer hexStr = new StringBuffer();
        int num;
        for (int i = 0; i < bytes.length; i++) {
            num = bytes[i];
            if (num < 0) {
                num += 256;
            }
            if (num < 16) {
                hexStr.append("0");
            }
            hexStr.append(Integer.toHexString(num));
        }
        return hexStr.toString().toUpperCase();
    }

    /**
     * Unicode中文编码转换成字符串
     */
    public static String unicodeToString(String str) {
        Pattern pattern = Pattern.compile("(\\\\u(\\p{XDigit}{4}))");
        Matcher matcher = pattern.matcher(str);
        char ch;
        while (matcher.find()) {
            ch = (char) Integer.parseInt(matcher.group(2), 16);
            str = str.replace(matcher.group(1), ch + "");
        }
        return str;
    }
}

HttpUtil 

package com.hnu.sign;

/**
 * @description:
 * @author: yuanhx
 * @create: 2020/12/23
 */
import java.io.BufferedReader;
import java.io.DataOutputStream;
import java.io.InputStreamReader;
import java.net.HttpURLConnection;
import java.net.URL;
import java.util.List;
import java.util.Map;

/**
 * http 工具类
 */
public class HttpUtil {

    public static String post(String requestUrl, String accessToken, String params)
            throws Exception {
        String contentType = "application/x-www-form-urlencoded";
        return HttpUtil.post(requestUrl, accessToken, contentType, params);
    }

    public static String post(String requestUrl, String accessToken, String contentType, String params)
            throws Exception {
        String encoding = "UTF-8";
        if (requestUrl.contains("nlp")) {
            encoding = "GBK";
        }
        return HttpUtil.post(requestUrl, accessToken, contentType, params, encoding);
    }

    public static String post(String requestUrl, String accessToken, String contentType, String params, String encoding)
            throws Exception {
        String url = requestUrl + "?access_token=" + accessToken;
        return HttpUtil.postGeneralUrl(url, contentType, params, encoding);
    }

    public static String postGeneralUrl(String generalUrl, String contentType, String params, String encoding)
            throws Exception {
        URL url = new URL(generalUrl);
        // 打开和URL之间的连接
        HttpURLConnection connection = (HttpURLConnection) url.openConnection();
        connection.setRequestMethod("POST");
        // 设置通用的请求属性
        connection.setRequestProperty("Content-Type", contentType);
        connection.setRequestProperty("Connection", "Keep-Alive");
        connection.setUseCaches(false);
        connection.setDoOutput(true);
        connection.setDoInput(true);

        // 得到请求的输出流对象
        DataOutputStream out = new DataOutputStream(connection.getOutputStream());
        out.write(params.getBytes(encoding));
        out.flush();
        out.close();

        // 建立实际的连接
        connection.connect();
        // 获取所有响应头字段
        Map<String, List<String>> headers = connection.getHeaderFields();
        // 遍历所有的响应头字段
        for (String key : headers.keySet()) {
            System.err.println(key + "--->" + headers.get(key));
        }
        // 定义 BufferedReader输入流来读取URL的响应
        BufferedReader in = null;
        in = new BufferedReader(
                new InputStreamReader(connection.getInputStream(), encoding));
        String result = "";
        String getLine;
        while ((getLine = in.readLine()) != null) {
            result += getLine;
        }
        in.close();
        System.err.println("result:" + result);
        return result;
    }
}

Demo 

package com.hnu.sign;

import java.util.HashMap;
import java.util.Map;

/**
 * @description:
 * @author: yuanhx
 * @create: 2020/12/23
 */
public class Demo {

    /** appKey **/
    static String appKey = "123456";

    /** appSecret**/
    static String appSecret = "youreAppSecret";

    static String nonce = "1211111";

    static String url = "http://XXX.api.XXX.cn/API/XXX?username=abc&password=bbc&product=XXXX";

    public static void main(String[] args) throws Exception {

        Map<String, Object> paramMap = new HashMap();
        long timestamp =System.currentTimeMillis();
        /*验签必须3数*/
        paramMap.put("timestamp",timestamp);
        paramMap.put("nonce", nonce);
        paramMap.put("appKey", appKey);

        paramMap.put("url", "http://XXX.api.XXX.cn/API/XXX");
        paramMap.put("username", "abc");
        paramMap.put("password", "bbc");
        paramMap.put("version", "1.2.0");
        paramMap.put("method", "");
        // body体数据对象
        paramMap.put("params", "{\"assignNo\":\"TEST018\"}");
        String sign = SignUtils.generateSign(paramMap,appSecret);

        System.out.println("sign:"+sign);
//        Map map = new HashMap();
//        map.put("timestamp",timestamp);
//        map.put("sign",sign);
//        String params = SignUtils.mapToString(map);
//        String result = HttpUtil.postGeneralUrl(url,"application/x-www-form-urlencoded;charset=UTF-8",
//                params, "UTF-8");
//        System.out.println(result);
    }
}