微信公众号服务器配置------token验证（java版）_微信公众号验证tokenjava版-优快云博客

本文详细介绍了一个简单的微信公众号接入流程，包括设置Token、实现CoreServlet处理请求、使用SignUtil进行签名验证。通过三个核心文件Constant、CoreServlet和SignUtil，演示了如何在服务器上部署并验证微信公众号。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

做一个简单的小项目，放到服务器tomcat的webapps下，启动项目，访问成功，即可保存服务器的配置

需要三个文件：

1、Constant：

package com.xkx.constants;

public class Constant {
// ��ӿ��Ϣ�е�TokenҪһ��
public final static String TOKEN = "xxxxxxx你的token值";
}

2、CoreServlet

import java.io.PrintWriter;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.xkx.util.SignUtil;

/**
* ��
*
*/
@SuppressWarnings("serial")
public class CoreServlet extends HttpServlet {

/**
* ȷ��΢�ŷ��
*/
public void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
// ΢�ż��ǩ��
System.out.println("---验证开始---");
String signature = request.getParameter("signature");
System.out.println("--1--"+signature);
// ʱ��
String timestamp = request.getParameter("timestamp");
System.out.println("--2--"+timestamp);
// ��
String nonce = request.getParameter("nonce");
System.out.println("--3--"+nonce);
// ��ַ�
String echostr = request.getParameter("echostr");
System.out.println("--4--"+echostr);

PrintWriter out = response.getWriter();
// ͨ��signature��У�飬��У��ɹ��ԭ��echostr��ʾ��ɹ��ʧ��
if (SignUtil.checkSignature(signature, timestamp, nonce)) {
System.out.println("--9--");
out.print(echostr);
System.out.println("--10--"+echostr);
System.out.println("--验证结束--");
}
out.close();
out = null;
}

/**
* ��΢�ŷ��Ϣ
*/
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
}

}

3、SignUtil

package com.xkx.util;

import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Arrays;

import com.xkx.constants.Constant;

/**
* ��У�鹤��
*
*/
public class SignUtil {

/**
* ��֤ǩ��
*
* @param signature
* @param timestamp
* @param nonce
* @return
*/
public static boolean checkSignature(String signature, String timestamp,
String nonce) {
String[] arr = new String[] { Constant.TOKEN, timestamp, nonce };
System.out.println("--5--"+arr);
// ��token��timestamp��nonce��ֵ��
Arrays.sort(arr);
StringBuilder content = new StringBuilder();
for (int i = 0; i < arr.length; i++) {
content.append(arr[i]);
System.out.println("--6--"+arr[i]);
}
MessageDigest md = null;
String tmpStr = null;

try {
md = MessageDigest.getInstance("SHA-1");
// ��ַ�ƴ�ӳ�һ��ַ��sha1��
byte[] digest = md.digest(content.toString().getBytes());
System.out.println("--7--"+digest);
tmpStr = byteToStr(digest);
System.out.println("--8--"+tmpStr);
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}

content = null;
// ��sha1��ܺ��ַ��signature�Աȣ��ʶ��Դ��΢��
return tmpStr != null ? tmpStr.equals(signature.toUpperCase()) : false;
}

/**
* ��ֽ��ת��Ϊʮ��ַ�
*
* @param byteArray
* @return
*/
private static String byteToStr(byte[] byteArray) {
String strDigest = "";
for (int i = 0; i < byteArray.length; i++) {
strDigest += byteToHexStr(byteArray[i]);
}
return strDigest;
}

/**
* ��ֽ�ת��Ϊʮ��ַ�
*
* @param mByte
* @return
*/
private static String byteToHexStr(byte mByte) {
char[] Digit = { '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A',
'B', 'C', 'D', 'E', 'F' };
char[] tempArr = new char[2];
tempArr[0] = Digit[(mByte >>> 4) & 0X0F];
tempArr[1] = Digit[mByte & 0X0F];

String s = new String(tempArr);
return s;
}
}