微信服务器与应用程序交互-客户输入及关注、取关等事件

  /**

     * 验证签名

     * @param signature

     * @param timestamp

     * @param nonce

     * @return

     */

    public static boolean checkSignature(String signature, String timestamp, String nonce,String tonken){

        String[] arr = new String[]{tonken, timestamp, nonce};

        // 1.将 token, timestamp, nonce 三个参数进行字典排序

        Arrays.sort(arr);

        StringBuilder content = new StringBuilder();

        for(int i = 0; i < arr.length; i++){

            content.append(arr[i]);//链接成字符串

        }

        MessageDigest md = null;

        String tmpStr = null;

        try {

                // 3.将三个参数字符串拼接成一个字符串进行 shal 加密

            md = MessageDigest.getInstance("SHA-1");

            byte[] digest = md.digest(content.toString().getBytes());

            tmpStr = byteToStr(digest);

        } catch (NoSuchAlgorithmException e) {

            // TODO Auto-generated catch block

            e.printStackTrace();

        }

        content = null;

        // 将sha1加密后的字符串可与signature对比，标识该请求来源于微信

        return tmpStr != null ? tmpStr.equals(signature.toUpperCase()): false;

    }

    /**

     * 将字节数组转换为十六进制字符串

     * @param digest

     * @return

     */

    private static String byteToStr(byte[] digest) {

        // TODO Auto-generated method stub

        String strDigest = "";

        for(int i = 0; i < digest.length; i++){

            strDigest += byteToHexStr(digest[i]);

        }

        return strDigest;

    }

    /**

     * 将字节转换为十六进制字符串

     * @param b

     * @return

     */

    private static String byteToHexStr(byte b) {

        // TODO Auto-generated method stub

        char[] Digit = {'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A', 'B', 'C', 'D', 'E', 'F'};

        char[] tempArr = new char[2];

        tempArr[0] = Digit[(b >>> 4) & 0X0F];

        tempArr[1] = Digit[b & 0X0F];

        String s = new String(tempArr);

        return s;

    }